Hello guys,

So I compiled nginx by source version 1.9.10 and used openssl 1.0.2f and all went fine..

I have enabled HTTP/2 and I am getting errors in the nginx log

SSL_shutdown() failed (SSL: error:140C5042:SSL routines:ssl_undefined_function:called a function you should not call) while SSL handshaking

anyone got any idea whats going on?

Ubuntu x64 14.04
openssl 1.0.2f
nginx 1.9.10

regards

So mo ideas? can't enable http/2 if i get that issue..

I can just confirm this, happening here as well.

relevant part of the config

ssl_session_cache shared:SSL:40m;
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
ssl_ciphers 'ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:kEDH+AESGCM:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA256:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA:DHE-RSA-AES256-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA:AES256-SHA:AES:CAMELLIA:DES-CBC3-SHA:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!MD5:!PSK:!aECDH:!EDH-DSS-DES-CBC3-SHA:!EDH-RSA-DES-CBC3-SHA:!KRB5-DES-CBC3-SHA';
ssl_prefer_server_ciphers on;

- enabling/disabling ciphers does not help
- allowing only TLSv1.2 with only modern ciphers does not help

Thanks,
Tomas

Here https://github.com/openssl/openssl/commit/64193c8218540499984cd63cda41f3cd491f3f59 is a commit that is supposed to fix it. I am not very familiar with openssl API, but comment in nginx code says /* SSL_shutdown() never returns -1, on error it returns 0 */, which does not seem to apply anymore.

Anyone ?

Thanks,
T

Ok,

Interesting, so it should be fixed OpenSSL 1.1.0-pre3-dev .. Well I think I am going to wait till I know it become stable and can compile with NginX..

Thanks mate..

For future reference https://github.com/openssl/openssl/issues/710#issuecomment-186144548

---
nginx for Windows http://nginx-win.ecsds.eu/