CODEWITHSUNDEEP
facebookapachefacebook-graph-apicurlfacebook-javascript-sdk
Nate
Nate

Reputation: 28434

Facebook scraper doesn't work after disabling SSLv3 (sslv3 alert handshake failure)

I disabled SSLv3 on my server to protect users from the POODLE vulnerability, but since doing so Facebook's scraper no longer works on my sites (so sharing pages on facebook doesn't result in a share image, title, or description being pulled in).

When I try using the debug tool with a URL, it shows this error:

Curl Error : SSL_CONNECT_ERROR error:14077410:SSL routines:SSL23_GET_SERVER_HELLO:sslv3 alert handshake failure

I have been Googling and searching on here, but haven't been able to find much information on this.

Do I have to keep SSLv3 enabled in order to share pages on Facebook?

Upvotes: 0

Views: 232

Answers (1)

C3roe
C3roe

Reputation: 96417

I ran your domain through several SSL checkers, and weirdly sslcheck.globalsign.com complains that you had neither TLS v1.0, TLS v1.1 nor TLS v1.2 enabled.

Since other checkers are not reporting this (and Chrome says TLS v1.2 is used as well when I visit the site), one might suspect it to be an error of this particular tool – but since you’re having trouble with the FB scraper as well, it might indicate that there is something wrong with your configuration.

Upvotes: 1

Related Questions