SSL Handshake error

0

Hi, I am using Nginx and Gunicorn (Django). My web has been deployed on EC2 since last year. I tried to use google calendar api on my web app. it is working fine in localhost but there is error 502 on production server. I checked on the nginx error log and found 'SSL handshake' failed. There must be some problem in Gunicorn or Nginx I think. When I checked the configuration of Nignx.conf, it says; "ssl_protocols TLSv1 TLSv1.1 TLSv1.2 TLSv1.3; # Dropping SSLv3, ref: POODLE". The error logs says (var/log/nginx/error.log) ; "2023/08/08 16:14:38 [crit] 26869#26869: *665 SSL_do_handshake() failed (SSL: error:0A00006C:SSL routines::bad key share) while SSL handshaking, > 2023/08/08 18:22:15 [error] 28556#28556: *1 upstream prematurely closed connection while reading response header from upstream, client: 101.176.>" Please let me know how to fix this problem. Thanks in advance.

1回答
1

Hi,

Your NGINX server seems to detect a POODLE attack and drop SSLv3 connection for this reason: see https://www.baeldung.com/linux/poodle-disable-ssl-v3

This post details in section "Why Disabling SSLv3 Is a Solution to POODLE" how to solve your problem

Best,

Didier

profile pictureAWS
エキスパート
回答済み 9ヶ月前
  • Thank you for your quick response. I've implemented the 'signals.py' feature (I'm using Python with Django) to generate events in the Google Calendar whenever booking details are added to the database. This functionality works perfectly on my localhost, but unfortunately, it's not functioning as expected on the Nginx production server.

    I suspect that there might be an issue either between Gunicorn and Nginx or some other underlying factor.

    The desired behavior is that when I input booking details into the database, it should also trigger the creation of a corresponding event in the Google Calendar. However, on the production server, I'm encountering a 502 error instead.

    Any insights or suggestions on how to resolve this would be greatly appreciated.

ログインしていません。 ログイン 回答を投稿する。

優れた回答とは、質問に明確に答え、建設的なフィードバックを提供し、質問者の専門分野におけるスキルの向上を促すものです。

質問に答えるためのガイドライン

関連するコンテンツ