PHP Curl错误35-对等方报告协议版本不兼容或不受支持

Question

我正在尝试向外部API（以下代码）发出POST请求。 我设法使curl编码在我的本地主机上工作，但是当我转到登台服务器时，curl返回错误Peer reports incompatible or unsupported protocol version(35) 。 通过阅读本文，我需要添加一个错误缓冲区以获取更多调试信息，但是文档令人困惑。

但是，当我直接在服务器终端中发出curl请求时，我收到一个连接成功。 这让我非常困惑，因为服务器显然能够发出卷曲请求。

PHP卷曲代码

$curl = curl_init();

  curl_setopt_array($curl, array(
    CURLOPT_URL => $url,
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_ENCODING => "",
    CURLOPT_MAXREDIRS => 10,
    CURLOPT_TIMEOUT => 30,
    CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
    CURLOPT_CUSTOMREQUEST => "POST",
    CURLOPT_POSTFIELDS => json_encode($body),
    CURLOPT_HTTPHEADER => $header,
  ));

  $response = curl_exec($curl);
  $err = curl_error($curl);
  echo "response: " . $response;
  echo "<br><br>error: " . $err;

  curl_close($curl);

服务器卷曲响应 curl https://support.zendesk.com/api/v2/users/create_or_update.json

* About to connect() to support.zendesk.com port 443 (#0)
*   Trying 104.16.51.111...
* Connected to support.zendesk.com (104.16.51.111) port 443 (#0)
* Initializing NSS with certpath: sql:/etc/pki/nssdb
*   CAfile: /etc/pki/tls/certs/ca-bundle.crt
  CApath: none
* SSL connection using TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
* Server certificate:
*   subject: CN= support.zendesk.com,O="CloudFlare, Inc.",L=San Francisco,ST=CA,C=US
*   start date: Mar 08 00:00:00 2019 GMT
*   expire date: Mar 08 12:00:00 2020 GMT
*   common name: support.zendesk.com
*   issuer: CN=CloudFlare Inc ECC CA-2,O="CloudFlare, Inc.",L=San Francisco,ST=CA,C=US
> GET /api/v2/users/create_or_update.json HTTP/1.1
> User-Agent: curl/7.29.0
> Host: support.zendesk.com
> Accept: */*
> 
< HTTP/1.1 401 Unauthorized
< Date: Fri, 12 Apr 2019 12:52:28 GMT
< Content-Type: application/json; charset=UTF-8
< Content-Length: 37
< Connection: keep-alive
< Set-Cookie: __cfduid=da0ecd56691c96b9b3dac091df58383d51555073548; expires=Sat, 11-Apr-20 12:52:28 GMT; path=/; domain=.ralphandrussoclientcare.zendesk.com; HttpOnly
< WWW-Authenticate: Basic realm="Web Password"
< Strict-Transport-Security: max-age=31536000;
< Cache-Control: no-cache
< X-Zendesk-Origin-Server: app23.pod17.euw1.zdsys.com
< X-Request-Id: 4c65566eacc82981-DUB
< X-Runtime: 0.032000
< X-Zendesk-Request-Id: 3360f95a861586e6f414
< Set-Cookie: __cfruid=7af98f1cbac97922c1c15b82f7c133c3945a446e-1555073548; path=/; domain=.ralphandrussoclientcare.zendesk.com; HttpOnly
< Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
< Server: cloudflare
< CF-RAY: 4c65566eacc82981-DUB
< 
* Connection #0 to host support.zendesk.com left intact
{"error":"Couldn't authenticate you"}

Answer 1

为了解决此问题，我使用https://www.ssllabs.com/ssltest/进行了服务器SSL测试，该测试向我显示了哪些协议已打开并在服务器上可用。

从那开始，我一直遵循这个问题的答案， TLS 1.2在cURL中不起作用，这向我展示了要使用哪个PHP CURLOPT_SSLVERSION号来访问开放协议。

因此，我必须将以下代码行添加到我的Curl数组中

CURLOPT_SSLVERSION => CURL_SSLVERSION_TLSv1_2