3 ms·
I should have been clearer that I was just passing a cipher to get any response at all. Without the cipher, it hangs after the client hello send. I've updated
by zackmorris 14y ago
I should have been clearer that I was just passing a cipher to get any response at all. Without the cipher, it hangs after the client hello send. I've updated my question to reflect it.
- marshray 14y agoWorks for me: http://pastebin.com/MXk7NPC5 http://pastebin.com/MXk7NPC5
- zackmorris 14y agoHey thanks for posting a known-good result I can follow. I've apt-get updated/upgraded everything and run update-ca-certificates but still no luck. The MTU on our network is 1496 so that almost certainly must be the issue. I'll let everyone know if it is.
- marshray 14y agoSpeak of the PMTU ... http://www.daemonology.net/blog/2012-11-28-broken-EC2-firewall.html http://www.daemonology.net/blog/2012-11-28-broken-EC2-firewa... :-) Another interesting thing is that your connection is negotiating the use of TLS 1.1. If you have some type of man-in-the-middle box or stateful firewall, it may be getting upset by that. A full packet capture would be useful here.