You are viewing a plain text version of this content. The canonical link for it is here.
Posted to user@mesos.apache.org by Marc Roos <M....@f1-outsourcing.eu> on 2019/02/20 22:06:03 UTC

Failed to accept socket: Failed accept: connection error: error:1407609C:SSL routines:SSL23_GET_CLIENT_HELLO:http request


Why am I getting these when I connect with at browser to port 5050. How 
to resolve this, looks like a bug or so. 192.168.10.151 has the same 
cert as m1.local and the cert has even common name m01.local. But the 
javascript is reporting "An error occurred: SEC_ERROR_UNKNOWN_ISSUER" 


W0220 22:42:23.678849 21804 process.cpp:902] Failed to accept socket: 
Failed accept: connection error: error:1407609C:SSL 
routines:SSL23_GET_CLIENT_HELLO:http request
W0220 22:43:23.678017 21804 process.cpp:902] Failed to accept socket: 
Failed accept: connection error: error:1407609C:SSL 
routines:SSL23_GET_CLIENT_HELLO:http request
W0220 22:44:23.678727 21804 process.cpp:902] Failed to accept socket: 
Failed accept: connection error: error:1407609C:SSL 
routines:SSL23_GET_CLIENT_HELLO:http request
W0220 22:45:23.677820 21804 process.cpp:902] Failed to accept socket: 
Failed accept: connection error: error:1407609C:SSL 
routines:SSL23_GET_CLIENT_HELLO:http request
W0220 22:46:23.677990 21804 process.cpp:902] Failed to accept socket: 
Failed accept: connection error: error:1407609C:SSL 
routines:SSL23_GET_CLIENT_HELLO:http request
W0220 22:47:23.678474 21804 process.cpp:902] Failed to accept socket: 
Failed accept: connection error: error:1407609C:SSL 
routines:SSL23_GET_CLIENT_HELLO:http request
W0220 22:48:23.677384 21804 process.cpp:902] Failed to accept socket: 
Failed accept: connection error: error:1407609C:SSL 
routines:SSL23_GET_CLIENT_HELLO:http request

LIBPROCESS_SSL_ENABLED=1
LIBPROCESS_SSL_SUPPORT_DOWNGRADE=0
LIBPROCESS_SSL_KEY_FILE=/etc/pki/tls/private/m01.local.key
LIBPROCESS_SSL_CERT_FILE=/etc/pki/tls/certs/m01.local.crt
LIBPROCESS_SSL_VERIFY_CERT=0
LIBPROCESS_SSL_CA_FILE="/etc/pki/ca-trust/source/ca-own.crt"


mesosphere-zookeeper-3.4.6-0.1.20141204175332.centos7.x86_64
mesos-1.7.1-2.0.1.x86_64

RE: Failed to accept socket: Failed accept: connection error: error:1407609C:SSL routines:SSL23_GET_CLIENT_HELLO:http request

Posted by Marc Roos <M....@f1-outsourcing.eu>.
I don't think it is that, because connections to some files on 5050 are 
ok and the ones with even the hostname are not (see attchment). While I 
have this hostname in the cert

    Not Before: Feb 16 12:47:20 2019 GMT
            Not After : Feb 15 12:47:20 2024 GMT
        Subject: CN=m01.local
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:d4:62:c6:f4:9f:21:93:7f:c5:ef:f6:f4:4b:6c:
                    ea:ce:75:c6:0d:81:0d:98:


            X509v3 Subject Alternative Name:
                DNS:m01.local
    Signature Algorithm: sha512WithRSAEncryption

 



-----Original Message-----
Sent: 20 February 2019 23:20
To: user
Subject: Re: Failed to accept socket: Failed accept: connection error: 
error:1407609C:SSL routines:SSL23_GET_CLIENT_HELLO:http request

The "SSL routines:SSL23_GET_CLIENT_HELLO:http request" is OpenSSL's 
cryptic way of saying the client is using HTTP to talk to an HTTPS 
server.  Since you've disabled LIBPROCESS_SSL_SUPPORT_DOWNGRADE, the 
error should be expected.


On Wed, Feb 20, 2019 at 2:06 PM Marc Roos <M....@f1-outsourcing.eu> 
wrote:




	Why am I getting these when I connect with at browser to port 5050. 
How 
	to resolve this, looks like a bug or so. 192.168.10.151 has the 
same 
	cert as m1.local and the cert has even common name m01.local. But 
the 
	javascript is reporting "An error occurred: 
SEC_ERROR_UNKNOWN_ISSUER" 
	
	
	W0220 22:42:23.678849 21804 process.cpp:902] Failed to accept 
socket: 
	Failed accept: connection error: error:1407609C:SSL 
	routines:SSL23_GET_CLIENT_HELLO:http request
	W0220 22:43:23.678017 21804 process.cpp:902] Failed to accept 
socket: 
	Failed accept: connection error: error:1407609C:SSL 
	routines:SSL23_GET_CLIENT_HELLO:http request
	W0220 22:44:23.678727 21804 process.cpp:902] Failed to accept 
socket: 
	Failed accept: connection error: error:1407609C:SSL 
	routines:SSL23_GET_CLIENT_HELLO:http request
	W0220 22:45:23.677820 21804 process.cpp:902] Failed to accept 
socket: 
	Failed accept: connection error: error:1407609C:SSL 
	routines:SSL23_GET_CLIENT_HELLO:http request
	W0220 22:46:23.677990 21804 process.cpp:902] Failed to accept 
socket: 
	Failed accept: connection error: error:1407609C:SSL 
	routines:SSL23_GET_CLIENT_HELLO:http request
	W0220 22:47:23.678474 21804 process.cpp:902] Failed to accept 
socket: 
	Failed accept: connection error: error:1407609C:SSL 
	routines:SSL23_GET_CLIENT_HELLO:http request
	W0220 22:48:23.677384 21804 process.cpp:902] Failed to accept 
socket: 
	Failed accept: connection error: error:1407609C:SSL 
	routines:SSL23_GET_CLIENT_HELLO:http request
	
	LIBPROCESS_SSL_ENABLED=1
	LIBPROCESS_SSL_SUPPORT_DOWNGRADE=0
	LIBPROCESS_SSL_KEY_FILE=/etc/pki/tls/private/m01.local.key
	LIBPROCESS_SSL_CERT_FILE=/etc/pki/tls/certs/m01.local.crt
	LIBPROCESS_SSL_VERIFY_CERT=0
	LIBPROCESS_SSL_CA_FILE="/etc/pki/ca-trust/source/ca-own.crt"
	
	
	mesosphere-zookeeper-3.4.6-0.1.20141204175332.centos7.x86_64
	mesos-1.7.1-2.0.1.x86_64

Re: Failed to accept socket: Failed accept: connection error: error:1407609C:SSL routines:SSL23_GET_CLIENT_HELLO:http request

Posted by Joseph Wu <jo...@mesosphere.io>.
The "SSL routines:SSL23_GET_CLIENT_HELLO:http request" is OpenSSL's cryptic
way of saying the client is using HTTP to talk to an HTTPS server.  Since
you've disabled LIBPROCESS_SSL_SUPPORT_DOWNGRADE, the error should be
expected.

On Wed, Feb 20, 2019 at 2:06 PM Marc Roos <M....@f1-outsourcing.eu> wrote:

>
>
> Why am I getting these when I connect with at browser to port 5050. How
> to resolve this, looks like a bug or so. 192.168.10.151 has the same
> cert as m1.local and the cert has even common name m01.local. But the
> javascript is reporting "An error occurred: SEC_ERROR_UNKNOWN_ISSUER"
>
>
> W0220 22:42:23.678849 21804 process.cpp:902] Failed to accept socket:
> Failed accept: connection error: error:1407609C:SSL
> routines:SSL23_GET_CLIENT_HELLO:http request
> W0220 22:43:23.678017 21804 process.cpp:902] Failed to accept socket:
> Failed accept: connection error: error:1407609C:SSL
> routines:SSL23_GET_CLIENT_HELLO:http request
> W0220 22:44:23.678727 21804 process.cpp:902] Failed to accept socket:
> Failed accept: connection error: error:1407609C:SSL
> routines:SSL23_GET_CLIENT_HELLO:http request
> W0220 22:45:23.677820 21804 process.cpp:902] Failed to accept socket:
> Failed accept: connection error: error:1407609C:SSL
> routines:SSL23_GET_CLIENT_HELLO:http request
> W0220 22:46:23.677990 21804 process.cpp:902] Failed to accept socket:
> Failed accept: connection error: error:1407609C:SSL
> routines:SSL23_GET_CLIENT_HELLO:http request
> W0220 22:47:23.678474 21804 process.cpp:902] Failed to accept socket:
> Failed accept: connection error: error:1407609C:SSL
> routines:SSL23_GET_CLIENT_HELLO:http request
> W0220 22:48:23.677384 21804 process.cpp:902] Failed to accept socket:
> Failed accept: connection error: error:1407609C:SSL
> routines:SSL23_GET_CLIENT_HELLO:http request
>
> LIBPROCESS_SSL_ENABLED=1
> LIBPROCESS_SSL_SUPPORT_DOWNGRADE=0
> LIBPROCESS_SSL_KEY_FILE=/etc/pki/tls/private/m01.local.key
> LIBPROCESS_SSL_CERT_FILE=/etc/pki/tls/certs/m01.local.crt
> LIBPROCESS_SSL_VERIFY_CERT=0
> LIBPROCESS_SSL_CA_FILE="/etc/pki/ca-trust/source/ca-own.crt"
>
>
> mesosphere-zookeeper-3.4.6-0.1.20141204175332.centos7.x86_64
> mesos-1.7.1-2.0.1.x86_64
>