[Solved] Cannot connect to some secure sites

[thorsten]

Hello everybody,

I'm running archlinuxarm on my Cubietruck for about 2 years now and everything was fine until a few days ago.
Unfortunately I cannot connect to some secure websites any more and I don't know where to start searching for a solution.

For example if I try to test the ssl connection to framagit.org by using
$this->bbcode_second_pass_code('', 'openssl s_client -connect framagit.org:443 -state -nbio 2>&1 | grep "^SSL"')
I only get to
$this->bbcode_second_pass_code('', 'SSL_connect:before SSL initialization
SSL_connect:SSLv3/TLS write client hello
SSL_connect:error in SSLv3/TLS write client hello
')

Other sides are working fine, like github:
$this->bbcode_second_pass_code('', 'SSL_connect:before SSL initialization
SSL_connect:SSLv3/TLS write client hello
SSL_connect:error in SSLv3/TLS write client hello
SSL_connect:SSLv3/TLS write client hello
SSL_connect:SSLv3/TLS read server hello
SSL_connect:SSLv3/TLS read server certificate
SSL_connect:SSLv3/TLS read server key exchange
SSL_connect:SSLv3/TLS read server done
SSL_connect:SSLv3/TLS write client key exchange
SSL_connect:SSLv3/TLS write change cipher spec
SSL_connect:SSLv3/TLS write finished
SSL_connect:error in SSLv3/TLS write finished
SSL_connect:SSLv3/TLS write finished
SSL_connect:SSLv3/TLS read change cipher spec
SSL_connect:SSLv3/TLS read finished
SSL handshake has read 3586 bytes and written 302 bytes
')

Has anybody a hint for me how I can find the reason for this problem?

Thanks in advance,
Thorsten

[thorsten]

After some experiments I downgraded my openssl from 1.1.0 to 1.0.1 and somehow it worked.
Is there an issue with openssl 1.1.0?

Btw: I learned that one should be very careful when downgrading openssl. I nearly destroyed my archARM-Installation but finally I managed to get openssl 1.1.0 work again.

[thorsten]

So it is possible to install the openssl-1.0 package next to the openssl 1.1. and version 1.0 works fine for me.
Can I find the information when openssl 1.1 became default?

[thorsten]

Somehow IPV6 was activated on my router although I can't remember that I activated it.
After deactivating everything works fine again.

So if somebody has problems with openssl-connections "-4" for Use IPV4 or "-6" for IPV6 may be worth a try

Thread can be closed as solved (or must do this?).

[TheSaint]

Change the title on the first post by edit it.