LoginSignup
0
0

More than 5 years have passed since last update.

curl: (35) SSL connect error の対処したメモ

Last updated at Posted at 2018-10-16
$ sudo curl -L https://github.com/docker/compose/releases/download/1.16.1/docker-compose-`uname -s`-`uname -m` -o /usr/local/bin/docker-compose

curl: (35) SSL connect error

docker-compose をインストールしようとしたところ、エラー。
詳細を --verbose で確認してみます。

$ sudo curl -L --verbose https://github.com/docker/compose/releases/download/1.16.1/docker-compose-`uname -s`-`uname -m` -o /usr/local/bin/docker-compos

* About to connect() to github.com port 443 (#0)
*   Trying 192.30.255.112... connected
* Connected to github.com (192.30.255.112) port 443 (#0)
* Initializing NSS with certpath: sql:/etc/pki/nssdb
*   CAfile: /etc/pki/tls/certs/ca-bundle.crt
  CApath: none
* NSS error -12190
* Error in TLS handshake, trying SSLv3...

...中略...

* TLS disabled due to previous handshake failure
*   CAfile: /etc/pki/tls/certs/ca-bundle.crt
  CApath: none
* NSS error -12286
* Closing connection #0
* SSL connect error
curl: (35) SSL connect error

TLSのハンドシェイクでこけて、 SSLv3でつなぎにいこうとしてます。
nssをアップデートしてみます。

$ yum info nss
Loaded plugins: fastestmirror, priorities
Loading mirror speeds from cached hostfile
epel/metalink                                                                                                                                                                                              | 8.4 kB     00:00
 * base: ftp.riken.jp
 * epel: ftp.riken.jp
 * extras: ftp.riken.jp
 * updates: ftp.riken.jp
base                                                                                                                                                                                                       | 3.7 kB     00:00
epel                                                                                                                                                                                                       | 3.2 kB     00:00
epel/primary                                                                                                                                                                                               | 3.2 MB     00:02
epel                                                                                                                                                                                                                  12516/12516
extras                                                                                                                                                                                                     | 3.4 kB     00:00
groonga                                                                                                                                                                                                    | 2.9 kB     00:00
updates                                                                                                                                                                                                    | 3.4 kB     00:00
updates/primary_db                                                                                                                                                                                         | 1.9 MB     00:00
Installed Packages
Name        : nss
Arch        : x86_64
Version     : 3.16.1
Release     : 14.el6
Size        : 2.5 M
Repo        : installed
From repo   : CentOS
Summary     : Network Security Services
URL         : http://www.mozilla.org/projects/security/pki/nss/
License     : MPLv2.0
Description : Network Security Services (NSS) is a set of libraries designed to
            : support cross-platform development of security-enabled client and
            : server applications. Applications built with NSS can support SSL v2
            : and v3, TLS, PKCS #5, PKCS #7, PKCS #11, PKCS #12, S/MIME, X.509
            : v3 certificates, and other security standards.

Available Packages
Name        : nss
Arch        : i686
Version     : 3.36.0
Release     : 9.el6_10
Size        : 871 k
Repo        : updates
Summary     : Network Security Services
URL         : http://www.mozilla.org/projects/security/pki/nss/
License     : MPLv2.0
Description : Network Security Services (NSS) is a set of libraries designed to
            : support cross-platform development of security-enabled client and
            : server applications. Applications built with NSS can support SSL v2
            : and v3, TLS, PKCS #5, PKCS #7, PKCS #11, PKCS #12, S/MIME, X.509
            : v3 certificates, and other security standards.

Name        : nss
Arch        : x86_64
Version     : 3.36.0
Release     : 9.el6_10
Size        : 865 k
Repo        : updates
Summary     : Network Security Services
URL         : http://www.mozilla.org/projects/security/pki/nss/
License     : MPLv2.0
Description : Network Security Services (NSS) is a set of libraries designed to
            : support cross-platform development of security-enabled client and
            : server applications. Applications built with NSS can support SSL v2
            : and v3, TLS, PKCS #5, PKCS #7, PKCS #11, PKCS #12, S/MIME, X.509
            : v3 certificates, and other security standards.
$ yum update nss
Dependency Updated:
  nspr.x86_64 0:4.19.0-1.el6  nss-softokn.x86_64 0:3.14.3-23.3.el6_8  nss-softokn-freebl.x86_64 0:3.14.3-23.3.el6_8  nss-sysinit.x86_64 0:3.36.0-9.el6_10  nss-tools.x86_64 0:3.36.0-9.el6_10  nss-util.x86_64 0:3.36.0-1.el6

Complete!
# 再度実行

$ curl -L https://github.com/docker/compose/releases/download/1.16.1/docker-compose-`uname -s`-`uname -m` -o /usr/local/bin/docker-compose
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
100 8648k  100 8648k    0     0   750k      0  0:00:11  0:00:11 --:--:-- 1018k

実行できるようになりました。これで解決

実行環境

CentOS release 6.6 (Final) @ docker
Docker version 17.06.2-ce, build cec0b72

参考

https://qiita.com/n-i-e/items/41673fd16d7bd1189a29
https://qiita.com/YumaInaura/items/ef1130eb67a47fe0f2da

0
0
0

Register as a new user and use Qiita more conveniently

  1. You get articles that match your needs
  2. You can efficiently read back useful information
  3. You can use dark theme
What you can do with signing up
0
0