Successful login using TLSv1

login_ok

➜  ~  curl -X POST -d '{"username":"[email protected]", "password":"password1" }'  -H 'Content-Type: application/json' https://mmdb-staging.nationalgeographic.com/api/v1/auth/login/ -i -c mmdbsessionid -v -1
* About to connect() to mmdb-staging.nationalgeographic.com port 443 (#0)
*   Trying 74.217.81.189... connected
* successfully set certificate verify locations:
*   CAfile: none
  CApath: /etc/ssl/certs
* SSLv3, TLS handshake, Client hello (1):
* SSLv3, TLS handshake, Server hello (2):
* SSLv3, TLS handshake, CERT (11):
* SSLv3, TLS handshake, Server finished (14):
* SSLv3, TLS handshake, Client key exchange (16):
* SSLv3, TLS change cipher, Client hello (1):
* SSLv3, TLS handshake, Finished (20):
* SSLv3, TLS change cipher, Client hello (1):
* SSLv3, TLS handshake, Finished (20):
* SSL connection using RC4-MD5
* Server certificate:
* 	 subject: OU=GT33481034; OU=See www.rapidssl.com/resources/cps (c)15; OU=Domain Control Validated - RapidSSL(R); CN=*.nationalgeographic.com
* 	 start date: 2015-07-21 18:40:32 GMT
* 	 expire date: 2017-07-22 16:03:43 GMT
* 	 subjectAltName: mmdb-staging.nationalgeographic.com matched
* 	 issuer: C=US; O=GeoTrust Inc.; CN=RapidSSL SHA256 CA - G3
* 	 SSL certificate verify ok.
> POST /api/v1/auth/login/ HTTP/1.1
> User-Agent: curl/7.22.0 (x86_64-pc-linux-gnu) libcurl/7.22.0 OpenSSL/1.0.1 zlib/1.2.3.4 libidn/1.23 librtmp/2.3
> Host: mmdb-staging.nationalgeographic.com
> Accept: */*
> Content-Type: application/json
> Content-Length: 66
> 
* upload completely sent off: 66out of 66 bytes
< HTTP/1.1 200 OK
HTTP/1.1 200 OK
< Server: nginx/1.6.0
Server: nginx/1.6.0
< Date: Wed, 19 Aug 2015 20:18:42 GMT
Date: Wed, 19 Aug 2015 20:18:42 GMT
< Content-Type: application/json
Content-Type: application/json
< Content-Length: 21
Content-Length: 21
< Connection: keep-alive
Connection: keep-alive
< Vary: Accept-Encoding
Vary: Accept-Encoding
< Vary: Accept,Cookie
Vary: Accept,Cookie
< Allow: POST
Allow: POST
* Added cookie mmdbsessionid="x5yiyfynu3k36qrnl5ybihgd8xvnyqhs" for domain nationalgeographic.com, path /, expire 1455567530
< Set-Cookie: mmdbsessionid=x5yiyfynu3k36qrnl5ybihgd8xvnyqhs; Domain=.nationalgeographic.com; expires=Mon, 15-Feb-2016 20:18:51 GMT; httponly; Max-Age=15552000; Path=/
Set-Cookie: mmdbsessionid=x5yiyfynu3k36qrnl5ybihgd8xvnyqhs; Domain=.nationalgeographic.com; expires=Mon, 15-Feb-2016 20:18:51 GMT; httponly; Max-Age=15552000; Path=/
< X-Cache: MISS from platform-stage-proxy2.int.ngeo.com
X-Cache: MISS from platform-stage-proxy2.int.ngeo.com
< X-Cache-Lookup: MISS from platform-stage-proxy2.int.ngeo.com:80
X-Cache-Lookup: MISS from platform-stage-proxy2.int.ngeo.com:80
< Via: 1.0 platform-stage-proxy2.int.ngeo.com (squid/3.1.19)
Via: 1.0 platform-stage-proxy2.int.ngeo.com (squid/3.1.19)
< Server-Name: platform-stage-static2
Server-Name: platform-stage-static2

< 
* Connection #0 to host mmdb-staging.nationalgeographic.com left intact
* Closing connection #0
* SSLv3, TLS alert, Client hello (1):
{"user_id": 13161098}

ok_tls_cipher

kidsmyshot@myshot-dev:~$ curl -X POST -d '{"username":"[email protected]", "password":"password1" }'  -H 'Content-Type: application/json' https://mmdb-staging.nationalgeographic.com/api/v1/auth/login/ -v --tlsv1 --ciphers AES256-SHA
* About to connect() to mmdb-staging.nationalgeographic.com port 443 (#0)
*   Trying 74.217.81.189...
* connected
* Connected to mmdb-staging.nationalgeographic.com (74.217.81.189) port 443 (#0)
* successfully set certificate verify locations:
*   CAfile: none
  CApath: /etc/ssl/certs
* SSLv3, TLS handshake, Client hello (1):
* SSLv3, TLS handshake, Server hello (2):
* SSLv3, TLS handshake, CERT (11):
* SSLv3, TLS handshake, Server finished (14):
* SSLv3, TLS handshake, Client key exchange (16):
* SSLv3, TLS change cipher, Client hello (1):
* SSLv3, TLS handshake, Finished (20):
* SSLv3, TLS change cipher, Client hello (1):
* SSLv3, TLS handshake, Finished (20):
* SSL connection using AES256-SHA
* Server certificate:
* 	 subject: OU=GT33481034; OU=See www.rapidssl.com/resources/cps (c)15; OU=Domain Control Validated - RapidSSL(R); CN=*.nationalgeographic.com
* 	 start date: 2015-07
* 	 expire date: 2017-07
* 	 subjectAltName: mmdb-staging.nationalgeographic.com matched
* 	 issuer: C=US; O
* 	 SSL certificate verify ok.
> POST /api/v1/auth/login/ HTTP/1.1
> User-Agent: curl/7.27.0
> Host: mmdb-staging.nationalgeographic.com
> Accept: */*
> Content-Type: application/json
> Content-Length: 66
> 
* upload completely sent off: 66 out of 66 bytes
* additional stuff not fine transfer.c:1037: 0 0
* additional stuff not fine transfer.c:1037: 0 0
* HTTP 1.1 or later with persistent connection, pipelining supported
< HTTP/1.1 200 OK
< Server: nginx/1.6.0
< Date: Wed, 26 Aug 2015 15:34:35 GMT
< Content-Type: application/json
< Content-Length: 21
< Connection: keep-alive
< Vary: Accept-Encoding
< Vary: Accept,Cookie
< Allow: POST
< Set-Cookie: mmdbsessionid=uo2jcckqhj5ps3znindyqpcbsugxmpwf; Domain=.nationalgeographic.com; expires=Mon, 22-Feb-2016 15:30:59 GMT; httponly; Max-Age=15552000; Path=/
< X-Cache: MISS from platform-stage-proxy2.int.ngeo.com
< X-Cache-Lookup: MISS from platform-stage-proxy2.int.ngeo.com:80
< Via: 1.0 platform-stage-proxy2.int.ngeo.com (squid/3.1.19)
< Server-Name: platform-stage-static1
< 
* Connection #0 to host mmdb-staging.nationalgeographic.com left intact
{"user_id": 13161098}* Closing connection #0
* SSLv3, TLS alert, Client hello (1):