cURL: connection refused from PHP, but works from command line

Gino Pane picture Gino Pane · May 10, 2017 · Viewed 7.5k times · Source

I have a strange behavior of cURL.

When I try to make a request using PHP functions, like this:

$curl = curl_init();

curl_setopt_array($curl, array(
    CURLOPT_URL => "https://<url_here>",
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_ENCODING => "",
    CURLOPT_MAXREDIRS => 10,
    CURLOPT_SSL_VERIFYPEER => false,
    CURLOPT_SSL_VERIFYHOST => false,
    CURLOPT_POST => 1,
    CURLOPT_POSTFIELDS => "<body here>",
    CURLOPT_HTTPHEADER => array(
        "content-type: application/xml"
    ),
));

I get Failed to connect to <url_here> port 443: Connection refused.

But when I try to make exactly the same call from command line (on the server, where PHP script is located), I get a valid response. So, the environment is fine, nothing blocks the 443 port.

Moreover, when I run the same PHP code on another server, it also works.

Is it possible that some PHP configuration options prevents cURL from working? Or should I check something else?

Thanks.


Output of local curl_version():

array(9) {
  ["version_number"]=>
  int(470784)
  ["age"]=>
  int(3)
  ["features"]=>
  int(968605)
  ["ssl_version_number"]=>
  int(0)
  ["version"]=>
  string(6) "7.47.0"
  ["host"]=>
  string(19) "x86_64-pc-linux-gnu"
  ["ssl_version"]=>
  string(14) "OpenSSL/1.0.2g"
  ["libz_version"]=>
  string(5) "1.2.8"
  ["protocols"]=>
  array(21) {
    [0]=>
    string(4) "dict"
    [1]=>
    string(4) "file"
    [2]=>
    string(3) "ftp"
    [3]=>
    string(4) "ftps"
    [4]=>
    string(6) "gopher"
    [5]=>
    string(4) "http"
    [6]=>
    string(5) "https"
    [7]=>
    string(4) "imap"
    [8]=>
    string(5) "imaps"
    [9]=>
    string(4) "ldap"
    [10]=>
    string(5) "ldaps"
    [11]=>
    string(4) "pop3"
    [12]=>
    string(5) "pop3s"
    [13]=>
    string(4) "rtmp"
    [14]=>
    string(4) "rtsp"
    [15]=>
    string(3) "smb"
    [16]=>
    string(4) "smbs"
    [17]=>
    string(4) "smtp"
    [18]=>
    string(5) "smtps"
    [19]=>
    string(6) "telnet"
    [20]=>
    string(4) "tftp"
  }
}

Output of local curl -V:

curl 7.47.0 (x86_64-pc-linux-gnu) libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3
Protocols: dict file ftp ftps gopher http https imap imaps ldap ldaps pop3 pop3s rtmp rtsp smb smbs smtp smtps telnet tftp
Features: AsynchDNS IDN IPv6 Largefile GSS-API Kerberos SPNEGO NTLM NTLM_WB SSL libz TLS-SRP UnixSockets

Output of server's curl_version():

array(9) {
  ["version_number"]=>
  int(462597)
  ["age"]=>
  int(2)
  ["features"]=>
  int(1597)
  ["ssl_version_number"]=>
  int(0)
  ["version"]=>
  string(6) "7.15.5"
  ["host"]=>
  string(23) "x86_64-redhat-linux-gnu"
  ["ssl_version"]=>
  string(15) " OpenSSL/0.9.8b"
  ["libz_version"]=>
  string(5) "1.2.3"
  ["protocols"]=>
  array(9) {
    [0]=>
    string(4) "tftp"
    [1]=>
    string(3) "ftp"
    [2]=>
    string(6) "telnet"
    [3]=>
    string(4) "dict"
    [4]=>
    string(4) "ldap"
    [5]=>
    string(4) "http"
    [6]=>
    string(4) "file"
    [7]=>
    string(5) "https"
    [8]=>
    string(4) "ftps"
  }
}

Answer

Gino Pane picture Gino Pane · May 11, 2017

Thanks to Alex Blex's comment I enabled the verbose output for PHP cURL, and also run command line cURL with -vvv option.

It made me see, that command line request was sent through the proxy, actually, whilst PHP cURL tried to make a direct call, which failed.

Then I used CURLOPT_PROXY option for my PHP request and it also started to work.