简体繁体 English

perl 5.6 版中的 500 SSL 协商失败

[英]500 SSL Negotiation failed in perl version 5.6

原文 2020-03-16 16:20:28 8 1 perl/ ssl/ tls1.2/ soaplite

In Live server we have perl version 5.6.1 ,recently we have enabled TLS 1.2 which resulted in a error " 500 SSL Negotiation failed ".在 Live 服务器中，我们有perl 版本 5.6.1 ，最近我们启用了TLS 1.2 ，这导致错误“ 500 SSL 协商失败”。 Earlier we have TLS 1.0 we don't have any issues.早些时候我们有 TLS 1.0，我们没有任何问题。 Enabling TLS 1.2 is unavoidable which is mandatory.启用 TLS 1.2 是不可避免的，这是强制性的。 How to resolve this issue?如何解决这个问题？

I have searched & found that SOAP-LITE module has to be installed in order to resolve the above issue but the version 5.6.1 does not support SOAP-LITE module.我搜索并发现必须安装 SOAP-LITE 模块才能解决上述问题，但 5.6.1 版本不支持 SOAP-LITE 模块。 It is available in active perl 5.8 and above version.它在活动的 perl 5.8 及以上版本中可用。 Is it adviseable to upgrade to 5.8 version inorder to install soap::Lite?是否建议升级到 5.8 版本以安装soap::Lite？

I have used the modules MSSQL::DBLIB and MSSQL::SQLLIB in this project, Will upgrade supports this module?我在这个项目中使用了模块MSSQL::DBLIB 和 MSSQL::SQLLIB ，请问升级支持这个模块吗？

1 个解决方案

Given how old your version of Perl is it is very likely that your version of OpenSSL (which is used at the end for SSL connectivity in Perl) is as old too.鉴于您的 Perl 版本有多旧，您的 OpenSSL 版本（最后用于 Perl 中的 SSL 连接）很可能也同样旧。 Support for TLS 1.2 was added with OpenSSL 1.0.1 which was released 2012. Perl 5.6.1 was released in 2000 while in 2012 we already had Perl 5.14. 2012 年发布的 OpenSSL 1.0.1 添加了对 TLS 1.2 的支持。Perl 5.6.1 于 2000 年发布，而在 2012 年我们已经有了 Perl 5.14。

And it is not unlikely that the rest of your software is similar outdated and unsupported and likely insecure too.而且您的软件的其余部分也不太可能类似过时和不受支持并且可能也不安全。

How to resolve this issue?如何解决这个问题？

Finally upgrade your long unsupported software stack.最后升级您长期不受支持的软件堆栈。 You can try to only update openssl and rebuild Crypt::SSLeay (likely no Net::SSLeay is used yet) to keep changes minimal but I'm not sure that this will work or even compile.您可以尝试仅更新 openssl 并重建Crypt::SSLeay （可能尚未使用Net::SSLeay ）以将更改保持在最低限度，但我不确定这会起作用甚至编译。