cURL不受支持的SSL协议

问题描述:

我有一个cURL请求在通过我的PHP 5.4.48应用运行时失败。有趣的是,它直接通过控制台或Postman运行时正确执行。cURL不受支持的SSL协议

我连接的API需要TLSv1.2连接,我在我的应用程序中指定了它。

这里是我的简单的要求,因为它是在我的PHP应用程序:

$ch = curl_init(); 
curl_setopt($ch, CURLOPT_URL, 'https://dev-dataconnect.givex.com:50104'); 
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true); 
curl_setopt($ch, CURLOPT_POSTFIELDS,$payload); 

curl_setopt($ch, CURLOPT_POST, 1); 
curl_setopt($ch, CURLOPT_HTTPHEADER, array('Content-Type: text/plain;charset=UTF-8')); 
curl_setopt($ch, CURLOPT_SSLVERSION, 6); 
// curl_setopt($ch, CURLOPT_SSLVERSION, 'CURL_SSLVERSION_TLSv1_2'); // specifying value by name was of no help 
curl_setopt($ch, CURLOPT_SSL_CIPHER_LIST, 'TLS_RSA_WITH_AES_256_CBC_SHA256'); 

curl_exec($ch); 

原始卷曲的要求是这样的(注意,这从成功打响控制台内)

curl 'https://dev-dataconnect.givex.com:50104/' -H 'Accept-Encoding: gzip, deflate' -H 'Accept-Language: en-US,en;q=0.8' -H 'User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/47.0.2526.111 Safari/537.36' -H 'Content-Type: text/plain;charset=UTF-8' -H 'Accept: */*' -H 'Cache-Control: no-cache' -H 'Connection: keep-alive' --data-binary $'{"method":"dc_909","id":"confidential","jsonrpc":"2.0","params":["en","confidential","29530","confidential"]}\n' --compressed 

还要注意我并不需要指定SSL版本以进行成功的握手

以下是运行curl的打印输出-v'https://dev-dataconnect.givex.com:50104/'

* Connected to dev-dataconnect.givex.com (72.15.49.106) port 50104 (#0) 
* TLS 1.2 connection using TLS_RSA_WITH_AES_256_CBC_SHA256 
* Server certificate: *.givex.com 
* Server certificate: Trustwave Organization Validation SHA256 CA, Level 1 
* Server certificate: SecureTrust CA 
> GET/HTTP/1.1 
> Host: dev-dataconnect.givex.com:50104 
> User-Agent: curl/7.43.0 
> Accept: */* 

我跑

- PHP 5.4.48 
- curl 7.43.0 (within both my MAMP and my Mac environments) 
- OpenSSL/0.9.8zd (within both my MAMP and my Mac environments) 

我一直在排除故障自上周以来这个问题。有任何想法吗???

+1

是类似的问题? http://stackoverflow.com/questions/21612132/unsupported-protocol-using-curl-in-c –

+0

感谢但不是相同的问题。该海报试图在没有支持HTTPS的cURL安装的情况下发出HTTPS cURL请求。 –

+0

预期结果是什么? –

  • 的OpenSSL/0.9.8zd(我的两个MAMP内和我的Mac环境)

...

我连接到该API需要一个TLSv1.2工作连接,我在我的应用程序中指定。

OpenSSL 0.9.8不支持TLS 1.2。仅在OpenSSL 1.0.1中添加了支持。

+0

你是如何解决这个问题的?同样的问题我要去' – Rajesh

下面的代码对我的作品:

<?php 
$curl = curl_init(); 

curl_setopt_array($curl, array(
    CURLOPT_PORT => "50104", 
    CURLOPT_URL => "https://dev-dataconnect.givex.com:50104/", 
    CURLOPT_RETURNTRANSFER => true, 
    CURLOPT_ENCODING => "", 
    CURLOPT_MAXREDIRS => 10, 
    CURLOPT_TIMEOUT => 30, 
    CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1, 
    CURLOPT_CUSTOMREQUEST => "POST", 
    CURLOPT_POSTFIELDS => "{\"method\":\"dc_909\",\"id\":\"confidential\",\"jsonrpc\":\"2.0\",\"params\":[\"en\",\"confidential\",\"29530\",\"confidential\"]}", 
    CURLOPT_HTTPHEADER => array(
    "accept: */*", 
    "accept-encoding: gzip, deflate", 
    "accept-language: en-US,en;q=0.8", 
    "cache-control: no-cache", 
    "connection: keep-alive", 
    "content-type: text/plain;charset=UTF-8", 
    "user-agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/47.0.2526.111 Safari/537.36" 
), 
)); 

$response = curl_exec($curl); 
$err = curl_error($curl); 

curl_close($curl); 

if ($err) { 
    echo "cURL Error #:" . $err; 
} else { 
    echo $response; 
} 
?> 
+0

这使用版本1。1,而不是问题中指定的1.2。 – carbide20

步骤1:打开你的phpinfo()

第2步:转到cUrl部分

3步:检查SSL被启用。如果不是,您将面临Unsupported SSL Protocol错误。

解决方案:

尝试启用SSL在你的MAMP或安装最新版本MAMP的

enter image description here