ssl 握手期间的 openssl 超时

问题描述

我在连接到外部邮件服务器时遇到问题。连接只需要 30 秒，所以我很确定这是某种超时。我能够用 openssl 重建错误：

openssl s_client -connect [IP]:465

这是输出（包括 -state）：

CONNECTED(00000003)
SSL_connect:before SSL initialization
SSL_connect:SSLv3/TLS write client hello
SSL_connect:error in SSLv3/TLS write client hello
write R BLOCK

需要 30 秒

SSL_connect:SSLv3/TLS write client hello
SSL_connect:error in SSLv3/TLS read server hello
SSL_connect:SSLv3/TLS read server hello
Can't use SSL_get_servername
SSL_connect:TLSv1.3 read encrypted extensions
depth=2 C = US,ST = Arizona,L = ScottsDale,O = "GoDaddy.com,Inc.",CN = Go Daddy Root Certificate Authority - G2
verify return:1
depth=1 C = US,OU = http://certs.godaddy.com/repository/,CN = Go Daddy Secure Certificate Authority - G2
verify return:1
depth=0 C = DE,ST = [...]
verify return:1
SSL_connect:SSLv3/TLS read server certificate
SSL_connect:TLSv1.3 read server certificate verify
SSL_connect:SSLv3/TLS read finished
SSL_connect:SSLv3/TLS write change cipher spec
SSL_connect:SSLv3/TLS write finished
CONNECTED(00000003)
Turned on non blocking io
write R BLOCK
read R BLOCK
read R BLOCK

[...]

---
No client certificate CA names sent
Peer signing digest: SHA256
Peer signature type: RSA-PSS
Server Temp Key: X25519,253 bits
---
SSL handshake has read 3797 bytes and written 363 bytes
Verification: OK
---
New,TLSv1.3,Cipher is TLS_AES_256_GCM_SHA384
Server public key is 2048 bit
Secure Renegotiation IS NOT supported
Compression: NONE
Expansion: NONE
No ALPN negotiated
Early data was not sent
Verify return code: 0 (ok)
---
DONE
SSL3 alert write:warning:close notify

问题：我有几个相同的服务器。有些显示超时，有些不显示（相同的目标 IP）。

我的想法快用完了……提前致谢！

解决方法

暂无找到可以解决该程序问题的有效方法，小编努力寻找整理中！

如果你已经找到好的解决方法，欢迎将解决方案带上本链接一起发送给小编。

小编邮箱:dio#foxmail.com (将#修改为@）