Running cURL against ttbonline.gov

The below logs are from running cURL on Ubuntu 14.04 LTS, against https://www.ttbonline.gov. The results are the same whether or not --head is used.

Output

Running curl with the default options:

$ curl --head --verbose https://www.ttbonline.gov

* Rebuilt URL to: https://www.ttbonline.gov/
* Hostname was NOT found in DNS cache
*   Trying 166.123.211.118...
* Connected to www.ttbonline.gov (166.123.211.118) port 443 (#0)
* successfully set certificate verify locations:
*   CAfile: none
  CApath: /etc/ssl/certs
* SSLv3, TLS handshake, Client hello (1):
* SSLv3, TLS alert, Server hello (2):
* error:14077410:SSL routines:SSL23_GET_SERVER_HELLO:sslv3 alert handshake failure
* Closing connection 0
curl: (35) error:14077410:SSL routines:SSL23_GET_SERVER_HELLO:sslv3 alert handshake failure

Running curl and forcing it to use SSLv3:

$ curl --sslv3 --head --verbose https://www.ttbonline.gov

* Rebuilt URL to: https://www.ttbonline.gov/
* Hostname was NOT found in DNS cache
*   Trying 166.123.211.118...
* Connected to www.ttbonline.gov (166.123.211.118) port 443 (#0)
* successfully set certificate verify locations:
*   CAfile: none
  CApath: /etc/ssl/certs
* SSLv3, TLS handshake, Client hello (1):
* SSLv3, TLS alert, Server hello (2):
* error:14094410:SSL routines:SSL3_READ_BYTES:sslv3 alert handshake failure
* Closing connection 0
curl: (35) error:14094410:SSL routines:SSL3_READ_BYTES:sslv3 alert handshake failure

Running curl and forcing it to use TLSv1.0:

$ curl --tlsv1.0 --head --verbose https://www.ttbonline.gov
* Rebuilt URL to: https://www.ttbonline.gov/
* Hostname was NOT found in DNS cache
*   Trying 166.123.211.118...
* Connected to www.ttbonline.gov (166.123.211.118) port 443 (#0)
* successfully set certificate verify locations:
*   CAfile: none
  CApath: /etc/ssl/certs
* SSLv3, TLS handshake, Client hello (1):
* SSLv3, TLS alert, Server hello (2):
* error:14077410:SSL routines:SSL23_GET_SERVER_HELLO:sslv3 alert handshake failure
* Closing connection 0
curl: (35) error:14077410:SSL routines:SSL23_GET_SERVER_HELLO:sslv3 alert handshake failure

Running curl and forcing it to use TLSv1.1:

$ curl --tlsv1.1 --head --verbose https://www.ttbonline.gov

* Rebuilt URL to: https://www.ttbonline.gov/
* Hostname was NOT found in DNS cache
*   Trying 166.123.211.118...
* Connected to www.ttbonline.gov (166.123.211.118) port 443 (#0)
* successfully set certificate verify locations:
*   CAfile: none
  CApath: /etc/ssl/certs
* SSLv3, TLS handshake, Client hello (1):
* SSLv3, TLS alert, Server hello (2):
* error:14077410:SSL routines:SSL23_GET_SERVER_HELLO:sslv3 alert handshake failure
* Closing connection 0
curl: (35) error:14077410:SSL routines:SSL23_GET_SERVER_HELLO:sslv3 alert handshake failure

Running curl and forcing it to use TLSv1.2:

$ curl --tlsv1.2 --head --verbose https://www.ttbonline.gov
* Rebuilt URL to: https://www.ttbonline.gov/
* Hostname was NOT found in DNS cache
*   Trying 166.123.211.118...
* Connected to www.ttbonline.gov (166.123.211.118) port 443 (#0)
* successfully set certificate verify locations:
*   CAfile: none
  CApath: /etc/ssl/certs
* SSLv3, TLS handshake, Client hello (1):
* SSLv3, TLS alert, Server hello (2):
* error:14077410:SSL routines:SSL23_GET_SERVER_HELLO:sslv3 alert handshake failure
* Closing connection 0
curl: (35) error:14077410:SSL routines:SSL23_GET_SERVER_HELLO:sslv3 alert handshake failure

konklone/curl.md

Output