node-request - Getting error "SSL23_GET_SERVER_HELLO:unknown protocol"

Question

I'm using the node-request module, regularly sending GET requests to a set of URLs and, sometimes, getting the error below on some sites.

Error: 29472:error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol:openssl\ssl\s23_clnt.c:683

The problem is that I don't get this error always or always on the some URLs, just sometimes. Also, it can't be ignored with "strictSSL: false".

I have read that this can be related to me sending SSL requests with the wrong protocol (SSLv2, SSLv3, TLS..). But this doesn't explain why it happens irregularly.

Btw, I'm running nodejs on a Win 2008 server.

Any help is appreciated.

What happens when you retry the same urls a few seconds latter? — generalhenry, Mar 14 '13 at 23:10
Few seconds later, I get no errors. The errors are only returned sometimes. — umutm, Mar 15 '13 at 08:54

score 115 · Answer 1 · answered Aug 09 '13 at 08:32

115

You will get such error message when you request HTTPS resource via wrong port, such as 80. So please make sure you specified right port, 443, in the Request options.

answered Aug 09 '13 at 08:32

Gaf King

1,159
2
7
2

Just had this problem with docker, had in my docker-compose: ports: - "443:80" – IAmJulianAcosta Oct 09 '16 at 03:55

score 18 · Accepted Answer · answered Apr 22 '13 at 13:23

18

This was totally my bad.

I was using standard node http.request on a part of the code which should be sending requests to only http adresses. Seems like the db had a single https address which was queried with a random interval.

Simply, I was trying to send a http request to https.

answered Apr 22 '13 at 13:23

umutm

2,832
4
22
22

6

The error looks more like sending https request to http port? – Michael Krelin - hacker May 24 '13 at 12:10
2

The error message shows clearly that you were using HTTPS, i.e. SSL, and that the server sent you an 'unknown protocol' message, also in SSL. You don't speak either HTTP or HTTPS to databases. Answer doesn't make sense. – user207421 Oct 14 '16 at 20:28

score 7 · Answer 3 · answered Aug 19 '15 at 15:01

7

I got this error because I was using require('https') where I should have been using require('http').

answered Aug 19 '15 at 15:01

Ben

54,723
49
178
224

score 4 · Answer 4 · answered Mar 14 '13 at 22:09

4

Some of the sites are speaking SSLv2, or at least sending an SSLv2 server-hello, and your client doesn't speak, or isn't configured to speak, SSLv2. You need to make a policy decision here. SSLv2 should have vanished from the face of the earth years ago, and sites that still use it are insecure. However, if you gotta talk to them, you just have to enable it at your end, if you can. I would complain to the site owners though if you can.

answered Mar 14 '13 at 22:09

user207421

305,947
44
307
483

Although the error sounds like this, not sure if that is the case considering the same URL sometimes returns thiş error. Btw, in node-request, is there a way to enable both SSLv2 and SSLv3? Or, should I do this on the Wİndow OS level? – umutm Mar 15 '13 at 08:56
That could happen if the site is a farm and there are different SSL levels in different elements: which would be a crazy setup, but if there is SSLv2 at all it is already crazy. I can't advise you about node.js but it is clearly using OpenSSL under the hood, and OpenSSL is highly configurable. I'd investigate the sites in question first though, you don't want to be enabling SSLv2 at your end without a really good reason. – user207421 Mar 16 '13 at 00:40
1

Still couldn't identify the issue exactly. Once done, I'll be updating this entry. – umutm Mar 26 '13 at 11:48
1

@umutm 4 years on, this is still an Issue. Getting the same error. – Dojo Jan 30 '17 at 21:38
@Dojo Starting with Node v4+, I suggest using Node's default (SSLv23_method) as it it has the max compatibility in my experience. As an addition, SSLv3 support is dropped in Nodejs, so, if the website being requested expects SSLv3, that may be the issue. – umutm Feb 01 '17 at 21:27

score 4 · Answer 5 · edited Jul 02 '18 at 09:43

4

I had this problem (403 error for each package) and I found nothing great in the internet to solve it. My .npmrc file inside my user folder was wrong and misunderstood. I changed this npmrc line from

proxy=http://XX.XX.XXX.XXX:XXX/

to :

proxy = XX.XX.XXX.XXX:XXXX

edited Jul 02 '18 at 09:43

koppor

19,079
15
119
161

answered Jan 17 '18 at 16:37

Flament Mickaël

354
2
10

Thank you so much! I was going crazy. This was the problem .net core too(linux) (but works in java): export http_proxy=http://x.x.x.x:8888 export https_proxy=https://x.x.x.x:8888 – dtroy Apr 15 '18 at 14:48

score 2 · Answer 6 · answered Jan 10 '14 at 03:31

2

var https = require('https');
https.globalAgent.options.secureProtocol = 'SSLv3_method';

answered Jan 10 '14 at 03:31

user3180229

37
2

1

did not solve my problem, but useful information tho – keinabel Jun 23 '15 at 12:18
1

SSLv3 is dangerous and obsolete ... instead use secureProtocol: "TLSv1_method" – Scott Stensland Sep 09 '16 at 16:53

score 0 · Answer 7 · answered Feb 24 '17 at 14:26

I got this error while connecting to Amazon RDS. I checked the server status 50% of CPU usage while it was a development server and no one is using it.

It was working before, and nothing in the connection configuration has changed. Rebooting the server fixed the issue for me.

score 0 · Answer 8 · answered Sep 05 '18 at 06:24

0

So in Short,

vi ~/.proxy_info

export http_proxy=<username>:<password>@<proxy>:8080
export https_proxy=<username>:<password>@<proxy>:8080

source ~/.proxy_info

Hope this helps someone in hurry :)

answered Sep 05 '18 at 06:24

Prateek Mishra

1,226
10
21

This does not explain why the suggestion could solve the problem. – Richlv Jul 09 '19 at 10:21

score 0 · Answer 9 · answered Feb 27 '19 at 18:21

in my case (the website SSL uses ev curves) the issue with the SSL was solved by adding this option ecdhCurve: 'P-521:P-384:P-256'

request({ url, 
   agentOptions: { ecdhCurve: 'P-521:P-384:P-256', }
}, (err,res,body) => {
...

JFYI, maybe this will help someone

score 0 · Answer 10 · answered Aug 28 '19 at 02:01

0

I got this error, while using it on my rocketchat to communicate with my gitlab via enterprise proxy,

Because, was using the https://:8080 but actually, it worked for http://:8080

answered Aug 28 '19 at 02:01

MohanBabu

407
5
14

node-request - Getting error "SSL23_GET_SERVER_HELLO:unknown protocol"

10 Answers10

Linked

Related