erea

k8s nginx ingress SSL connect error(Error in TLS handshake, trying SSLv3) 본문

카테고리 없음

k8s nginx ingress SSL connect error(Error in TLS handshake, trying SSLv3)

erea 2019. 10. 12. 17:15
curl -v https://test.com
* About to connect() to test.com port 443 (#0)
*   Trying xxxx.. connected
* Connected to xxxx (xxxxx) port 443 (#0)
* Initializing NSS with certpath: sql:/etc/pki/nssdb
*   CAfile: /etc/pki/tls/certs/ca-bundle.crt
  CApath: none
* NSS error -12286
* Error in TLS handshake, trying SSLv3...
> GET / HTTP/1.1
> User-Agent: curl/7.19.7 (x86_64-redhat-linux-gnu) libcurl/7.19.7 NSS/3.14.0.0 zlib/1.2.3 libidn/1.18 libssh2/1.4.2
> Host: xxxxx
> Accept: */*
>
* Connection died, retrying a fresh connect
* Closing connection #0
* Issue another request to this URL: 'xxxxxx'
* About to connect() to xxxxx.com port 443 (#0)
*   Trying xxxx... connected
* Connected to xxxx (xxxx) port 443 (#0)
* TLS disabled due to previous handshake failure
*   CAfile: /etc/pki/tls/certs/ca-bundle.crt
  CApath: none
* NSS error -12286
* Closing connection #0
* SSL connect error
curl: (35) SSL connect error

Error in TLS handshake, trying SSLv3

openssl 버젼 체크

openssl version
OpenSSL 1.0.1e-fips 11 Feb 2013

nginx ingress values.yaml

config:
    ssl-prefer-server-ciphers: "on"
    ssl-protocols: "TLSv1 TLSv1.1 TLSv1.2"
    ssl-ciphers: "ECDHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-SHA:ECDHE-RSA-AES256-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA:AES256-SHA:DES-CBC3-SHA:!DHE:!ADH:!AECDH:!3DES:!RC4:!MD5;"
Comments