You are viewing a plain text version of this content. The canonical link for it is here.
Posted to notifications@apisix.apache.org by "zsmlinux (via GitHub)" <gi...@apache.org> on 2025/03/11 09:54:24 UTC
[I] help request: failed to match any SSL certificate by SNI [apisix]
zsmlinux opened a new issue, #12034:
URL: https://github.com/apache/apisix/issues/12034
### Description
### errorlog
>init.lua:205: http_ssl_client_hello_phase(): failed to match any SSL certificate by SNI: xxx.com.browser, context: ssl_client_hello_by_lua*, client: 183.232.4.48, server: 0.0.0.0:443
Why the SNI endwith .browser?
### Environment
- APISIX version (run `apisix version`):
- Operating system (run `uname -a`):
- OpenResty / Nginx version (run `openresty -V` or `nginx -V`):
- etcd version, if relevant (run `curl http://127.0.0.1:9090/v1/server_info`):
- APISIX Dashboard version, if relevant:
- Plugin runner version, for issues related to plugin runners:
- LuaRocks version, for installation issues (run `luarocks --version`):
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@apisix.apache.org.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] help request: failed to match any SSL certificate by SNI [apisix]
Posted by "zsmlinux (via GitHub)" <gi...@apache.org>.
zsmlinux commented on issue #12034:
URL: https://github.com/apache/apisix/issues/12034#issuecomment-2714000168
> Please provide the configuration information related to the certificate and complete the Environment details as much as possible. This will help with troubleshooting the issue.
```
ssl:
enable: true
listen:
-
port: 443
ssl_ciphers: "ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA:ECDHE-ECDSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-CHACHA20-POLY1305:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES256-SHA256:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:DES-CBC3-SHA"
ssl_protocols: "TLSv1 TLSv1.1 TLSv1.2"
ssl_session_tickets: false
```
This is certificate configuration,but I don't think any promblem here.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@apisix.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] help request: failed to match any SSL certificate by SNI [apisix]
Posted by "juzhiyuan (via GitHub)" <gi...@apache.org>.
juzhiyuan commented on issue #12034:
URL: https://github.com/apache/apisix/issues/12034#issuecomment-2716340551
Hi @zsmlinux, to reproduce your issue, we need complete steps to follow and try. Please provide a minimal reproducible demo.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@apisix.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] help request: failed to match any SSL certificate by SNI [apisix]
Posted by "Ethan-Zhang-ZH (via GitHub)" <gi...@apache.org>.
Ethan-Zhang-ZH closed issue #12034: help request: failed to match any SSL certificate by SNI
URL: https://github.com/apache/apisix/issues/12034
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@apisix.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] help request: failed to match any SSL certificate by SNI [apisix]
Posted by "Baoyuantop (via GitHub)" <gi...@apache.org>.
Baoyuantop commented on issue #12034:
URL: https://github.com/apache/apisix/issues/12034#issuecomment-2713479229
Please provide the configuration information related to the certificate and complete the Environment details as much as possible. This will help with troubleshooting the issue.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@apisix.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org