CODEWITHSUNDEEP
curlopensslcentos
foureight84
foureight84

Reputation: 402

Centos 6 libCurl TLSv1 Error

I have a php script that hits an https url to grab data. I was on Centos 5 prior and this script didn't show any issues. However, after switching to Centos 6 the script stopped working and the error I keep getting is Unknown cipher in list: TLSv1.

In the php script I am forcing TLSv1:

curl_setopt($ch, CURLOPT_SSLVERSION, 1);
curl_setopt($ch, CURLOPT_SSL_CIPHER_LIST, 'TLSv1');

I'm not sure what's causing this to happen. Current Curl version is

curl 7.19.7 (x86_64-redhat-linux-gnu) libcurl/7.19.7 NSS/3.16.2.3 Basic ECC zlib/1.2.3 libidn/1.18 libssh2/1.4.2
Protocols: tftp ftp telnet dict ldap ldaps http file https ftps scp sftp 
Features: GSS-Negotiate IDN IPv6 Largefile NTLM SSL lib

OpenSSL Version:

OpenSSL 1.0.1e-fips 11 Feb 2013

Upvotes: 2

Views: 923

Answers (1)

Etan Reisner
Etan Reisner

Reputation: 80931

On CentOS 5 curl was built against OpenSSL.

On CentOS 6 curl is built against NSS.

They do not support the same cipher list strings. That being said I couldn't, in the short time I had to try it, get any cipher strings to work with curl+NSS.

Also, don't expect to be able to use custom certificate stores for root certificates/etc. with curl+NSS... you can't.

Upvotes: 3

Related Questions