By using AWS re:Post, you agree to the AWS re:Post Terms of Use
AWS re:Postre:Post

SSL Handshake error

0

Hi, I am using Nginx and Gunicorn (Django). My web has been deployed on EC2 since last year. I tried to use google calendar api on my web app. it is working fine in localhost but there is error 502 on production server. I checked on the nginx error log and found 'SSL handshake' failed. There must be some problem in Gunicorn or Nginx I think. When I checked the configuration of Nignx.conf, it says; "ssl_protocols TLSv1 TLSv1.1 TLSv1.2 TLSv1.3; # Dropping SSLv3, ref: POODLE". The error logs says (var/log/nginx/error.log) ; "2023/08/08 16:14:38 [crit] 26869#26869: *665 SSL_do_handshake() failed (SSL: error:0A00006C:SSL routines::bad key share) while SSL handshaking, > 2023/08/08 18:22:15 [error] 28556#28556: *1 upstream prematurely closed connection while reading response header from upstream, client: 101.176.>" Please let me know how to fix this problem. Thanks in advance.

Topics
Security, Identity, & ComplianceCompute
Tags
AWS Network FirewallAmazon EC2Support API
Language
English
rePost-User-2786755
asked 9 months ago1813 views
1 Answer
1

Hi,

Your NGINX server seems to detect a POODLE attack and drop SSLv3 connection for this reason: see https://www.baeldung.com/linux/poodle-disable-ssl-v3

This post details in section "Why Disabling SSLv3 Is a Solution to POODLE" how to solve your problem

Best,

Didier

profile pictureAWS
EXPERT
Didier_Durand
answered 9 months ago
  • rePost-User-2786755
    9 months ago

    Thank you for your quick response. I've implemented the 'signals.py' feature (I'm using Python with Django) to generate events in the Google Calendar whenever booking details are added to the database. This functionality works perfectly on my localhost, but unfortunately, it's not functioning as expected on the Nginx production server.

    I suspect that there might be an issue either between Gunicorn and Nginx or some other underlying factor.

    The desired behavior is that when I input booking details into the database, it should also trigger the creation of a corresponding event in the Google Calendar. However, on the production server, I'm encountering a 502 error instead.

    Any insights or suggestions on how to resolve this would be greatly appreciated.

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions

Relevant content