![]() ![]() For one thing, some curl versions (e.g., MacOS) supposedly don’t send SNI for -k/ -insecure. One troubleshooting step to try: update curl or compile it yourself from the sources and retry. To provide address for the same host but different ports.Įspecially if the site you’re trying to fetch from uses SNI: In that case you can use the -resolve option to specify the server name that gets used in the TLS client hello. It means you need several entries if you want ![]() Port number should be the number used for the specific protocol the It a sort of /etc/hosts alternative provided on the command line. Prevent the otherwise normally resolved address to be used. This, you can make the curl requests(s) use a specified address and Provide a custom address for a specific host and port pair. SSL termination is happening on HAPROXY machineįor troubleshooting this kind of problem, the -resolve option can be useful: curl -k -I -resolve.To me its not making any sense since in my understanding the purpose of -k is only to skip certificate verification $ curl -vvv -A SUKU$RANDOM -kĬurl: (35) Server aborted the SSL handshake ![]() * Connection #0 to host MYHOSTNAME left intactīut when I am opening same url with -k its failing. < Set-Cookie: JSESSIONID=1XXXXXXXX3E58093E816FE62D81 Path=/wex/ HttpOnly < Content-Type: text/html charset=ISO-8859-1 * TLS 1.2 connection using TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 When I am opening a url using curl without -k, my request is passing and I am able to see the expected result. ![]()
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |