[GitHub] [trafficserver] mtorluemke opened a new issue, #9093: 9.2: mTLS client key load failure should revert to last known good config

[GitBox <gi...@apache.org>]

mtorluemke opened a new issue, #9093:
URL: https://github.com/apache/trafficserver/issues/9093

   These errors were logged after failing to load an mTLS key in ATS 9.2: 
   
   ```ERROR: SSL::139826296874752:error:0B080074:x509 certificate routines:X509_check_private_key:key values mismatch:crypto/x509/x509_cmp.c:303
   ERROR: failed to use client private key file from <path>
   ERROR: failed to create SSL client session```
   
   Then later: 
   
   ```CONNECT: attempt fail [CONNECTION_ERROR] to <ip>:<port> for host=<Host> connection_result=Unknown error 524289 [524289] error=Unknown error 524289 [524289] attempts=<connect_attemps_max_retries> url=<url>```
   
   Resulting in 502s sent downstream. Expected behavior is to revert to last known good config, I would think.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscribe@trafficserver.apache.org.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

[GitHub] [trafficserver] randall closed issue #9093: 9.2: mTLS client key load failure should revert to last known good config

[GitBox <gi...@apache.org>]

randall closed issue #9093: 9.2: mTLS client key load failure should revert to last known good config
URL: https://github.com/apache/trafficserver/issues/9093


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscribe@trafficserver.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org