{"id":732,"date":"2022-03-15T16:02:54","date_gmt":"2022-03-15T07:02:54","guid":{"rendered":"https:\/\/uapisupport.travelport.co.kr\/?page_id=732"},"modified":"2024-09-23T17:13:09","modified_gmt":"2024-09-23T08:13:09","slug":"%eb%a6%ac%eb%88%85%ec%8a%a4-%ec%84%9c%eb%b2%84%ec%84%b8%ed%8c%85%ec%8b%9c-uapi-%ec%9d%91%eb%8b%b5%ec%97%90%eb%9f%ac","status":"publish","type":"page","link":"https:\/\/uapisupport.travelport.co.kr\/?page_id=732","title":{"rendered":"\ub9ac\ub205\uc2a4 \uc11c\ubc84\uc138\ud305\uc2dc uapi \uc751\ub2f5\uc5d0\ub7ec"},"content":{"rendered":"

Remark : Travelport \uc11c\ubc84\uac00 TLS1.2 \ub9cc \uc9c0\uc6d0 \ud569\ub2c8\ub2e4. CentOS 6.0 \uc778\uacbd\uc6b0 yum update. \ud544\uc694<\/strong><\/h3>\n

NSS \ubc84\uc804 \ud655\uc778 \ubc14\ub77c\uba74 \ud544\uc694\uc2dc  \ucd5c\uc2e0 \ubc84\uc804\uc73c\ub85c \uc5c5\ub370\uc774\ud2b8 \ud574\uc8fc\uc138\uc694.  <\/p>\n

I encountered a similar \u201cNSS error -5938\u201d when using an outdated CentOS 6.x system to connect to an embedded device that stopped accepting TLS 1.0, only allowing TLS 1.1 and higher. The solution for me was to do a yum update.<\/p>\n

NSS error -5938 (PR_END_OF_FILE_ERROR)NSS error -5938<\/p>\n

# curl -V | grep NSS\n\ncurl 7.29.0 (x86_64-redhat-linux-gnu) libcurl\/7.29.0 NSS\/3.53.1 zlib\/1.2.7 libidn\/1.28 libssh2\/1.8.0<\/pre>\n
<\/p>\n
# nmap --script ssl-enum-ciphers -p 443 apac.universal-api.pp.travelport.com\nStarting Nmap 6.40 ( http:\/\/nmap.org ) at 2021-11-23 11:25 KST\nNmap scan report for apac.universal-api.pp.travelport.com (216.113.131.96)\nHost is up (0.18s latency).\nPORT    STATE SERVICE\n443\/tcp open  https\n| ssl-enum-ciphers:\n|   TLSv1.2:\n|     ciphers:\n|       TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA - strong\n|       TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 - strong\n|       TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 - strong\n|       TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA - strong\n|       TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 - strong\n|       TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 - strong\n|       TLS_RSA_WITH_AES_128_CBC_SHA - strong\n|       TLS_RSA_WITH_AES_128_CBC_SHA256 - strong\n|       TLS_RSA_WITH_AES_128_GCM_SHA256 - strong\n|       TLS_RSA_WITH_AES_256_CBC_SHA - strong\n|       TLS_RSA_WITH_AES_256_CBC_SHA256 - strong\n|       TLS_RSA_WITH_AES_256_GCM_SHA384 - strong\n|     compressors:\n|       NULL\n|_  least strength: strong\n\nNmap done: 1 IP address (1 host up) scanned in 8.13 seconds\n<\/pre>\n\n\n
\uacb0\ub860<\/h3>\n\n\n\n
\uc11c\ubc84\ud658\uacbd<\/h4>\n\n\n\n
OpenSSL > 1.0.1 or NSS > 3.15<\/p>\n\n\n\n
<\/p>\n\n\n\n
\ucd94\uac00 <\/h2>\n\n\n\n
CentOS 7.0 \uc5d0\uc11c \uc624\ub958 \uc2dc : Endpoint \ubcc0\uacbd<\/p>\n\n\n\n
# nmap --script ssl-enum-ciphers -p 443 apac.universal-api.pp.travelport.com\nStarting Nmap 6.40 ( http:\/\/nmap.org ) at 2024-09-23 14:55 KST\nNmap scan report for apac.universal-api.pp.travelport.com (216.113.131.96)\nHost is up (0.19s latency).\nPORT    STATE SERVICE\n443\/tcp open  https\n| ssl-enum-ciphers:\n|   SSLv3: No supported ciphers found\n|_  TLSv1.2: No supported ciphers found\n\nNmap done: 1 IP address (1 host up) scanned in 3.32 seconds\n\n\n\n\n# nmap --script ssl-enum-ciphers -p 443 apac.webservices.travelport.com\n\nStarting Nmap 6.40 ( http:\/\/nmap.org ) at 2024-09-23 16:04 KST\nNmap scan report for apac.webservices.travelport.com (216.113.156.105)\nHost is up (0.025s latency).\nPORT    STATE SERVICE\n443\/tcp open  https\n| ssl-enum-ciphers:\n|   SSLv3: No supported ciphers found\n|   TLSv1.0: No supported ciphers found\n|   TLSv1.1: No supported ciphers found\n|   TLSv1.2:\n|     ciphers:\n|       TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA - strong\n|       TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 - strong\n|       TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA - strong\n|       TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 - strong\n|       TLS_RSA_WITH_AES_128_CBC_SHA - strong\n|       TLS_RSA_WITH_AES_128_CBC_SHA256 - strong\n|       TLS_RSA_WITH_AES_256_CBC_SHA - strong\n|       TLS_RSA_WITH_AES_256_CBC_SHA256 - strong\n|     compressors:\n|       NULL\n|_  least strength: strong<\/pre><\/div>\n\n\n\n
<\/p>\n","protected":false},"excerpt":{"rendered":"
Remark : Travelport \uc11c\ubc84\uac00 TLS1.2 \ub9cc \uc9c0\uc6d0 \ud569\ub2c8\ub2e4. CentOS 6.0 \uc778\uacbd\uc6b0 yum update. \ud544\uc694 NSS \ubc84\uc804 \ud655\uc778 \ubc14\ub77c\uba74 \ud544\uc694\uc2dc  \ucd5c\uc2e0 \ubc84\uc804\uc73c\ub85c \uc5c5\ub370\uc774\ud2b8 \ud574\uc8fc\uc138\uc694.   I encountered a similar \u201cNSS error -5938\u201d when using an outdated CentOS 6.x system to connect to an embedded device that stopped accepting TLS 1.0, only allowing TLS 1.1 and higher. …
\ub9ac\ub205\uc2a4 \uc11c\ubc84\uc138\ud305\uc2dc uapi \uc751\ub2f5\uc5d0\ub7ec<\/span> \ub354\ubcf4\uae30<\/a><\/p>\n","protected":false},"author":4,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":["post-732","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/uapisupport.travelport.co.kr\/index.php?rest_route=\/wp\/v2\/pages\/732","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/uapisupport.travelport.co.kr\/index.php?rest_route=\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/uapisupport.travelport.co.kr\/index.php?rest_route=\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/uapisupport.travelport.co.kr\/index.php?rest_route=\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/uapisupport.travelport.co.kr\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=732"}],"version-history":[{"count":12,"href":"https:\/\/uapisupport.travelport.co.kr\/index.php?rest_route=\/wp\/v2\/pages\/732\/revisions"}],"predecessor-version":[{"id":2526,"href":"https:\/\/uapisupport.travelport.co.kr\/index.php?rest_route=\/wp\/v2\/pages\/732\/revisions\/2526"}],"wp:attachment":[{"href":"https:\/\/uapisupport.travelport.co.kr\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=732"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}