[Bug 595415] Re: Curl (openssl) fails to open some https URLs with "illegal parameter" error

Mon Oct 15 05:49:12 UTC 2012

This issue has been fixed in precise.

 ca-certificates 20111211
 coreutils 8.13-3ubuntu3.1
 debconf 1.5.42ubuntu1
 dpkg 1.16.1.2ubuntu7
 gcc-4.6-base 4.6.3-1ubuntu5
 libacl1 2.2.51-5ubuntu1
 libasn1-8-heimdal 1.6~git20120311.dfsg.1-2
 libattr1 1:2.4.46-5ubuntu1
 libbz2-1.0 1.0.6-1
 libc-bin 2.15-0ubuntu10.3
 libc6 2.15-0ubuntu10.3
 libcomerr2 1.42-1ubuntu2
 libcurl3 7.22.0-3ubuntu4
 libdb5.1 5.1.25-11build1
 libgcc1 1:4.6.3-1ubuntu5
 libgcrypt11 1.5.0-3ubuntu0.1
 libgnutls26 2.12.14-5ubuntu3.1
 libgpg-error0 1.10-2ubuntu1
 libgssapi-krb5-2 1.10+dfsg~beta1-2ubuntu0.3
 libgssapi3-heimdal 1.6~git20120311.dfsg.1-2
 libhcrypto4-heimdal 1.6~git20120311.dfsg.1-2
 libheimbase1-heimdal 1.6~git20120311.dfsg.1-2
 libheimntlm0-heimdal 1.6~git20120311.dfsg.1-2
 libhx509-5-heimdal 1.6~git20120311.dfsg.1-2
 libidn11 1.23-2
 libk5crypto3 1.10+dfsg~beta1-2ubuntu0.3
 libkeyutils1 1.5.2-2
 libkrb5-26-heimdal 1.6~git20120311.dfsg.1-2
 libkrb5-3 1.10+dfsg~beta1-2ubuntu0.3
 libkrb5support0 1.10+dfsg~beta1-2ubuntu0.3
 libldap-2.4-2 2.4.28-1.1ubuntu4.1
 liblzma5 5.1.1alpha+20110809-3
 libp11-kit0 0.12-2ubuntu1
 libroken18-heimdal 1.6~git20120311.dfsg.1-2
 librtmp0 2.4~20110711.gitc28f1bab-1
 libsasl2-2 2.1.25.dfsg1-3ubuntu0.1
 libselinux1 2.1.0-4.1ubuntu1
 libsqlite3-0 3.7.9-2ubuntu1.1
 libssl1.0.0 1.0.1-4ubuntu5.5
 libtasn1-3 2.10-1ubuntu1.1
 libwind0-heimdal 1.6~git20120311.dfsg.1-2
 multiarch-support 2.15-0ubuntu10.3
 openssl 1.0.1-4ubuntu5.5
 perl-base 5.14.2-6ubuntu2.1
 tar 1.26-4ubuntu1
 tzdata 2012e-0ubuntu0.12.04.1
 xz-utils 5.1.1alpha+20110809-3
 zlib1g 1:1.2.3.4.dfsg-3ubuntu4

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to openssl in Ubuntu.
https://bugs.launchpad.net/bugs/595415

Title:
  Curl (openssl) fails to open some https URLs with "illegal parameter"
  error

Status in “curl” package in Ubuntu:
  Incomplete
Status in “openssl” package in Ubuntu:
  Confirmed

Bug description:
  Binary package hint: curl

  Some HTTPS urls cause curl to fail with an "illegal parameter" error.
  This error goes away if you manually specify "--sslv3"

  e.g.

  $ curl --version
  curl 7.19.7 (x86_64-pc-linux-gnu) libcurl/7.19.7 OpenSSL/0.9.8k zlib/1.2.3.3 libidn/1.15
  Protocols: tftp ftp telnet dict ldap ldaps http file https ftps
  Features: GSS-Negotiate IDN IPv6 Largefile NTLM SSL libz

  $ curl  https://www.orange.sk/
  curl: (35) error:14077417:SSL routines:SSL23_GET_SERVER_HELLO:sslv3 alert illegal parameter

  $ curl  --sslv3 https://www.orange.sk/
  <html xmlns="http://www.w3.org/1999/xhtml" xml:lang="sk" lang="sk">
  ...etc

  This is particularly problematic if using an application which uses
  libcurl, but does not allow setting of the --sslv3 flag, e.g. nagios's
  check_http utility.

  This redhat bug https://bugzilla.redhat.com/show_bug.cgi?id=525496
  appears to describe the same problem, and has a patch

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/curl/+bug/595415/+subscriptions