The below error message I started seeing using Ubuntu 14.04 and was wondering if the forum has seen it because I cant seem much on the net for this:
perl -e 'use IO::Socket::SSL qw(debug3);IO::Socket::SSL->new(PeerAddr=>"10.0.0.100",PeerPort=> 443,Proto=>"TCP") or die $!'
DEBUG: .../IO/Socket/SSL.pm:1914: new ctx 14374608
DEBUG: .../IO/Socket/SSL.pm:402: socket not yet connected
DEBUG: .../IO/Socket/SSL.pm:404: socket connected
DEBUG: .../IO/Socket/SSL.pm:422: ssl handshake not started
DEBUG: .../IO/Socket/SSL.pm:455: not using SNI because hostname is unknown
DEBUG: .../IO/Socket/SSL.pm:491: Net::SSLeay::connect -> -1
DEBUG: .../IO/Socket/SSL.pm:1388: SSL connect attempt failed with unknown error
DEBUG: .../IO/Socket/SSL.pm:497: fatal SSL error: SSL connect attempt failed with unknown error error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed
DEBUG: .../IO/Socket/SSL.pm:1948: free ctx 14374608 open=14374608
DEBUG: .../IO/Socket/SSL.pm:1956: OK free ctx 14374608
IO::Socket::SSL: SSL connect attempt failed with unknown error error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed ...propagated at -e line 1.
?
---------- Post updated 09-24-14 at 10:04 AM ---------- Previous update was 09-23-14 at 04:23 PM ----------
I did some reading and it appears to be IO:Socket::SSL versions 1.56 or higher that has SNI Support where the client sends the hostname it want to connect, used if you have multiple SSL servers behind the same IP.
Before:
perl -e 'use IO::Socket::SSL qw(debug3);IO::Socket::SSL->new(PeerAddr=>"10.0.0.100",PeerPort=>
443,Proto=>"TCP",SSL_hostname => '10.0.0.100') or die $!'
DEBUG: .../IO/Socket/SSL.pm:1914: new ctx 17252256
DEBUG: .../IO/Socket/SSL.pm:402: socket not yet connected
DEBUG: .../IO/Socket/SSL.pm:404: socket connected
DEBUG: .../IO/Socket/SSL.pm:422: ssl handshake not started
DEBUG: .../IO/Socket/SSL.pm:452: using SNI with hostname d
DEBUG: .../IO/Socket/SSL.pm:491: Net::SSLeay::connect -> -1
DEBUG: .../IO/Socket/SSL.pm:1388: SSL connect attempt failed with unknown error
DEBUG: .../IO/Socket/SSL.pm:497: fatal SSL error: SSL connect attempt failed with unknown error error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed
DEBUG: .../IO/Socket/SSL.pm:1948: free ctx 17252256 open=17252256
DEBUG: .../IO/Socket/SSL.pm:1956: OK free ctx 17252256
IO::Socket::SSL: SSL connect attempt failed with unknown error error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate
verify failed ...propagated at -e line 1.
After with SNI disabled:
perl -e 'use IO::Socket::SSL qw(debug3);IO::Socket::SSL->new(SSL_hostname => '',PeerAddr=>"10.0.0.100",PeerPort=> 443,Proto=>"TCP") or die $!'
DEBUG: .../IO/Socket/SSL.pm:1914: new ctx 16772768
DEBUG: .../IO/Socket/SSL.pm:1948: free ctx 16772768 open=16772768
DEBUG: .../IO/Socket/SSL.pm:1956: OK free ctx 16772768
I read from here:
