On Fri, 2 Sep 2011, Daan Try wrote:

>>> SSL Library Error: 336068931 error:14080143:SSL
>>> routines:SSL3_ACCEPT:unsafe legacy renegotiation disabled
>>
>> Using OpenSSL? What OpenSSL version is this and do you happen to know what
>> drives the SSL layer in this particular server end?
>>
> How can I figure out what version of OpenSSL is used, just by looking at the
> installed library version? I have no control and no access to the server
> part, so I can probably not figure out what is running there.

Then it is certainly hard, yes. I'm not sure how valuable that info is in this
case anyway.

As the error message says, you get problems because the server seems to ask
for an "unsafe legacy renegotiation" and modern TLS implementations will not
agree to do that as that's a major security problem. Possibly you can ask the
admins of the particular server about this.

I found a decent summary of the renegotiation problem here:
http://lwn.net/Articles/362234/

-- 
  / daniel.haxx.se
-------------------------------------------------------------------
List admin: http://cool.haxx.se/list/listinfo/curl-library
Etiquette:  http://curl.haxx.se/mail/etiquette.html