SSL Handshake error

0

Hi, I am using Nginx and Gunicorn (Django). My web has been deployed on EC2 since last year. I tried to use google calendar api on my web app. it is working fine in localhost but there is error 502 on production server. I checked on the nginx error log and found 'SSL handshake' failed. There must be some problem in Gunicorn or Nginx I think. When I checked the configuration of Nignx.conf, it says; "ssl_protocols TLSv1 TLSv1.1 TLSv1.2 TLSv1.3; # Dropping SSLv3, ref: POODLE". The error logs says (var/log/nginx/error.log) ; "2023/08/08 16:14:38 [crit] 26869#26869: *665 SSL_do_handshake() failed (SSL: error:0A00006C:SSL routines::bad key share) while SSL handshaking, > 2023/08/08 18:22:15 [error] 28556#28556: *1 upstream prematurely closed connection while reading response header from upstream, client: 101.176.>" Please let me know how to fix this problem. Thanks in advance.

1 Risposta
1

Hi,

Your NGINX server seems to detect a POODLE attack and drop SSLv3 connection for this reason: see https://www.baeldung.com/linux/poodle-disable-ssl-v3

This post details in section "Why Disabling SSLv3 Is a Solution to POODLE" how to solve your problem

Best,

Didier

profile pictureAWS
ESPERTO
con risposta 9 mesi fa
  • Thank you for your quick response. I've implemented the 'signals.py' feature (I'm using Python with Django) to generate events in the Google Calendar whenever booking details are added to the database. This functionality works perfectly on my localhost, but unfortunately, it's not functioning as expected on the Nginx production server.

    I suspect that there might be an issue either between Gunicorn and Nginx or some other underlying factor.

    The desired behavior is that when I input booking details into the database, it should also trigger the creation of a corresponding event in the Google Calendar. However, on the production server, I'm encountering a 502 error instead.

    Any insights or suggestions on how to resolve this would be greatly appreciated.

Accesso non effettuato. Accedi per postare una risposta.

Una buona risposta soddisfa chiaramente la domanda, fornisce un feedback costruttivo e incoraggia la crescita professionale del richiedente.

Linee guida per rispondere alle domande