>> And it returns this kind of error >> error:14077438:SSL routines:SSL23_GET_SERVER_HELLO:tlsv1 alert internal >> error >> >> The site uses TLS 1.1, AES_128_CBC_SHA1, ECDHE-ECDSA. > > Perhaps there is a middlebox in the way that gets version negotiation wrong. Try adding the -tls1 flag. It returns this with -tls1. I use latest precompiled version "openssl-1.0.2a-i386-win32". So you can't reproduce it? It is local then. CONNECTED(000002FC) 3564:error:14094438:SSL routines:ssl3_read_bytes:tlsv1 alert internal error:.\ss l\s3_pkt.c:1461:SSL alert number 80 3564:error:1409E0E5:SSL routines:ssl3_write_bytes:ssl handshake failure:.\ssl\s3 _pkt.c:645: --- no peer certificate available --- No client certificate CA names sent --- SSL handshake has read 7 bytes and written 0 bytes --- New, (NONE), Cipher is (NONE) Secure Renegotiation IS NOT supported Compression: NONE Expansion: NONE No ALPN negotiated SSL-Session: Protocol : TLSv1 Cipher : 0000 Session-ID: Session-ID-ctx: Master-Key: Key-Arg : None PSK identity: None PSK identity hint: None SRP username: None Start Time: 1430070431 Timeout : 7200 (sec) Verify return code: 0 (ok)