Notice
Recent Posts
Recent Comments
Link
일 | 월 | 화 | 수 | 목 | 금 | 토 |
---|---|---|---|---|---|---|
1 | 2 | 3 | ||||
4 | 5 | 6 | 7 | 8 | 9 | 10 |
11 | 12 | 13 | 14 | 15 | 16 | 17 |
18 | 19 | 20 | 21 | 22 | 23 | 24 |
25 | 26 | 27 | 28 | 29 | 30 | 31 |
Tags
- kubernates
- java static resources
- Spring Cloud Bus
- spring boot http client
- tracing tool
- spring cloud zuul
- high availabillty
- msa 4.0
- spring boot hot swapping
- spring boot jks
- spring boot ssl verify skip
- spring boot 2.0 ssl
- Spring boot
- sidecar patern
- jpa auto increment
- intelij spring boot devtools
- Spring Cloud Config
- <svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> <rect x="10" y="10" height="100" width="100" style="stroke:#ff0000; fill: #0000ff"/> </svg>
- sidecar
- Istio
- spring boot ssl
- spring cloud load balancer
- Distributed Tracing System
- spring cloud api gateway
- Service Mesh
- redis cluster
- redis ha
- MySQL
- <iframe src="http://erea.tistory.com/attachment/cfile21.uf@997995485B2F785A3292EE.svg"></iframe>
- intelij devtools
Archives
- Today
- Total
erea
k8s nginx ingress SSL connect error(Error in TLS handshake, trying SSLv3) 본문
카테고리 없음
k8s nginx ingress SSL connect error(Error in TLS handshake, trying SSLv3)
erea 2019. 10. 12. 17:15curl -v https://test.com
* About to connect() to test.com port 443 (#0)
* Trying xxxx.. connected
* Connected to xxxx (xxxxx) port 443 (#0)
* Initializing NSS with certpath: sql:/etc/pki/nssdb
* CAfile: /etc/pki/tls/certs/ca-bundle.crt
CApath: none
* NSS error -12286
* Error in TLS handshake, trying SSLv3...
> GET / HTTP/1.1
> User-Agent: curl/7.19.7 (x86_64-redhat-linux-gnu) libcurl/7.19.7 NSS/3.14.0.0 zlib/1.2.3 libidn/1.18 libssh2/1.4.2
> Host: xxxxx
> Accept: */*
>
* Connection died, retrying a fresh connect
* Closing connection #0
* Issue another request to this URL: 'xxxxxx'
* About to connect() to xxxxx.com port 443 (#0)
* Trying xxxx... connected
* Connected to xxxx (xxxx) port 443 (#0)
* TLS disabled due to previous handshake failure
* CAfile: /etc/pki/tls/certs/ca-bundle.crt
CApath: none
* NSS error -12286
* Closing connection #0
* SSL connect error
curl: (35) SSL connect error
Error in TLS handshake, trying SSLv3
openssl 버젼 체크
openssl version
OpenSSL 1.0.1e-fips 11 Feb 2013
nginx ingress values.yaml
config:
ssl-prefer-server-ciphers: "on"
ssl-protocols: "TLSv1 TLSv1.1 TLSv1.2"
ssl-ciphers: "ECDHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-SHA:ECDHE-RSA-AES256-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA:AES256-SHA:DES-CBC3-SHA:!DHE:!ADH:!AECDH:!3DES:!RC4:!MD5;"
Comments