Extension: SessionTicket TLS Type: SessionTicket TLS (0x0023) Length: 0 Data (0 bytes) I've seen this cause trouble on java-based servers, since it is the first extension that's 0 byte and servers can over-read and block. In openssl s_client, you can separately disable tls session tickets.. Does your request go through a java-based proxy? --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx