👀 Views: 28 💬 Answers: 1 📅 Created: 2025-06-08

openssl ubuntu ssl bash

I'm learning this framework and I'm stuck on something that should probably be simple... I'm currently working with issues with a legacy application that relies on OpenSSL 1.1 and specifically uses the SSLv3 protocol for secure connections. Recently, I upgraded my server to Ubuntu 22.04, which comes with OpenSSL 3.x. After the upgrade, the application fails to establish connections, throwing the behavior: `SSL routines:ssl3_get_message:wrong version number`. I confirmed that the application is indeed trying to connect using SSLv3 by enabling verbose logging. I attempted to work around this by modifying the OpenSSL configuration file at `/etc/ssl/openssl.cnf` to allow legacy protocols by adding: ```plaintext [system_default_sect] MinProtocol = SSLv3 ``` However, this didn't resolve the connection scenario. I've also tried setting environment variables to downgrade the SSL version, but the application still fails to communicate with external services. To further debug, I ran the following command to test the connection manually: ```bash openssl s_client -connect example.com:443 -ssl3 ``` This produced the same `wrong version number` behavior, indicating that SSLv3 is indeed being blocked or not recognized properly. Is there a way to enable SSLv3 support for OpenSSL 3.x on Ubuntu 22.04 to ensure compatibility with my legacy application? Or is there a better approach to handle this situation without compromising on security? Any suggestions would be helpful. For context: I'm using Bash on Windows 10. Has anyone else encountered this?