SSL Handshake error

0

Hi, I am using Nginx and Gunicorn (Django). My web has been deployed on EC2 since last year. I tried to use google calendar api on my web app. it is working fine in localhost but there is error 502 on production server. I checked on the nginx error log and found 'SSL handshake' failed. There must be some problem in Gunicorn or Nginx I think. When I checked the configuration of Nignx.conf, it says; "ssl_protocols TLSv1 TLSv1.1 TLSv1.2 TLSv1.3; # Dropping SSLv3, ref: POODLE". The error logs says (var/log/nginx/error.log) ; "2023/08/08 16:14:38 [crit] 26869#26869: *665 SSL_do_handshake() failed (SSL: error:0A00006C:SSL routines::bad key share) while SSL handshaking, > 2023/08/08 18:22:15 [error] 28556#28556: *1 upstream prematurely closed connection while reading response header from upstream, client: 101.176.>" Please let me know how to fix this problem. Thanks in advance.

已提问 9 个月前1874 查看次数
1 回答
1

Hi,

Your NGINX server seems to detect a POODLE attack and drop SSLv3 connection for this reason: see https://www.baeldung.com/linux/poodle-disable-ssl-v3

This post details in section "Why Disabling SSLv3 Is a Solution to POODLE" how to solve your problem

Best,

Didier

profile pictureAWS
专家
已回答 9 个月前
  • Thank you for your quick response. I've implemented the 'signals.py' feature (I'm using Python with Django) to generate events in the Google Calendar whenever booking details are added to the database. This functionality works perfectly on my localhost, but unfortunately, it's not functioning as expected on the Nginx production server.

    I suspect that there might be an issue either between Gunicorn and Nginx or some other underlying factor.

    The desired behavior is that when I input booking details into the database, it should also trigger the creation of a corresponding event in the Google Calendar. However, on the production server, I'm encountering a 502 error instead.

    Any insights or suggestions on how to resolve this would be greatly appreciated.

您未登录。 登录 发布回答。

一个好的回答可以清楚地解答问题和提供建设性反馈,并能促进提问者的职业发展。

回答问题的准则