[bug-notifications] [curl 0005098]: curl fails to connect to any site over SSL

[Mantis Bug Tracker]

A NOTE has been added to this issue. 
====================================================================== 
https://www.opencsw.org/mantis/view.php?id=5098 
====================================================================== 
Reported By:                soladmin
Assigned To:                dam
====================================================================== 
Project:                    curl
Issue ID:                   5098
Category:                   regular use
Reproducibility:            always
Severity:                   major
Priority:                   normal
Status:                     assigned
====================================================================== 
Date Submitted:             2013-08-02 21:39 CEST
Last Modified:              2013-08-05 11:01 CEST
====================================================================== 
Summary:                    curl fails to connect to any site over SSL
Description: 
Solaris 10 using opencsw's kiel repository.  Curl always fails when
connecting to any system using SSL.


# curl -v  https://google.com/
* About to connect() to google.com port 443
(https://www.opencsw.org/mantis/view.php?id=0)
*   Trying 173.194.46.32...
* connected
* Connected to google.com (173.194.46.32) port 443
(https://www.opencsw.org/mantis/view.php?id=0)
* successfully set certificate verify locations:
*   CAfile: none
  CApath: /opt/csw/ssl/certs
* SSLv3, TLS handshake, Client hello (1):
* SSLv3, TLS handshake, Server hello (2):
* SSLv3, TLS handshake, CERT (11):
* SSLv3, TLS alert, Server hello (2):
* error:800960A0:lib(128):PK11_DIGEST_COPY:C_GetOperationState failed
* Closing connection https://www.opencsw.org/mantis/view.php?id=0
curl: (35) error:800960A0:lib(128):PK11_DIGEST_COPY:C_GetOperationState
failed
====================================================================== 

---------------------------------------------------------------------- 
 (0010511) dam (administrator) - 2013-08-05 11:01
 https://www.opencsw.org/mantis/view.php?id=5098#c10511 
---------------------------------------------------------------------- 
I just verified with unstable and it also fails to connect:


dam at login [login]:/home/dam > curl -v https://google.com
* About to connect() to google.com port 443
(https://www.opencsw.org/mantis/view.php?id=0)
*   Trying 74.125.136.138...
* connected
* Connected to google.com (74.125.136.138) port 443
(https://www.opencsw.org/mantis/view.php?id=0)
* successfully set certificate verify locations:
*   CAfile: none
  CApath: /opt/csw/ssl/certs
* SSLv3, TLS handshake, Client hello (1):
* SSLv3, TLS handshake, Server hello (2):
* SSLv3, TLS handshake, CERT (11):
* SSLv3, TLS handshake, Server key exchange (12):
* SSLv3, TLS handshake, Server finished (14):
* SSLv3, TLS handshake, Client key exchange (16):
* SSLv3, TLS change cipher, Client hello (1):
* Unknown SSL protocol error in connection to google.com:443 
* Closing connection https://www.opencsw.org/mantis/view.php?id=0
curl: (35) Unknown SSL protocol error in connection to google.com:443 
zsh: 13637 exit 35    curl -v https://google.com

However, there are also other issues reported against OpenSSL 1.0 bindings,
so these may be related.