Re: OpenSSL wrong version number error when using in-flight wifi

Rohan Ganapavarapu wrote:

> Only happens with some sites. I am on an united flight using in-flight wifi.
> 
> curl --version
> 
> curl 8.7.1 (x86_64-pc-linux-gnu) libcurl/8.7.1 OpenSSL/3.0.13 zlib/1.3.1 c-ares/1.28.1 libpsl/0.21.5 nghttp2/1.61.0
> Release-Date: 2024-03-27
>      Protocols: dict file ftp ftps http https imap imaps ipfs ipns mqtt pop3 pop3s rtsp smtp smtps tftp
>      Features: alt-svc AsynchDNS HSTS HTTP2 HTTPS-proxy IPv6 Largefile libz NTLM PSL threadsafe TLS-SRP UnixSockets
> 
> curl -v https://ollama.com
>       
>      * Host ollama.com:443 was resolved.
> * IPv6: (none)
> * IPv4: 34.120.132.20
> *   Trying 34.120.132.20:443...
> * Connected to ollama.com (34.120.132.20) port 443
> * ALPN: curl offers h2,http/1.1
> * TLSv1.3 (OUT), TLS handshake, Client hello (1):
> *  CAfile: /etc/ssl/certs/ca-certificates.crt
> *  CApath: /etc/ssl/certs
> * OpenSSL/3.0.13: error:0A00010B:SSL routines::wrong version number
> * Closing connection
> curl: (35) OpenSSL/3.0.13: error:0A00010B:SSL routines::wrong version number
> 
> I attached the wireguard pcap.

Works fine for me. But in your case, the connection seems to
get terminated by 'www.unitedwifi.com' with:

   HTTP/1.1 307 Temporary Redirect
   Via: 1.0 middlebox
   https://www.unitedwifi.com
   Connection: close

www.unitedwifi.com is some Akamai Middlebox thing that
breaks curl?.

And Wireshark says for this packet:
     [Expert Info (Warning/Security): Unencrypted HTTP protocol detected
     over encrypted port, could indicate a dangerous misconfiguration.]

You need to pay up for Wi-Fi first I guess.
 From https://www.united.com/en/us/fly/travel-experience/inflight-wifi.html:

   On U.S. domestic and short-haul international flights, like
   those to Mexico and Canada, Wi-Fi is $8, or 800 miles, for
   MileagePlus® members and $10 for everyone else...


-- 
--gv
-- 
Unsubscribe: https://lists.haxx.se/mailman/listinfo/curl-users
Etiquette:   https://curl.se/mail/etiquette.html