You are viewing a plain text version of this content. The canonical link for it is here.
Posted to notifications@apisix.apache.org by GitBox <gi...@apache.org> on 2022/10/24 06:55:38 UTC
[GitHub] [apisix] wangfeng22 opened a new issue, #8155: help request: http_ssl_phase(): failed to fetch ssl config: failed to find SNI
wangfeng22 opened a new issue, #8155:
URL: https://github.com/apache/apisix/issues/8155
### Description
I have set SSL certification, but sometimes the gateway still occurs this error.
```
2022/10/24 12:41:05 [error] 30233#30233: *1237045 [lua] init.lua:163: http_ssl_phase(): failed to fetch ssl config: failed to find SNI: please check if the client requests via IP or uses an outdated protocol. If you need to report an issue, provide a packet capture file of the TLS handshake., context: ssl_certificate_by_lua*, client: 10.36.216.12, server: 0.0.0.0:443
```
I use Wireshark to capture some packets as follow.
<img width="1388" alt="image" src="https://user-images.githubusercontent.com/42538040/197465464-b8a68996-967a-4c64-bcb3-c31fe8e6caab.png">
client hello
<img width="928" alt="image" src="https://user-images.githubusercontent.com/42538040/197464999-4cf4fb1e-60b3-471a-bf49-bfdca65049b5.png">
server
<img width="810" alt="image" src="https://user-images.githubusercontent.com/42538040/197465206-a770e383-85f9-40a2-a2ae-bb84ed433c88.png">
### Environment
- APISIX version (run `apisix version`): 2.13.2
- Operating system (run `uname -a`):
- OpenResty / Nginx version (run `openresty -V` or `nginx -V`):
- etcd version, if relevant (run `curl http://127.0.0.1:9090/v1/server_info`):
- APISIX Dashboard version, if relevant:
- Plugin runner version, for issues related to plugin runners:
- LuaRocks version, for installation issues (run `luarocks --version`):
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@apisix.apache.org.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [apisix] tokers commented on issue #8155: help request: http_ssl_phase(): failed to fetch ssl config: failed to find SNI
Posted by GitBox <gi...@apache.org>.
tokers commented on issue #8155:
URL: https://github.com/apache/apisix/issues/8155#issuecomment-1288761909
It looks like your client doesn't send Server Name Indication extension?
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@apisix.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [apisix] wangfeng22 closed issue #8155: help request: http_ssl_phase(): failed to fetch ssl config: failed to find SNI
Posted by GitBox <gi...@apache.org>.
wangfeng22 closed issue #8155: help request: http_ssl_phase(): failed to fetch ssl config: failed to find SNI
URL: https://github.com/apache/apisix/issues/8155
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@apisix.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org