0. Behavior is the following:
When launching command:
curl -v -k -s -IXGET "https://www.google.com"
You get something like:
* About to connect() to www.google.com port 443 (#0)
* Trying ... connected
* Connected to www.google.com port 443 (#0)
* Initializing NSS with certpath: sql:/etc/pki/nssdb
* warning: ignoring value of ssl.verifyhost
* skipping SSL peer certificate verification
Illegal instruction (core dumped)
To fix the above, follow the below steps:
1. Disable AES_GCM encryption in NSS using:
export NSS_DISABLE_HW_GCM=1
2. Test again and shall work fine with step 0 above command.
Note: You can reset NSS_DISABLE_HW_GCM back by launching:
unset NSS_DISABLE_HW_GCM
No comments:
Post a Comment