Welcome! Log In Create A New Profile

Advanced

SSL error NginX 1.9.10

Posted by utan 
SSL error NginX 1.9.10
February 05, 2016 11:16AM
Hello guys,

So I compiled nginx by source version 1.9.10 and used openssl 1.0.2f and all went fine..

I have enabled HTTP/2 and I am getting errors in the nginx log

SSL_shutdown() failed (SSL: error:140C5042:SSL routines:ssl_undefined_function:called a function you should not call) while SSL handshaking

anyone got any idea whats going on?

Ubuntu x64 14.04
openssl 1.0.2f
nginx 1.9.10

regards
Re: SSL error NginX 1.9.10
February 05, 2016 05:23PM
So mo ideas? can't enable http/2 if i get that issue..
Re: SSL error NginX 1.9.10
February 10, 2016 03:58AM
I can just confirm this, happening here as well.

relevant part of the config

ssl_session_cache shared:SSL:40m;
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
ssl_ciphers 'ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:kEDH+AESGCM:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA256:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA:DHE-RSA-AES256-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA:AES256-SHA:AES:CAMELLIA:DES-CBC3-SHA:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!MD5:!PSK:!aECDH:!EDH-DSS-DES-CBC3-SHA:!EDH-RSA-DES-CBC3-SHA:!KRB5-DES-CBC3-SHA';
ssl_prefer_server_ciphers on;

- enabling/disabling ciphers does not help
- allowing only TLSv1.2 with only modern ciphers does not help

Thanks,
Tomas
Re: SSL error NginX 1.9.10
February 10, 2016 07:31AM
Here https://github.com/openssl/openssl/commit/64193c8218540499984cd63cda41f3cd491f3f59 is a commit that is supposed to fix it. I am not very familiar with openssl API, but comment in nginx code says /* SSL_shutdown() never returns -1, on error it returns 0 */, which does not seem to apply anymore.

Anyone ?

Thanks,
T
Re: SSL error NginX 1.9.10
February 10, 2016 02:14PM
Ok,

Interesting, so it should be fixed OpenSSL 1.1.0-pre3-dev .. Well I think I am going to wait till I know it become stable and can compile with NginX..

Thanks mate..
Re: SSL error NginX 1.9.10
February 19, 2016 08:29AM
For future reference https://github.com/openssl/openssl/issues/710#issuecomment-186144548

---
nginx for Windows http://nginx-win.ecsds.eu/
Sorry, only registered users may post in this forum.

Click here to login

Online Users

Guests: 93
Record Number of Users: 6 on February 13, 2018
Record Number of Guests: 421 on December 02, 2018
Powered by nginx      Powered by FreeBSD      PHP Powered      Powered by MariaDB      ipv6 ready