Re: connecting client tlsv1.0 to apache proxy tlsv1.1/tlsv1.2 is missing TLS-alert on close

[Samsul Arefin <bccarefin303@xxxxxxxxx>]

Hi Yann,

Thank for the mail.

I am Samsul. I am an Upwork freelancer and trying to improve my skill-set taking some online web development lessons. 

As you wanted to know, I am using Apache HTTP Server 2.4 & OpenSSL 1.1.0g 2 Nov 2017.

Regards.

On Wed, Jan 10, 2018 at 1:13 AM, Yann Ylavic <ylavic.dev@xxxxxxxxx> wrote:

Hi Michael,

On Tue, Jan 9, 2018 at 6:02 PM,  <michael.nguyen@xxxxxxxxxxxxxx> wrote:
>
> When I try to connect to the apache via curl with something like this "curl
> --tlsv1.0 --insecure https://test.localhost" and trace the network
> communication via wireshark you can see that the TLS-Alert is missing when
> the connection is closed. I added a screenshot in the attachements.

It works for me:

$ openssl version
OpenSSL 1.1.0f  25 May 2017

$ curl --tlsv1.0 --insecure https://localhost:8443
curl: (35) error:1407742E:SSL routines:SSL23_GET_SERVER_HELLO:tlsv1
alert protocol version

Which httpd and openssl versions are you using?


Regards,
Yann.

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx