<div dir="ltr"><div>Sorry for taking so long to reply. I am running FreeBSD 10.1 RELEASE and it is Openssl version is OpenSSL 1.0.1j and I installed it from the ports tree (source).<br><br></div>Regards<br></div><div class="gmail_extra"><br><div class="gmail_quote">On Tue, Jan 6, 2015 at 4:56 PM, Lukas Tribus <span dir="ltr"><<a href="mailto:luky-37@hotmail.com" target="_blank">luky-37@hotmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><span class="">> Hi. Thanks for replying.<br>
> I read it in two places. Here are the links.<br>
> 1.<br>
> <a href="http://serverfault.com/questions/436737/forcing-a-particular-ssl-protocol-for-an-nginx-proxying-server" target="_blank">http://serverfault.com/questions/436737/forcing-a-particular-ssl-protocol-for-an-nginx-proxying-server</a><br>
> 2.<br>
> <a href="http://w3facility.org/question/forcing-a-particular-ssl-protocol-for-an-nginx-proxying-server/" target="_blank">http://w3facility.org/question/forcing-a-particular-ssl-protocol-for-an-nginx-proxying-server/</a><br>
><br>
> The full error is this: peer closed connection in SSL handshake while<br>
> SSL handshaking, client: <client_IP>, server: <Server_FQDN> request:<br>
> "POST<br>
> /Microsoft-Server-ActiveSync?Cmd=Ping&User=<domain>%5C<user_name>&DeviceId=SEC090121863242D&DeviceType=SAMSUNGSMT800<br>
> HTTP/1.1", upstream:<br>
> "<a href="https://SERVER_IP:443/Microsoft-Server-ActiveSync?Cmd=Ping&User=" target="_blank">https://SERVER_IP:443/Microsoft-Server-ActiveSync?Cmd=Ping&User=</a><DOMAIN>%5C<USER_NAME>&DeviceId=SAMSUNGSGHI337",<br>
> host: "<SERVER_FQDN>"<br>
><br>
> produced with debugging enabled.<br>
><br>
><br>
> If I run openssl s_client -connect <SERVER_IP:443  I get:<br>
> CONNECTED(00000003)<br>
> 675508300:error:140790E5:SSL routines:SSL23_WRITE:ssl handshake<br>
> failure:/usr/src/secure/lib/libssl/../../../crypto/openssl/ssl/s23_lib.c:184:<br>
</span>> [...]<br>
<span class="">> If I run openssl s_client -connect <SERVER_IP:443 -SSL3 the connection<br>
> works but it won't work from nginx even when I enable SSLv3.<br>
<br>
</span>Ok, so you are running in this particular bug. However, its supposed to be<br>
fixed a very long time ago, in openssl 1.0.1b.<br>
<br>
I guess are running with an nginx executable from a third party, that has<br>
been linked to an older release of openssl.<br>
<br>
What OS/kernel/nginx/openssl release are you running exactly and how<br>
did you install it (for example did you install openssl and nginx via<br>
apt-get from original ubuntu repositoriers, or did you install from nginx<br>
repository or from source)?<br>
<div class="HOEnZb"><div class="h5"><br>
<br>
<br>
Lukas<br>
<br>
<br>
_______________________________________________<br>
nginx mailing list<br>
<a href="mailto:nginx@nginx.org">nginx@nginx.org</a><br>
<a href="http://mailman.nginx.org/mailman/listinfo/nginx" target="_blank">http://mailman.nginx.org/mailman/listinfo/nginx</a><br>
</div></div></blockquote></div><br></div>