error:0A000410

[kholifa-network]

Error with - "error:0A000410:SSL routines::sslv3 alert handshake failure"

How to Solve this issue?

[OmarHasan16]

Issue Details:

• Endpoint: https://www.engine.shurjopayment.com/api/get_token
• Error: SSL handshake failure
  • cURL: OpenSSL/3.0.13: error:0A000410:SSL routines::sslv3 alert handshake failure
  • OpenSSL: sslv3 alert handshake failure:../ssl/record/rec_layer_s3.c:1599:SSL alert number 40, no peer certificate available
• Environment:
  • Server: Ubuntu with PHP 8.2, OpenSSL 3.0.13
  • IPs:
  • TLS Version Tested: TLS 1.2 (explicitly enforced)
• Impact: We cannot process live payments, affecting our business operations.
• Sandbox Status: The sandbox endpoint (https://www.sandbox.shurjopayment.com/) works correctly.

Previous Issue:

• We previously encountered a certificate mismatch with api.shurjopay.com (certificate for asare.instalaxmi.co, IP: ``), suggesting possible endpoint changes or redirects.

Requests:

1. Confirm the correct production API endpoint for get_token, secret-pay, and verification APIs. Is www.engine.shurjopayment.com still valid, or has it changed (e.g., to api.shurjopay.com)?
2. Resolve the SSL handshake failure on www.engine.shurjopayment.com (likely a missing certificate or Cloudflare misconfiguration).
3. Provide updated API documentation or endpoint details.
4. Suggest any server-side configurations (e.g., specific ciphers) we should use to connect successfully.

Step 1: Collect Additional Outputs
Test with --tls-max 1.2:
Ensure TLS 1.2 is strictly enforced:

curl -v --tlsv1.2 --tls-max 1.2 https://www.engine.shurjopayment.com/api/get_token > curl_tls_max.txt

curl -v --tlsv1.2 --ciphers ECDHE-RSA-AES256-GCM-SHA384 https://www.engine.shurjopayment.com/api/get_token > curl_cipher.txt
Check for Redirects:
Verify if the endpoint redirects (e.g., to api.shurjopay.com):

curl -v -L https://www.engine.shurjopayment.com/api/get_token > curl_redirect.txt
Verbose Plugin Logs:
Test a payment in production mode (dev_mode = false) with the current shurjopay.php.
Retrieve verbose cURL logs from PHP:
bash

tail -n 100 /var/log/php_errors.log > php_error_log.txt
Check Blesta logs:
bash

Copy
cat /home/mycorp/htdocs/my.10corp.com/logs_blesta/* > blesta_log.txt
Test New Endpoint (if Provided):
If ShurjoPay provides a new endpoint (e.g., https://api.shurjopay.com/), test:
bash

Copy
curl -v --tlsv1.2 https://api.shurjopay.com/api/get_token > curl_new_endpoint.txt
Step 2: Share Outputs