Notice
Recent Posts
Recent Comments
Link
일 | 월 | 화 | 수 | 목 | 금 | 토 |
---|---|---|---|---|---|---|
1 | 2 | 3 | 4 | 5 | ||
6 | 7 | 8 | 9 | 10 | 11 | 12 |
13 | 14 | 15 | 16 | 17 | 18 | 19 |
20 | 21 | 22 | 23 | 24 | 25 | 26 |
27 | 28 | 29 | 30 |
Tags
- Istio
- spring boot jks
- <iframe src="http://erea.tistory.com/attachment/cfile21.uf@997995485B2F785A3292EE.svg"></iframe>
- spring boot 2.0 ssl
- jpa auto increment
- sidecar
- msa 4.0
- redis ha
- spring cloud api gateway
- Distributed Tracing System
- sidecar patern
- Service Mesh
- Spring Cloud Config
- intelij spring boot devtools
- java static resources
- spring cloud zuul
- tracing tool
- <svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> <rect x="10" y="10" height="100" width="100" style="stroke:#ff0000; fill: #0000ff"/> </svg>
- high availabillty
- spring boot hot swapping
- MySQL
- redis cluster
- kubernates
- spring boot ssl
- Spring boot
- Spring Cloud Bus
- spring boot http client
- intelij devtools
- spring boot ssl verify skip
- spring cloud load balancer
Archives
- Today
- Total
erea
k8s nginx ingress SSL connect error(Error in TLS handshake, trying SSLv3) 본문
카테고리 없음
k8s nginx ingress SSL connect error(Error in TLS handshake, trying SSLv3)
erea 2019. 10. 12. 17:15curl -v https://test.com
* About to connect() to test.com port 443 (#0)
* Trying xxxx.. connected
* Connected to xxxx (xxxxx) port 443 (#0)
* Initializing NSS with certpath: sql:/etc/pki/nssdb
* CAfile: /etc/pki/tls/certs/ca-bundle.crt
CApath: none
* NSS error -12286
* Error in TLS handshake, trying SSLv3...
> GET / HTTP/1.1
> User-Agent: curl/7.19.7 (x86_64-redhat-linux-gnu) libcurl/7.19.7 NSS/3.14.0.0 zlib/1.2.3 libidn/1.18 libssh2/1.4.2
> Host: xxxxx
> Accept: */*
>
* Connection died, retrying a fresh connect
* Closing connection #0
* Issue another request to this URL: 'xxxxxx'
* About to connect() to xxxxx.com port 443 (#0)
* Trying xxxx... connected
* Connected to xxxx (xxxx) port 443 (#0)
* TLS disabled due to previous handshake failure
* CAfile: /etc/pki/tls/certs/ca-bundle.crt
CApath: none
* NSS error -12286
* Closing connection #0
* SSL connect error
curl: (35) SSL connect error
Error in TLS handshake, trying SSLv3
openssl 버젼 체크
openssl version
OpenSSL 1.0.1e-fips 11 Feb 2013
nginx ingress values.yaml
config:
ssl-prefer-server-ciphers: "on"
ssl-protocols: "TLSv1 TLSv1.1 TLSv1.2"
ssl-ciphers: "ECDHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-SHA:ECDHE-RSA-AES256-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA:AES256-SHA:DES-CBC3-SHA:!DHE:!ADH:!AECDH:!3DES:!RC4:!MD5;"