Description of problem: curl https://somedomainincloudflare.com NSS seems to fail with sni????.cloudflare.com NSS error -12286 (SSL_ERROR_NO_CYPHER_OVERLAP) Cannot communicate securely with peer: no common encryption algorithm(s). With openssl s_client and servername option works without any problem. Version-Release number of selected component (if applicable): How reproducible: Steps to Reproduce: 1. curl sni server 2. error 3. Actual results: Can not connect to site under ssl SNI Expected results: Connect without problems Additional info:
(In reply to dev002 from comment #0) > Description of problem: > NSS error -12286 (SSL_ERROR_NO_CYPHER_OVERLAP) > Cannot communicate securely with peer: no common encryption algorithm(s). Please re-read the error message you were given. It does not seem to be related to SNI at all. It is more likely a problem with certain cipher-suite not being enabled by nss. Could you please re-test with nss-3.20.0-1.1.fc22 and confirm whether the problem is fixed? https://koji.fedoraproject.org/koji/buildinfo?buildID=685768
Yes, works with nss-3.20.0-1.1.fc22 package.
Thanks for the confirmation! *** This bug has been marked as a duplicate of bug 1185708 ***