I have 2 servers that both run curl 7.29.0 and CentOS 7. However, when I run the following command I get 2 different results:

curl https://tlstest.paypal.com
  1. PayPal_Connection_OK
  2. ERROR! Connection is using TLS version lesser than 1.2. Please use TLS1.2

Why does one server default to a TLSv1.2 connection and the other does not?

(I know I can force it with --tlsv1.2 if I wanted to)

  • It might be a difference in patchlevel - Just checking the version a program reports is not sufficient to determine it's patchlevel, check with for instance rpm -qi curl for differences in the Release – HBruijn Jun 6 '18 at 10:50
  • 1
    Ok, so I see that the values for release do vary. Would it be safe to assume this is the reason behind the 2 results? – Craig Jun 6 '18 at 10:52
  • That would be a likely cause. - rpm -qa --last | less will show the most recent packages that were installed and unless you regularly install additional new software, that is a good indication if a system gets security (regular) updates or not – HBruijn Jun 6 '18 at 10:57
  • Thank you @HBruijn, I appreciate your time and assistance. – Craig Jun 6 '18 at 10:58

The following steps resolved my problem:

  1. Update the following 3 packages:

sudo yum update curl libcurl nss

  1. Restart nginx/apache*

sudo service nginx restart

sudo service hhvm restart

*Replace these with relevant services (e.g. apache, php-fpm, etc...)

Your Answer

By clicking "Post Your Answer", you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.