CODEWITHSUNDEEP
linuxbashopenssl
Szántó Ádám
Szántó Ádám

Reputation: 31

openssl doesn't work but in browser it does

I have to make some request to a https site via openssl. In the browser there is no problem at all, it's a simple GET request without any cookies, I watch it via fiddler. My problem is that I have to make this request via openssl and it waits too long and then I get an empty response.

It looks like:

(cat <REQUEST>; sleep 5) | openssl s_client -quiet -connect <HOST>:<PORT> > <variable>

I have many https sites and only one of them causes this. What could be the problem?

Upvotes: 1

Views: 800

Answers (1)

Sir Athos
Sir Athos

Reputation: 9867

Make sure you send all the headers your browser does. In particular, Referer and Accept may play a role in it (and Cookie, but you said there are no cookies).

Other than that, the server's SSL certificate may be unverifiable by your client. The browser is usually more forgiving, so your request would still be successful. If you can translate your request into a wget command (i.e. wget https://host:port/URL), if the certificate has a problem it will report something like "cannot verify <host>'s certificate". If you attempt the same request with wget --no-check-certificate https://host:port/URL and it succeeds, you'll know the certificate is the problem.

Upvotes: 1

Related Questions