> It is weird that it worked for you. Anyway I found a way how to fix it (if I can > call it "a fix"). The key is to provide a flag "-servername" > to enable SNI (Server Name Indication). It's not wrong to call it a fix. The server you are talking to is configured to require SNI, apparently. This is not an openssl issue/bug.