blocks|key|2702233|text|从OpenSSL+1.0.1开始支持TLS1.1和TLS1.2|type|unstyled|depth|inlineStyleRanges|entityRanges|offset|length|data|2702234|强制TLS1.1和1.2仅在curl+7.34.0之后受支持|2702235|你应该考虑升级。|2702236|entityMap|0|LINK|mutability|MUTABLE|url|https://www.openssl.org/news/changelog.html#x31|1|https://curl.haxx.se/docs/manpage.html#--tlsv12^0|1|D|0|0|E|B|1|0|0^^$0|@$1|2|3|4|5|6|7|R|8|@]|9|@$A|S|B|T|1|U]]|C|$]]|$1|D|3|E|5|6|7|V|8|@]|9|@$A|W|B|X|1|Y]]|C|$]]|$1|F|3|G|5|6|7|Z|8|@]|9|@]|C|$]]|$1|H|3|-4|5|6|7|10|8|@]|9|@]|C|$]]]|I|$J|$5|K|L|M|C|$N|O]]|P|$5|K|L|M|C|$N|Q]]]]

TLS 1.1 and TLS 1.2 are supported since <a href="https://www.openssl.org/news/changelog.html#x31" rel="noreferrer">OpenSSL 1.0.1</a>

Forcing TLS 1.1 and 1.2 are only supported since <a href="https://curl.haxx.se/docs/manpage.html#--tlsv12" rel="noreferrer">curl 7.34.0</a>

You should consider an upgrade.

blocks|key|2702349|text|如上所述，必须使用整数值作为CURLOPT_SSLVERSION值，而不是a+string|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|2702350|试试这个：|2702351|curl_setopt+($setuploginurl,+CURLOPT_SSLVERSION,+CURL_SSLVERSION_TLSv1_2);+//+constant+NOT+string+value|code-block|syntax|javascript|2702352|http://php.net/manual/en/function.curl-setopt.php|2702353|option参数的下列值应为整数：CURLOPT_SSLVERSION|2702354|其中之一：|2702355|CURL_SSLVERSION_DEFAULT+(0)
CURL_SSLVERSION_TLSv1+(1)
CURL_SSLVERSION_SSLv2+(2)
CURL_SSLVERSION_SSLv3+(3)
CURL_SSLVERSION_TLSv1_0+(4)
CURL_SSLVERSION_TLSv1_1+(5)
CURL_SSLVERSION_TLSv1_2+(6)|2702356|entityMap|0|LINK|mutability|MUTABLE|url^0|E|I|0|0|0|0|1D|0|0|H|I|0|0|0^^$0|@$1|2|3|4|5|6|7|11|8|@$9|12|A|13|B|C]]|D|@]|E|$]]|$1|F|3|G|5|6|7|14|8|@]|D|@]|E|$]]|$1|H|3|I|5|J|7|15|8|@]|D|@]|E|$K|L]]|$1|M|3|N|5|6|7|16|8|@]|D|@$9|17|A|18|1|19]]|E|$]]|$1|O|3|P|5|6|7|1A|8|@$9|1B|A|1C|B|C]]|D|@]|E|$]]|$1|Q|3|R|5|6|7|1D|8|@]|D|@]|E|$]]|$1|S|3|T|5|J|7|1E|8|@]|D|@]|E|$K|L]]|$1|U|3|-4|5|6|7|1F|8|@]|D|@]|E|$]]]|V|$W|$5|X|Y|Z|E|$10|N]]]]

You must use an integer value for the <code>CURLOPT_SSLVERSION</code> value, not a string as listed above
Try this:
<pre><code>curl_setopt ($setuploginurl, CURLOPT_SSLVERSION, CURL_SSLVERSION_TLSv1_2); // constant NOT string value
</code></pre>
<a href="http://php.net/manual/en/function.curl-setopt.php" rel="nofollow noreferrer">http://php.net/manual/en/function.curl-setopt.php</a>
value should be an integer for the following values of the option parameter:
<code>CURLOPT_SSLVERSION </code>
One of:
<pre><code>CURL_SSLVERSION_DEFAULT (0)
CURL_SSLVERSION_TLSv1 (1)
CURL_SSLVERSION_SSLv2 (2)
CURL_SSLVERSION_SSLv3 (3)
CURL_SSLVERSION_TLSv1_0 (4)
CURL_SSLVERSION_TLSv1_1 (5)
CURL_SSLVERSION_TLSv1_2 (6)
</code></pre>

blocks|key|2914722|text|替换以下内容|type|unstyled|depth|inlineStyleRanges|entityRanges|data|2914723|curl_setopt+($setuploginurl,+CURLOPT_SSLVERSION,+'CURL_SSLVERSION_TLSv1_2');|code-block|syntax|javascript|2914724|使用|2914725|curl_setopt+($ch,+CURLOPT_SSLVERSION,+6);|2914726|应该可以完美地工作。|2914727|entityMap^0|0|0|0|0|0^^$0|@$1|2|3|4|5|6|7|O|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|P|8|@]|9|@]|A|$E|F]]|$1|G|3|H|5|6|7|Q|8|@]|9|@]|A|$]]|$1|I|3|J|5|D|7|R|8|@]|9|@]|A|$E|F]]|$1|K|3|L|5|6|7|S|8|@]|9|@]|A|$]]|$1|M|3|-4|5|6|7|T|8|@]|9|@]|A|$]]]|N|$]]

Replace following

<pre><code>curl_setopt ($setuploginurl, CURLOPT_SSLVERSION, 'CURL_SSLVERSION_TLSv1_2');
</code></pre>

With

<pre><code>curl_setopt ($ch, CURLOPT_SSLVERSION, 6);
</code></pre>

Should work flawlessly.

blocks|key|136339|text|我也遇到过类似的问题：|type|unstyled|depth|inlineStyleRanges|entityRanges|data|136340|136341|错误:条带不再支持使用TLS1.0发出的请求。请使用TLS+1.2或更高版本启动HTTPS连接。你可以在https://stripe.com/blog/upgrading-tls了解更多关于这方面的信息。|blockquote|offset|length|136342|136343|136344|使用CURL参数强制TLS+1.2是临时解决方案，甚至因为没有空间进行更新而无法应用。默认情况下，TLS测试函数https://gist.github.com/olivierbellone/9f93efe9bd68de33e9b3a3afbd3835cf显示如下配置：|136345|SSL+version:+NSS/3.21+Basic+ECC
SSL+version+number:+0
OPENSSL_VERSION_NUMBER:+1000105f
TLS+test+(default):+TLS+1.0
TLS+test+(TLS_v1):+TLS+1.2
TLS+test+(TLS_v1_2):+TLS+1.2|code-block|syntax|javascript|136346|我使用以下命令更新库：|136347|136348|+yum更新nss+curl+openssl|136349|136350|136351|然后看到了这个：|136352|SSL+version:+NSS/3.21+Basic+ECC
SSL+version+number:+0
OPENSSL_VERSION_NUMBER:+1000105f
TLS+test+(default):+TLS+1.2
TLS+test+(TLS_v1):+TLS+1.2
TLS+test+(TLS_v1_2):+TLS+1.2|136353|请注意，默认TLS版本已更改为1.2！这是一个全局解决的问题。这也将帮助PayPal用户：https://www.paypal.com/au/webapps/mpp/tls-http-upgrade+(在2017年6月底之前更新)|136354|entityMap|0|LINK|mutability|MUTABLE|url|https://stripe.com/blog/upgrading-tls|1|https://gist.github.com/olivierbellone/9f93efe9bd68de33e9b3a3afbd3835cf|2|https://www.paypal.com/au/webapps/mpp/tls-http-upgrade^0|0|0|1G|11|0|0|0|0|1K|1Z|1|0|0|0|0|0|0|0|0|0|19|1I|2|0^^$0|@$1|2|3|4|5|6|7|1F|8|@]|9|@]|A|$]]|$1|B|3|-4|5|6|7|1G|8|@]|9|@]|A|$]]|$1|C|3|D|5|E|7|1H|8|@]|9|@$F|1I|G|1J|1|1K]]|A|$]]|$1|H|3|-4|5|6|7|1L|8|@]|9|@]|A|$]]|$1|I|3|-4|5|6|7|1M|8|@]|9|@]|A|$]]|$1|J|3|K|5|6|7|1N|8|@]|9|@$F|1O|G|1P|1|1Q]]|A|$]]|$1|L|3|M|5|N|7|1R|8|@]|9|@]|A|$O|P]]|$1|Q|3|R|5|6|7|1S|8|@]|9|@]|A|$]]|$1|S|3|-4|5|6|7|1T|8|@]|9|@]|A|$]]|$1|T|3|U|5|E|7|1U|8|@]|9|@]|A|$]]|$1|V|3|-4|5|6|7|1V|8|@]|9|@]|A|$]]|$1|W|3|-4|5|6|7|1W|8|@]|9|@]|A|$]]|$1|X|3|Y|5|6|7|1X|8|@]|9|@]|A|$]]|$1|Z|3|10|5|N|7|1Y|8|@]|9|@]|A|$O|P]]|$1|11|3|12|5|6|7|1Z|8|@]|9|@$F|20|G|21|1|22]]|A|$]]|$1|13|3|-4|5|6|7|23|8|@]|9|@]|A|$]]]|14|$15|$5|16|17|18|A|$19|1A]]|1B|$5|16|17|18|A|$19|1C]]|1D|$5|16|17|18|A|$19|1E]]]]

I has similar problem in context of Stripe:

<blockquote>
 Error: Stripe no longer supports API requests made with TLS 1.0.
 Please initiate HTTPS connections with TLS 1.2 or later. You can learn
 more about this at <a href="https://stripe.com/blog/upgrading-tls" rel="noreferrer">https://stripe.com/blog/upgrading-tls</a>.
</blockquote>

Forcing TLS 1.2 using CURL parameter is temporary solution or even it can't be applied because of lack of room to place an update. By default TLS test function <a href="https://gist.github.com/olivierbellone/9f93efe9bd68de33e9b3a3afbd3835cf" rel="noreferrer">https://gist.github.com/olivierbellone/9f93efe9bd68de33e9b3a3afbd3835cf</a> showed following configuration:

<pre><code>SSL version: NSS/3.21 Basic ECC
SSL version number: 0
OPENSSL_VERSION_NUMBER: 1000105f
TLS test (default): TLS 1.0
TLS test (TLS_v1): TLS 1.2
TLS test (TLS_v1_2): TLS 1.2
</code></pre>

I updated libraries using following command:

<blockquote>
 yum update nss curl openssl
</blockquote>

and then saw this:

<pre><code>SSL version: NSS/3.21 Basic ECC
SSL version number: 0
OPENSSL_VERSION_NUMBER: 1000105f
TLS test (default): TLS 1.2
TLS test (TLS_v1): TLS 1.2
TLS test (TLS_v1_2): TLS 1.2
</code></pre>

Please notice that default TLS version changed to 1.2! That globally solved problem. This will help PayPal users too: <a href="https://www.paypal.com/au/webapps/mpp/tls-http-upgrade" rel="noreferrer">https://www.paypal.com/au/webapps/mpp/tls-http-upgrade</a> (update before end of June 2017)

blocks|key|135112|text|只有OpenSSL+1.0.1支持TLS+1.2+(请参阅Major+version+releases+section)，您必须更新您的OpenSSL。|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|135113|不需要设置CURLOPT_SSLVERSION选项。该请求涉及握手，该握手将应用服务器和客户端支持的最新TLS版本。您请求的服务器使用的是TLS+1.2，因此，如果您的php_curl版本是(或高于)+TLS+1.2，那么OpenSSL也将使用1.0.1+(默认情况下)。|135114|entityMap|0|LINK|mutability|MUTABLE|url|https://en.wikipedia.org/wiki/OpenSSL^0|2|D|H|7|1W|7|T|U|0|0|5|I|1G|3|1X|7|2C|8|2T|7|33|7|3E|5|0^^$0|@$1|2|3|4|5|6|7|P|8|@$9|Q|A|R|B|C]|$9|S|A|T|B|C]|$9|U|A|V|B|C]]|D|@$9|W|A|X|1|Y]]|E|$]]|$1|F|3|G|5|6|7|Z|8|@$9|10|A|11|B|C]|$9|12|A|13|B|C]|$9|14|A|15|B|C]|$9|16|A|17|B|C]|$9|18|A|19|B|C]|$9|1A|A|1B|B|C]|$9|1C|A|1D|B|C]]|D|@]|E|$]]|$1|H|3|-4|5|6|7|1E|8|@]|D|@]|E|$]]]|I|$J|$5|K|L|M|E|$N|O]]]]

<code>TLS 1.2</code> is only supported since <code>OpenSSL 1.0.1</code> (see the <a href="https://en.wikipedia.org/wiki/OpenSSL" rel="nofollow noreferrer">Major version releases section</a>), you have to update your <code>OpenSSL</code>.

It is not necessary to set the <code>CURLOPT_SSLVERSION</code> option. The request involves a handshake which will apply the newest <code>TLS</code> version both server and client support. The server you request is using <code>TLS 1.2</code>, so your <code>php_curl</code> will use <code>TLS 1.2</code> (by default) as well if your <code>OpenSSL</code> version is (or newer than) <code>1.0.1</code>.

I am having trouble curling an HTTPS url that uses TLS1.2, in my curl operation I post my login data into the website and save it in cookiefile.
The error message I am getting is this 

<pre><code> error:14077438:SSL routines:SSL23_GET_SERVER_HELLO:tlsv1 alert internal error
</code></pre>

I have tried setting <code>VERIFYPEER</code> and <code>VERIFYHOST</code> to 0 but that does not seem to work, any suggestions?

Here are the versions I am using:

<ul>
<li>OpenSSL version is 0.9.8b</li>
<li>CURL version is 7.24.0</li>
<li>PHP is 5.3 </li>
</ul>

Here is the code:

<pre><code>$setuplogin = curl_init(); 
curl_setopt ($setuploginurl, CURLOPT_URL, $url); 
curl_setopt ($setuploginurl, CURLOPT_SSL_VERIFYPEER, 1); 
curl_setopt ($setuploginurl, CURLOPT_SSL_VERIFYHOST, 1);
curl_setopt ($setuploginurl, CURLOPT_FOLLOWLOCATION, TRUE);
curl_setopt ($setuploginurl, CURLOPT_SSLVERSION, 'CURL_SSLVERSION_TLSv1_2');
curl_setopt ($setuploginurl, CURLOPT_POSTFIELDS, 'username=uname&amp;password=pword&amp;act=login&amp;submit=Login');
curl_setopt ($setuploginurl, CURLOPT_USERAGENT, "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36"); 
curl_setopt (setuploginurl, CURLOPT_TIMEOUT, 60); 
curl_setopt ($setuploginurl, CURLOPT_COOKIESESSION, TRUE); 
curl_setopt ($setuploginurl, CURLOPT_RETURNTRANSFER, 1);
curl_setopt ($setuploginurl, CURLOPT_HEADER, 1);
curl_setopt ($setuploginurl,CURLOPT_ENCODING,"gzip");
curl_setopt ($setuploginurl, CURLOPT_POST, true);
curl_setopt ($setuploginurl, CURLOPT_COOKIEJAR, 'cookies.txt'); 
curl_setopt ($setuploginurl, CURLOPT_FRESH_CONNECT , 1);

$loginp= curl_exec($setuploginurl); 
if ($loginp === FALSE) {
 die(curl_error($setuploginurl));
}

curl_close ($setuploginurl); 
var_dump ($loginp);
</code></pre>

TLS 1.2 not working in cURL

翻译质量差，导致语言生硬或混乱。

没有提供实际的解决方法或示例。

解答不清晰，无法理解或解决问题。

页面排版不美观，阅读体验差。

文章

问答

视频

学习中心

腾讯云实验室

直播

竞赛

腾讯云代码分析专区

腾讯iOA零信任安全管理系统专区

腾讯云架构师技术同盟交流圈

腾讯云数据库专区

腾讯云顾问专区

腾讯云原生专区

腾讯混元专区

腾讯云TCE专区

腾讯云Lighthouse专区

腾讯云HAI专区

腾讯云Edgeone专区

腾讯云存储专区

腾讯云智能专区

腾讯轻联专区 

腾讯云开发专区

TAPD专区

腾讯轻量云游戏服专区

腾讯云最具价值专家

腾讯云架构师技术同盟

腾讯云创作之星

腾讯云开发者先锋

腾讯云代码助手

云原生构建

TAPD 敏捷项目管理

Cloud Studio

SDK中心

API中心

命令行工具

涵盖代码开发、场景应用、自动测试全流程，助你从零构建专属AI助手

一站式MCP教程库，解锁AI应用新玩法

我在卷曲一个使用TLS1.2的HTTPS url时遇到了问题，在我的curl操作中，我将我的登录数据发布到网站并将其保存在cookiefile中。我得到的错误消息是 error:14077438:SSL routines:SSL23_GET_SERVER_HELLO:tlsv1 alert internal error...

问TLS1.2在cURL中不起作用
EN

社区

活动

圈层

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问TLS1.2在cURL中不起作用EN

社区

活动

圈层

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问TLS1.2在cURL中不起作用
EN