adam/znc
1
0 Fork 0
mirror of https://github.com/znc/znc.git synced 2026-11-03 10:52:22 +01:00
Code Issues 362 Packages Projects Releases Wiki Activity

Problem setting up SSL connection - SSL routines:ssl3_get_record:wrong version #981

New Issue
Closed
opened 2026-10-05 04:56:57 +02:00 by adam · 3 comments
adam commented 2026-10-05 04:56:57 +02:00
Owner
Copy link
Copy source

When SSL is activated I get src/Csocket.cpp:664 error:1408F10B:SSL routines:ssl3_get_record:wrong version number.

The output of openssl s_client -connect for znc server:

New, TLSv1/SSLv3, Cipher is ECDHE-RSA-CHACHA20-POLY1305
Server public key is 2048 bit
Secure Renegotiation IS supported
Compression: NONE
Expansion: NONE
No ALPN negotiated
SSL-Session:
    Protocol  : TLSv1.2
    Cipher    : ECDHE-RSA-CHACHA20-POLY1305

ZNC config:

SSLCiphers = EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH:ECDHE+RSA+AES256+GCM+SHA384
SSLProtocols = -SSLv2 +SSLv3 +TLSv1 +TLSv1.1 +TLSv1.2

I use ZNC 1.7.2+deb3.

Any ideas?

When SSL is activated I get `src/Csocket.cpp:664 error:1408F10B:SSL routines:ssl3_get_record:wrong version number`. The output of `openssl s_client -connect` for znc server: ``` New, TLSv1/SSLv3, Cipher is ECDHE-RSA-CHACHA20-POLY1305 Server public key is 2048 bit Secure Renegotiation IS supported Compression: NONE Expansion: NONE No ALPN negotiated SSL-Session: Protocol : TLSv1.2 Cipher : ECDHE-RSA-CHACHA20-POLY1305 ``` ZNC config: ``` SSLCiphers = EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH:ECDHE+RSA+AES256+GCM+SHA384 SSLProtocols = -SSLv2 +SSLv3 +TLSv1 +TLSv1.1 +TLSv1.2 ``` I use ZNC 1.7.2+deb3. Any ideas? <!-- github-sync-id:818195531 -->
adam closed this issue 2026-10-05 04:56:57 +02:00
adam commented 2026-10-05 04:56:58 +02:00
Author
Owner
Copy link
Copy source

Are you trying to connect to znc or is this a problem when znc is trying to connect to some IRC server? I am just trying to make sure I understand correctly: You are providing the openssl output from trying to connect from your computer to znc, but in #1743 you say that you have the same problem as someone who could not connect from znc to an IRC network.

Also, what are you using to try to connect to znc? As in, are the error message from Csocket and the output from openssl that you provide above from the same connection attempt?

Are you trying to connect to znc or is this a problem when znc is trying to connect to some IRC server? I am just trying to make sure I understand correctly: You are providing the `openssl` output from trying to connect from your computer to znc, but in #1743 you say that you have the same problem as someone who could not connect from znc to an IRC network. Also, what are you using to try to connect to znc? As in, are the error message from Csocket and the output from `openssl` that you provide above from the same connection attempt? <!-- github-comment-id:787465529 -->
adam commented 2026-10-05 04:56:59 +02:00
Author
Owner
Copy link
Copy source

Sorry for confusion. I try to connect to ZNC by IRC client. The ZNC connects to the networks just fine.

Currently, I don't get src/Csocket.cpp:664 error:1408F10B:SSL routines:ssl3_get_record:wrong version number mentioned above. It turned out I started ZNC with SSL but tried to connect without it. There is no problem with connecting to ZNC without SSL, but with SSL the client just stays forever on "Opening Connection.." stage.

I thought the problem is SSLCiphers related, that's why I posted output from the openssl client connecting to ZNC server.

I use Erc, but I tried one other client with similar effect.

I put a bit more details in:
https://stackoverflow.com/questions/66413771/connecting-to-znc-over-ssl

Sorry for confusion. I try to connect to ZNC by IRC client. The ZNC connects to the networks just fine. Currently, I don't get `src/Csocket.cpp:664 error:1408F10B:SSL routines:ssl3_get_record:wrong version number` mentioned above. It turned out I started ZNC with SSL but tried to connect without it. There is no problem with connecting to ZNC without SSL, but with SSL the client just stays forever on "Opening Connection.." stage. I thought the problem is SSLCiphers related, that's why I posted output from the openssl client connecting to ZNC server. I use [Erc](https://www.gnu.org/software/emacs/erc.html), but I tried one other client with similar effect. I put a bit more details in: https://stackoverflow.com/questions/66413771/connecting-to-znc-over-ssl <!-- github-comment-id:787519653 -->
adam commented 2026-10-05 04:57:00 +02:00
Author
Owner
Copy link
Copy source

I solved SSL connection problems thanks to help from #znc users. The problem was caused by misconfigured network config in Emacs.

I solved SSL connection problems thanks to help from #znc users. The problem was caused by misconfigured network config in Emacs. <!-- github-comment-id:790153554 -->
Sign in to join this conversation.
No Branch/Tag Specified
Labels
No items
No labels
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
adam (Adam Wojcieszonek)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: adam/znc#981