SSL Error in nodejs

Question

I'm trying to get a webpage via node https.request(). Doing so results in an error getting logged by my code. Using the node request module has the same result:

problem with request: 140398870042432:error:140773F2:SSL routines:SSL23_GET_SERVER_HELLO:sslv3 alert unexpected message:s23_clnt.c:658:

The following indicates the wrong SSL version is being used, but I cannot find a way to change the version: curl error: "sslv3 alert unexpected message". Using curl from my terminal returns a response as does hitting the URL in my browser (it is a login page). My code is below.

var request = require('request')
request.get("https://icmserver.wit.ie/balance", function(err, res, body) {
    if (err) {
        return console.log(err)
    }
    return body;
});

Does anyone have any idea what might be happening here?

Could you show us the exact code you're using? It'd help if we could reproduce the issue. — Asherah
– Asherah, Commented Jun 19, 2012 at 3:15
Thanks Len, This is my code: var request = require('request') request.get("icmserver.wit.ie/balance", function(err, res, body){ if(err){ return console.log(err) } return body; }); It keeps logging the SSL error. — Evan Shortiss
– Evan Shortiss, Commented Jun 19, 2012 at 7:01
I note that when I access the site in Chrome, I get: "The connection had to be retried using SSL 3.0. This typically means that the server is using very old software and may have other security issues." Possibly Node's built-in SSL doesn't support SSL 3. — Asherah
– Asherah, Commented Jun 19, 2012 at 7:06
I thought as much. Have spent a long time looking for a way to change nodes SSL version but have had no luck. Thanks for your help :) — Evan Shortiss
– Evan Shortiss, Commented Jun 19, 2012 at 7:50

SuperShalabi · Accepted Answer · 2012-07-10 07:22:40Z

16

Try to use options = { secureProtocol: 'SSLv3_method' } in the request you are making.

answered Jul 10, 2012 at 7:22

SuperShalabi

4815 silver badges7 bronze badges

Sign up to request clarification or add additional context in comments.

3 Comments

Evan Shortiss Over a year ago

Thanks SuperShalabi that worked, the request is returning data now!

Ryan Olds Over a year ago

Clarification: The secureProtocol option goes in a new https.Agent.

Sebastián Espinosa Over a year ago

just for clarification, SSLv3 is broken, you must not use it.

Will Glass · Accepted Answer · 2012-10-02 01:22:39Z

12

We hit the same problem. By default, request uses the https.globalAgent. So we added the code near the top of our script.

var https = require('https');
https.globalAgent.options.secureProtocol = 'SSLv3_method';

All of a sudden everything worked.

answered Oct 2, 2012 at 1:22

Will Glass

4,8606 gold badges37 silver badges44 bronze badges

4 Comments

GotDibbs Over a year ago

I wouldn't have expected this to work as I would've thought requiring https in different places would therefore not have the same globalAgent, but alas it has worked. Thanks!

Stephan Hoyer Over a year ago

I got the error SSL23_GET_SERVER_HELLO:unknown protocol and googled my finger bloody until i finally found this solution. Hopefully reindexes this so others get the information more quickly.

Sylvain B Over a year ago

I don't know why this answer has more votes. It can be dangerous to set the protocol globally. If the accepted answer does not work for you, rather than setting the protocol globally, please read carefully the doc to see how to set it up: nodejs.org/api/https.html#https_https_request_options_callback

awimley Over a year ago

I would argue it is more dangerous to allow nodeJS to communicate using SSLv2.

Klaus Gütter · Accepted Answer · 2019-02-27 19:05:53Z

0

In case website uses ECDH curve, for me the issue resolved only by adding this option:

request({ url, agentOptions: {
            ecdhCurve: 'P-521:P-384:P-256',
},(err,res,body) => {

JFYI, May be this will help someone.

edited Feb 27, 2019 at 19:05

Klaus Gütter

12.2k7 gold badges35 silver badges43 bronze badges

answered Feb 27, 2019 at 18:05

Denisix

1061 bronze badge

1 Comment

Atul Dwivedi Over a year ago

This does not look like answer, it's more of suggestion, you can comments for such solutions.

Collectives™ on Stack Overflow

SSL Error in nodejs

3 Answers 3

3 Comments

4 Comments

1 Comment

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

3 Answers 3

3 Comments

4 Comments

1 Comment

Your Answer

Sign up or log in

Post as a guest

Linked

Related