Notice
Recent Posts
Recent Comments
Link
일 | 월 | 화 | 수 | 목 | 금 | 토 |
---|---|---|---|---|---|---|
1 | 2 | 3 | 4 | 5 | 6 | 7 |
8 | 9 | 10 | 11 | 12 | 13 | 14 |
15 | 16 | 17 | 18 | 19 | 20 | 21 |
22 | 23 | 24 | 25 | 26 | 27 | 28 |
29 | 30 |
Tags
- Istio
- redis ha
- <svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> <rect x="10" y="10" height="100" width="100" style="stroke:#ff0000; fill: #0000ff"/> </svg>
- spring boot hot swapping
- sidecar
- intelij devtools
- redis cluster
- Service Mesh
- spring cloud load balancer
- Spring Cloud Config
- msa 4.0
- tracing tool
- spring boot ssl verify skip
- spring boot ssl
- MySQL
- spring boot jks
- kubernates
- <iframe src="http://erea.tistory.com/attachment/cfile21.uf@997995485B2F785A3292EE.svg"></iframe>
- high availabillty
- spring cloud api gateway
- spring boot 2.0 ssl
- Spring boot
- intelij spring boot devtools
- spring cloud zuul
- java static resources
- Spring Cloud Bus
- spring boot http client
- Distributed Tracing System
- jpa auto increment
- sidecar patern
Archives
- Today
- Total
erea
k8s nginx ingress SSL connect error(Error in TLS handshake, trying SSLv3) 본문
카테고리 없음
k8s nginx ingress SSL connect error(Error in TLS handshake, trying SSLv3)
erea 2019. 10. 12. 17:15curl -v https://test.com
* About to connect() to test.com port 443 (#0)
* Trying xxxx.. connected
* Connected to xxxx (xxxxx) port 443 (#0)
* Initializing NSS with certpath: sql:/etc/pki/nssdb
* CAfile: /etc/pki/tls/certs/ca-bundle.crt
CApath: none
* NSS error -12286
* Error in TLS handshake, trying SSLv3...
> GET / HTTP/1.1
> User-Agent: curl/7.19.7 (x86_64-redhat-linux-gnu) libcurl/7.19.7 NSS/3.14.0.0 zlib/1.2.3 libidn/1.18 libssh2/1.4.2
> Host: xxxxx
> Accept: */*
>
* Connection died, retrying a fresh connect
* Closing connection #0
* Issue another request to this URL: 'xxxxxx'
* About to connect() to xxxxx.com port 443 (#0)
* Trying xxxx... connected
* Connected to xxxx (xxxx) port 443 (#0)
* TLS disabled due to previous handshake failure
* CAfile: /etc/pki/tls/certs/ca-bundle.crt
CApath: none
* NSS error -12286
* Closing connection #0
* SSL connect error
curl: (35) SSL connect error
Error in TLS handshake, trying SSLv3
openssl 버젼 체크
openssl version
OpenSSL 1.0.1e-fips 11 Feb 2013
nginx ingress values.yaml
config:
ssl-prefer-server-ciphers: "on"
ssl-protocols: "TLSv1 TLSv1.1 TLSv1.2"
ssl-ciphers: "ECDHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-SHA:ECDHE-RSA-AES256-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA:AES256-SHA:DES-CBC3-SHA:!DHE:!ADH:!AECDH:!3DES:!RC4:!MD5;"
Comments