CentOS 5 git http operations give unable to access sslv3 alert handshake failure

[davedave2004]

Error : unable to access 'https://bitbucket.org/': error:14077410:SSL routines:SSL23_GET_SERVER_HELLO:sslv3 alert handshake failure

I know that this is because of the recent update. I just want to ask ideas on how to fix it.

CentOS 5 is no longer supported so I updated OpenSSL, Curl, and Git via source following a bunch of tutorials. Using curl can access sites using TLSv1.2, but I think git still uses the older version ?

curl -V -> curl 7.42.1 (i686-pc-linux-gnu) libcurl/7.42.1 OpenSSL/1.0.2a zlib/1.2.3 libidn/0.6.5

git --version -> git version 2.20.0.

Any help would be much appreciated.

[Stephen Sifers]

Hello Dave and welcome to the Community!

The error you are reporting looks to be a known issue with OpenSSL. There are known workarounds for this issue (Only one while apply as the other is a configuration change on server):

This bug was introduced as of OpenSSL v1.0+. Please downgrade your OpenSSL/0.9.8k on the client trying to clone from Bitbucket Server.

Read more here:

• http://razcx.wordpress.com/2013/02/19/curl-and-tomcat-ssl-routinesssl23_get_server_hellotlsv1-alert-internal-error/
• http://blog.techstacks.com/2008/09/securing-ssl-in-tomcat-part-two.html
• http://www.sslshopper.com/article-how-to-disable-weak-ciphers-and-ssl-2-in-tomcat.html

You can find more information pertaining to you error at Git clone fails with SSL routines:SSL23_GET_SERVER_HELLO.

If this does not help to resolve the issue, please let us know.

Regards,
Stephen Sifers

[davedave2004]

Thank you for your reply, not really sure what was the core problem but It works now when I updated to :

Git 2.20, cURL 7.60, OpenSSL 1.0.2q

but at first when I tried installing/updating these 3 with different configurations from guides that I read, still did not work. It worked when I removed most configurations haha. Not really a pro on installing software by source in linux.