ssl - Bluemix Secure Gateway Client TLS failing -


we facing issue on client side tls. see below handshake done there no more data sent sg client connection closed.

to test using link https://caplonsgprd-x.integration.ibmcloud.com:xxxx/path/ initiate request reaches client configured tls , see below in logs:

[wed sep 30 14:22:13 2015] [debug] ssl_engine_kernel.c(1907): openssl: handshake: done [wed sep 30 14:22:13 2015] [info] connection: client ip: xx.xx.xx.xx, protocol: tlsv1.2, cipher: ecdhe-rsa-aes256-gcm-sha384 (256/256 bits) [wed sep 30 14:22:13 2015] [debug] mod_monitoring.c(213): monitor: update counters event 'tls:handshake:done' [wed sep 30 14:22:13 2015] [debug] monitoringcounter.c(375): monitor: monitoringcounter_updatecounter (null) tls_handshakesucceed 1 [wed sep 30 14:22:13 2015] [debug] mod_monitoring.c(213): monitor: update counters event 'tls:handshake:exit'  [wed sep 30 14:22:13 2015] [debug] ssl_engine_io.c(1952): openssl: i/o error, 5 bytes expected read on bio#7f5eb00011e0 [mem: 7f5ef0751de3]  -> here expected client send applicative data https request path. [wed sep 30 14:22:13 2015] [info] [client xx.xx.xx.xx] (70014)end of file found: ssl input filter read failed. 

i've gone through flow in bluemix of creating tcp destination mongodb client side tls enabled self signed cert.

if cert uploaded, looks client needs restarted pick cert , use it. once client restarted, cert should recognized , able connect ssl enabled mongodb.


edit: secure gateway not support multiple client tls ca files uploaded, client fail connect if chain consists of more 1 ca cert.


Comments

Popular posts from this blog

1111. appearing after print sequence - php -

java - WARN : org.springframework.web.servlet.PageNotFound - No mapping found for HTTP request with URI [/board/] in DispatcherServlet with name 'appServlet' -

Ruby on Rails, ActiveRecord, Postgres, UTF-8 and ASCII-8BIT encodings -