curl：（35）OpenSSL SSL_connect：连接中的SSL_ERROR_SYSCALL

Question

在我的一台服务器上，我遇到了 SSL 问题，任何对 api.eu.mailgun.net:443 的 CURL 调用都会出现 SSL 错误

curl --verbose https://api.eu.mailgun.net
*   Trying 34.95.107.114:443...
* Connected to api.eu.mailgun.net (34.95.107.114) port 443 (#0)
* ALPN, offering h2
* ALPN, offering http/1.1
* successfully set certificate verify locations:
*  CAfile: /etc/ssl/certs/ca-certificates.crt
*  CApath: /etc/ssl/certs
* TLSv1.3 (OUT), TLS handshake, Client hello (1):
* OpenSSL SSL_connect: SSL_ERROR_SYSCALL in connection to api.eu.mailgun.net:443 
* Closing connection 0
curl: (35) OpenSSL SSL_connect: SSL_ERROR_SYSCALL in connection to api.eu.mailgun.net:443

SSLScan 不返回任何有效协议：

sslscan https://api.eu.mailgun.net
Version: 2.0.7
OpenSSL 1.1.1n  15 Mar 2022

Connected to 34.95.107.114

Testing SSL server api.eu.mailgun.net on port 443 using SNI name api.eu.mailgun.net

  SSL/TLS Protocols:
SSLv2     disabled
SSLv3     disabled
TLSv1.0   disabled
TLSv1.1   disabled
TLSv1.2   disabled
TLSv1.3   disabled

  TLS Fallback SCSV:
Connection failed - unable to determine TLS Fallback SCSV support

  TLS renegotiation:
Session renegotiation not supported

  TLS Compression:
OpenSSL version does not support compression
Rebuild with zlib1g-dev package for zlib support

  Heartbleed:

  Supported Server Cipher(s):
Certificate information cannot be retrieved.

如有任何帮助，我们将不胜感激

这可能是有用的信息：

• 几个月后我恢复了 Hetzner 云快照
• Debian 11 发行版
• 时间是最新的

Answer 1

没关系，Hetzner 已经解决了这个问题：

Unfortunately, some of our IPs are wrongly located in Iran by some GeoIP databases.
We cannot influence these databases.

Answer 2

我也遇到了同样的问题，Hetzner 也回答了我：

If this leads to issues for you, please assign alternative IP
addresses using the "Primary IPs" menu of your respective project

您必须停止服务器，取消分配当前的 IP 地址，创建另一个主 IP，分配 IP 地址并启动服务器。