RE: Failed to accept socket: Failed accept: connection error: error:1407609C:SSL routines:SSL23_GET_CLIENT_HELLO:http request

[Marc Roos <M....@f1-outsourcing.eu>]

I don't think it is that, because connections to some files on 5050 are 
ok and the ones with even the hostname are not (see attchment). While I 
have this hostname in the cert

    Not Before: Feb 16 12:47:20 2019 GMT
            Not After : Feb 15 12:47:20 2024 GMT
        Subject: CN=m01.local
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:d4:62:c6:f4:9f:21:93:7f:c5:ef:f6:f4:4b:6c:
                    ea:ce:75:c6:0d:81:0d:98:


            X509v3 Subject Alternative Name:
                DNS:m01.local
    Signature Algorithm: sha512WithRSAEncryption

 



-----Original Message-----
Sent: 20 February 2019 23:20
To: user
Subject: Re: Failed to accept socket: Failed accept: connection error: 
error:1407609C:SSL routines:SSL23_GET_CLIENT_HELLO:http request

The "SSL routines:SSL23_GET_CLIENT_HELLO:http request" is OpenSSL's 
cryptic way of saying the client is using HTTP to talk to an HTTPS 
server.  Since you've disabled LIBPROCESS_SSL_SUPPORT_DOWNGRADE, the 
error should be expected.


On Wed, Feb 20, 2019 at 2:06 PM Marc Roos <M....@f1-outsourcing.eu> 
wrote:




	Why am I getting these when I connect with at browser to port 5050. 
How 
	to resolve this, looks like a bug or so. 192.168.10.151 has the 
same 
	cert as m1.local and the cert has even common name m01.local. But 
the 
	javascript is reporting "An error occurred: 
SEC_ERROR_UNKNOWN_ISSUER" 
	
	
	W0220 22:42:23.678849 21804 process.cpp:902] Failed to accept 
socket: 
	Failed accept: connection error: error:1407609C:SSL 
	routines:SSL23_GET_CLIENT_HELLO:http request
	W0220 22:43:23.678017 21804 process.cpp:902] Failed to accept 
socket: 
	Failed accept: connection error: error:1407609C:SSL 
	routines:SSL23_GET_CLIENT_HELLO:http request
	W0220 22:44:23.678727 21804 process.cpp:902] Failed to accept 
socket: 
	Failed accept: connection error: error:1407609C:SSL 
	routines:SSL23_GET_CLIENT_HELLO:http request
	W0220 22:45:23.677820 21804 process.cpp:902] Failed to accept 
socket: 
	Failed accept: connection error: error:1407609C:SSL 
	routines:SSL23_GET_CLIENT_HELLO:http request
	W0220 22:46:23.677990 21804 process.cpp:902] Failed to accept 
socket: 
	Failed accept: connection error: error:1407609C:SSL 
	routines:SSL23_GET_CLIENT_HELLO:http request
	W0220 22:47:23.678474 21804 process.cpp:902] Failed to accept 
socket: 
	Failed accept: connection error: error:1407609C:SSL 
	routines:SSL23_GET_CLIENT_HELLO:http request
	W0220 22:48:23.677384 21804 process.cpp:902] Failed to accept 
socket: 
	Failed accept: connection error: error:1407609C:SSL 
	routines:SSL23_GET_CLIENT_HELLO:http request
	
	LIBPROCESS_SSL_ENABLED=1
	LIBPROCESS_SSL_SUPPORT_DOWNGRADE=0
	LIBPROCESS_SSL_KEY_FILE=/etc/pki/tls/private/m01.local.key
	LIBPROCESS_SSL_CERT_FILE=/etc/pki/tls/certs/m01.local.crt
	LIBPROCESS_SSL_VERIFY_CERT=0
	LIBPROCESS_SSL_CA_FILE="/etc/pki/ca-trust/source/ca-own.crt"
	
	
	mesosphere-zookeeper-3.4.6-0.1.20141204175332.centos7.x86_64
	mesos-1.7.1-2.0.1.x86_64