error:14077410:SSL routines:SSL23_GET_SERVER_HELLO:sslv3 alert handshake failure

[anquegi]

When uusing dexador on kickass.cd I get the following

CL-USER> (dex:get "https://kickass.cd/")
; Debugger entered on #<CL+SSL::SSL-ERROR-SSL {1001F53BD3}>

A failure in the SSL library occurred on handle #.(SB-SYS:INT-SAP #X0021EBB0) (return code: 1).
SSL error queue:
error:14077410:SSL routines:SSL23_GET_SERVER_HELLO:sslv3 alert handshake failure
   [Condition of type CL+SSL::SSL-ERROR-SSL]

Restarts:
 0: [RETRY-REQUEST] Retry the same request.
 1: [RETRY] Retry SLY mREPL evaluation request.
 2: [*ABORT] Return to SLY's top level.
 3: [ABORT] abort thread (#<THREAD "sly-channel-1-mrepl-remote-1" RUNNING {100434DD83}>)

Backtrace:
  0: (CL+SSL::SSL-SIGNAL-ERROR #.(SB-SYS:INT-SAP #X0021EBB0) #<FUNCTION CL+SSL::SSL-CONNECT> 1 -1)
  1: (CL+SSL:MAKE-SSL-CLIENT-STREAM #<unavailable argument> :CERTIFICATE #<unavailable argument> :KEY #<unavailable argument> :PASSWORD #<unavailable argument> :METHOD #<unavailable argument> :EXTERNAL-FOR..
  2: (CL+SSL::CALL-WITH-GLOBAL-CONTEXT #.(SB-SYS:INT-SAP #X00216260) T #<CLOSURE (LAMBDA NIL :IN DEXADOR.BACKEND.USOCKET:REQUEST) {1001E58B2B}>)
  3: ((LABELS DEXADOR.BACKEND.USOCKET::MAKE-NEW-CONNECTION :IN DEXADOR.BACKEND.USOCKET:REQUEST) #<QURI.URI.HTTP:URI-HTTPS https://kickass.cd/>)
  4: (DEXADOR.BACKEND.USOCKET:REQUEST #<unavailable argument> :METHOD :GET)
  5: (SB-INT:SIMPLE-EVAL-IN-LEXENV (DEXADOR:GET "https://kickass.cd/") #<NULL-LEXENV>)
  6: (EVAL (DEXADOR:GET "https://kickass.cd/"))
  7: ((LAMBDA NIL :IN SLYNK-MREPL::MREPL-EVAL-1))
  8: (SLYNK::CALL-WITH-RETRY-RESTART "Retry SLY mREPL evaluation request." #<CLOSURE (LAMBDA NIL :IN SLYNK-MREPL::MREPL-EVAL-1) {1001E4A9EB}>)
  9: ((LAMBDA NIL :IN SLYNK-MREPL::MREPL-EVAL-1))
 10: ((LAMBDA NIL :IN SLYNK::CALL-WITH-LISTENER))
 11: (SLYNK::CALL-WITH-BINDINGS ((*PACKAGE* . #<PACKAGE "COMMON-LISP-USER">) (*) (**) (*** . #(239 204 9)) (/ NIL) (// NIL) ...) #<CLOSURE (LAMBDA NIL :IN SLYNK::CALL-WITH-LISTENER) {1001E4A65B}>)
 12: (SLYNK-MREPL::MREPL-EVAL-1 #<SLYNK-MREPL::MREPL mrepl-1-1> "(dex:get \"https://kickass.cd/\")")
 13: (SLYNK-MREPL::MREPL-EVAL #<SLYNK-MREPL::MREPL mrepl-1-1> "(dex:get \"https://kickass.cd/\")")
 14: (SLYNK::PROCESS-REQUESTS NIL)
 15: ((LAMBDA NIL :IN SLYNK::SPAWN-CHANNEL-THREAD))
 16: ((LAMBDA NIL :IN SLYNK::SPAWN-CHANNEL-THREAD))
 17: (SLYNK-SBCL::CALL-WITH-BREAK-HOOK #<FUNCTION SLYNK:SLYNK-DEBUGGER-HOOK> #<CLOSURE (LAMBDA NIL :IN SLYNK::SPAWN-CHANNEL-THREAD) {100435002B}>)
 18: ((FLET SLYNK-BACKEND:CALL-WITH-DEBUGGER-HOOK :IN "/Users/toni/.emacs.d/.cask/27.0/elpa/sly-20180117.533/slynk/backend/sbcl.lisp") #<FUNCTION SLYNK:SLYNK-DEBUGGER-HOOK> #<CLOSURE (LAMBDA NIL :IN SLYNK:..
 19: ((LAMBDA NIL :IN SLYNK::CALL-WITH-LISTENER))
 20: (SLYNK::CALL-WITH-BINDINGS ((*PACKAGE* . #<PACKAGE "COMMON-LISP-USER">) (*) (**) (*** . #(239 204 9)) (/ NIL) (// NIL) ...) #<CLOSURE (LAMBDA NIL :IN SLYNK::CALL-WITH-LISTENER) {100435006B}>)
 21: ((LAMBDA NIL :IN SLYNK::SPAWN-CHANNEL-THREAD))
 22: ((FLET SB-UNIX::BODY :IN SB-THREAD::INITIAL-THREAD-FUNCTION-TRAMPOLINE))
 23: ((FLET "WITHOUT-INTERRUPTS-BODY-4" :IN SB-THREAD::INITIAL-THREAD-FUNCTION-TRAMPOLINE))
 24: ((FLET SB-THREAD::WITH-MUTEX-THUNK :IN SB-THREAD::INITIAL-THREAD-FUNCTION-TRAMPOLINE))
 25: ((FLET "WITHOUT-INTERRUPTS-BODY-1" :IN SB-THREAD::CALL-WITH-MUTEX))
 26: (SB-THREAD::CALL-WITH-MUTEX #<CLOSURE (FLET SB-THREAD::WITH-MUTEX-THUNK :IN SB-THREAD::INITIAL-THREAD-FUNCTION-TRAMPOLINE) {4A41D3B}> #<SB-THREAD:MUTEX "thread result lock" owner: #<SB-THREAD:THREAD "..
 27: (SB-THREAD::INITIAL-THREAD-FUNCTION-TRAMPOLINE #<SB-THREAD:THREAD "sly-channel-1-mrepl-remote-1" RUNNING {100434DD83}> NIL #<CLOSURE (LAMBDA NIL :IN SLYNK::SPAWN-CHANNEL-THREAD) {100434D33B}> NIL)
 28: ("foreign function: call_into_lisp")
 29: ("foreign function: new_thread_trampoline")
 30: ("foreign function: _pthread_body")
 31: ("foreign function: _pthread_body")
 32: ("foreign function: thread_start")

I believe, but I'm not sure that the cl+ssl system is using this openssl in emacs PATH is the first /usr/local/bin

Welcome to the Emacs shell

~/learn/lisp/cl-university $ $PATH
/Users/toni/.rvm/gems/ruby-2.4.2/bin:/Users/toni/.rvm/gems/ruby-2.4.2@global/bin:/Users/toni/.rvm/rubies/ruby-2.4.2/bin/:/usr/texbin:/Library/TeX/texbin:/usr/local/bin:/usr/bin:/bin:/usr/sbin:/sbin:/Users/toni/.rvm/bin: command not found
~/learn/lisp/cl-university $ openssl version
OpenSSL 1.1.0e  16 Feb 2017
~/learn/lisp/cl-university $ which openssl
/usr/local/bin/openssl

╭─ ~  2.4.2@learn  sbcl-bin 
╰─ openssl version                         1 ↵  14.52 Dur  10013  07:32:41
OpenSSL 1.1.0e  16 Feb 2017

and with curl it works, also inside emacs with restclient

╰─ curl -v https://kickass.cd/                           ✓  10014  07:32:56
*   Trying 104.24.104.224...
* TCP_NODELAY set
* Connected to kickass.cd (104.24.104.224) port 443 (#0)
* TLS 1.2 connection using TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
* Server certificate: sni57005.cloudflaressl.com
* Server certificate: COMODO ECC Domain Validation Secure Server CA 2
* Server certificate: COMODO ECC Certification Authority
> GET / HTTP/1.1
> Host: kickass.cd
> User-Agent: curl/7.54.0
> Accept: */*
>
< HTTP/1.1 200 OK
< Date: Wed, 31 Jan 2018 07:05:21 GMT
< Content-Type: text/html; charset=UTF-8
< Transfer-Encoding: chunked
< Connection: keep-alive
< Set-Cookie: __cfduid=daafb96fd87e73e919922a781ec43fc6b1517382321; expires=Thu, 31-Jan-19 07:05:21 GMT; path=/; domain=.kickass.cd; HttpOnly
< X-Powered-By: PHP/5.6.32
< Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
< Server: cloudflare
< CF-RAY: 3e5ad27669b13c7d-CDG
<
<!DOCTYPE html>
<html>
     . . .
     . . .
     . . .
</HtML>
* Connection #0 to host kickass.cd left intact