Notice
Recent Posts
Recent Comments
Link
일 | 월 | 화 | 수 | 목 | 금 | 토 |
---|---|---|---|---|---|---|
1 | 2 | |||||
3 | 4 | 5 | 6 | 7 | 8 | 9 |
10 | 11 | 12 | 13 | 14 | 15 | 16 |
17 | 18 | 19 | 20 | 21 | 22 | 23 |
24 | 25 | 26 | 27 | 28 | 29 | 30 |
Tags
- intelij devtools
- jpa auto increment
- spring boot hot swapping
- spring cloud api gateway
- sidecar
- spring boot http client
- spring cloud load balancer
- Distributed Tracing System
- spring cloud zuul
- Spring boot
- spring boot 2.0 ssl
- <iframe src="http://erea.tistory.com/attachment/cfile21.uf@997995485B2F785A3292EE.svg"></iframe>
- redis cluster
- Spring Cloud Bus
- <svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> <rect x="10" y="10" height="100" width="100" style="stroke:#ff0000; fill: #0000ff"/> </svg>
- msa 4.0
- Spring Cloud Config
- kubernates
- spring boot jks
- spring boot ssl
- Service Mesh
- MySQL
- java static resources
- tracing tool
- spring boot ssl verify skip
- high availabillty
- redis ha
- intelij spring boot devtools
- Istio
- sidecar patern
Archives
- Today
- Total
erea
k8s nginx ingress SSL connect error(Error in TLS handshake, trying SSLv3) 본문
카테고리 없음
k8s nginx ingress SSL connect error(Error in TLS handshake, trying SSLv3)
erea 2019. 10. 12. 17:15curl -v https://test.com
* About to connect() to test.com port 443 (#0)
* Trying xxxx.. connected
* Connected to xxxx (xxxxx) port 443 (#0)
* Initializing NSS with certpath: sql:/etc/pki/nssdb
* CAfile: /etc/pki/tls/certs/ca-bundle.crt
CApath: none
* NSS error -12286
* Error in TLS handshake, trying SSLv3...
> GET / HTTP/1.1
> User-Agent: curl/7.19.7 (x86_64-redhat-linux-gnu) libcurl/7.19.7 NSS/3.14.0.0 zlib/1.2.3 libidn/1.18 libssh2/1.4.2
> Host: xxxxx
> Accept: */*
>
* Connection died, retrying a fresh connect
* Closing connection #0
* Issue another request to this URL: 'xxxxxx'
* About to connect() to xxxxx.com port 443 (#0)
* Trying xxxx... connected
* Connected to xxxx (xxxx) port 443 (#0)
* TLS disabled due to previous handshake failure
* CAfile: /etc/pki/tls/certs/ca-bundle.crt
CApath: none
* NSS error -12286
* Closing connection #0
* SSL connect error
curl: (35) SSL connect error
Error in TLS handshake, trying SSLv3
openssl 버젼 체크
openssl version
OpenSSL 1.0.1e-fips 11 Feb 2013
nginx ingress values.yaml
config:
ssl-prefer-server-ciphers: "on"
ssl-protocols: "TLSv1 TLSv1.1 TLSv1.2"
ssl-ciphers: "ECDHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-SHA:ECDHE-RSA-AES256-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA:AES256-SHA:DES-CBC3-SHA:!DHE:!ADH:!AECDH:!3DES:!RC4:!MD5;"
Comments