Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

Handshake failure with "SSL error code -1/1/336032856" on OS X 10.7

Tags:

ssl

svn

osx-lion

svn co "https://example.com/svn" 
svn: OPTIONS of 'https://example.com/svn': SSL handshake failed: SSL error code -1/1/336032856 (https://example.com)

It works on Windows and Mac OX10.6, but it fails on Mac OSX10.7.

I've tried with the default /usr/bin/svn (version 1.6.16 (r1073529)), and the one of fink /sw/bin/svn (version 1.6.17 (r1128011)) I installed all OSX10.7 updates.

What can be the problem?

ps: I use a private svn repository; "https://example.com/svn" is just an example for this post.

like image 780
David Portabella Avatar asked Sep 09 '11 14:09

David Portabella


People also ask

What causes SSL handshake failure?

The SSL Handshake Error occurs if the read access has not been granted to the OS, thus preventing the web server from completing authentication. It indicates that the browser's connection to the web server isn't secure.

How do I fix error during SSL handshake with remote server?

Checking if there is an additional ssl. conf file which has replaced or added while copying the *. conf file during the transition of 2.2 to 2.4, This can cause conflicts as both the files will have the same directives and none of them will respond, Removing one of them and restarting httpd will fix the issue.

What happens if SSL handshake fails?

A TLS/SSL handshake failure occurs when a client and server cannot establish communication using the TLS/SSL protocol. When this error occurs in Apigee Edge, the client application receives an HTTP status 503 with the message Service Unavailable.


1 Answers

This question is answered in the Subversion FAQ. See *"When performing Subversion operations over SSL, I get the error SSL handshake failed...":

This can happen when the hostname reported by the server does not the match hostname given in the SSL certificate. Make sure your server configuration uses correct values for ServerName and NameVirtualHost.

A client-side fix is to update OpenSSL to version 1.0.0d.

like image 134
Bert Huijben Avatar answered Sep 29 '22 15:09

Bert Huijben