捲曲https://cpanmin.us在CentOS 7

Question

$ docker run centos:7.1.1503 curl https://cpanmin.us 
    % Total % Received % Xferd Average Speed Time Time  Time Current 
           Dload Upload Total Spent Left Speed 
    0  0 0  0 0  0  0  0 --:--:-- --:--:-- --:--:--  0 
curl: (35) Cannot communicate securely with peer: no common encryption algorithm(s). 

失敗，我知道我們可以使用直接URL https://raw.githubusercontent.com/miyagawa/cpanminus/master/cpanm工作正常。

我想知道的是，這個錯誤的原因是什麼以及如何解決它。

下面是-vvv選項的輸出。

$ docker run centos:7.1.1503 curl -vvvv https://cpanmin.us 
    % Total % Received % Xferd Average Speed Time Time  Time Current 
           Dload Upload Total Spent Left Speed 
    0  0 0  0 0  0  0  0 --:--:-- --:--:-- --:--:--  0* About to connect() to cpanmin.us port 443 (#0) 
* Trying 104.28.29.17... 
* Connected to cpanmin.us (104.28.29.17) port 443 (#0) 
* Initializing NSS with certpath: sql:/etc/pki/nssdb 
* CAfile: /etc/pki/tls/certs/ca-bundle.crt 
    CApath: none 
* NSS error -12286 (SSL_ERROR_NO_CYPHER_OVERLAP) 
* Cannot communicate securely with peer: no common encryption algorithm(s). 
* Error in TLS handshake, trying SSLv3... 
> GET/HTTP/1.1 
> User-Agent: curl/7.29.0 
> Host: cpanmin.us 
> Accept: */* 
> 
* Connection died, retrying a fresh connect 
    0  0 0  0 0  0  0  0 --:--:-- --:--:-- --:--:--  0 
* Closing connection 0 
* Issue another request to this URL: 'https://cpanmin.us' 
* About to connect() to cpanmin.us port 443 (#1) 
* Trying 104.28.29.17... 
* Connected to cpanmin.us (104.28.29.17) port 443 (#1) 
* TLS disabled due to previous handshake failure 
* CAfile: /etc/pki/tls/certs/ca-bundle.crt 
    CApath: none 
* NSS error -12286 (SSL_ERROR_NO_CYPHER_OVERLAP) 
* Cannot communicate securely with peer: no common encryption algorithm(s). 
* Closing connection 1 
curl: (35) Cannot communicate securely with peer: no common encryption algorithm(s). 

Answer 1

它的工作原理只是我的捲曲版本（不使用CentOS的7）的罰款，所以這裏的猜測是，你使用的是建立一個TLS庫的版本不具有足夠新集密碼支持該網站似乎需要。