ubuntu - How can I troubleshoot SSL timeouts via curl? -

i'm getting timeout trying consume ups's online tools api through php + curl. issue started happening morning. can reproduce issue using curl directly on ubuntu 14.04 bash. however, on ubuntu 16.04, can connect without issues.

ups support wasn't particularly helpful:

which of these servers have been completed tls 1.2 migration not known. suggested make sure security protocol enabled tls 1.0, 1.1 , 1.2 time being. though having full stack, should minimized problems, negotiation utilizes highest agreed upon supported protocol both parties.

here's verbose output on 14.04:

root@ubuntu14-nyc2-01:/etc/ssl/certs# curl https://onlinetools.ups.com -v * rebuilt url to: https://onlinetools.ups.com/ * hostname not found in dns cache *   trying 153.2.228.76... * connect 153.2.228.76 port 443 failed: connection timed out *   trying 153.2.224.76... * after 86387ms connect time, move on! * connect 153.2.224.76 port 443 failed: connection timed out * failed connect onlinetools.ups.com port 443: connection timed out * closing connection 0 curl: (7) failed connect onlinetools.ups.com port 443: connection timed out 

if try connect via openssl, times out:

root@ubuntu14-nyc2-01:/etc/ssl/certs# openssl s_client -connect onlinetools.ups.com:443 

any ideas problem is? pointers on troubleshooting? having issue ups api ubuntu 14.04?

here versions of relevant libraries:

1. curl: tried both 7.50, openssl/1.0.2h; 7.35, withopenssl/1.0.1f
2. openssl: tried 1.0.2h , 1.0.1f

i tried pulling cacerts haxx.se , pointed curl using --cacerts arg, no luck.

i'm pretty @ loss here ... missing?

connection time out tcp level problem , not ssl/tls problem. cannot connect host. not manage telnet or netcat peer in case. depending on how targets affected problem might firewall or router problem on targets end (i.e. target affected) or general network issue on end (i.e. hosts not work).