intermittent openssl error with nginx on ubuntu 14.04 -


i got intermittent ssl handshake errors nginx: 

2015/08/23 08:46:53 [info] 38013#0: *14817 ssl_do_handshake() failed (ssl: error:1408f119:ssl routines:ssl3_get_record:decryption failed or bad record mac) while ssl handshaking, client: 10.203.128.125, server: 0.0.0.0:5989 2015/08/23 09:24:15 [info] 38013#0: *27818 peer closed connection in ssl handshake while ssl handshaking, client: 10.203.128.125, server: 0.0.0.0:5989

the error rate pretty low, 1 out of 10000 (based on error , request in last 24 ours)

i upgraded nginx , openssl latest version 14.04.

dpkg -l | egrep "ssl|nginx" ii  libflac8:amd64                   1.3.0-2                               amd64        free lossless audio codec - runtime c library ii  libgnutls-openssl27:amd64        2.12.23-12ubuntu2.1                   amd64        gnu tls library - openssl wrapper ii  libssl-dev:amd64                 1.0.1f-1ubuntu2.15                    amd64        secure sockets layer toolkit - development files ii  libssl1.0.0:amd64                1.0.1f-1ubuntu2.15                    amd64        secure sockets layer toolkit - shared libraries ii  nginx                            1.4.6-1ubuntu3.3                               small, powerful, scalable web/proxy server ii  nginx-common                     1.4.6-1ubuntu3.3                               small, powerful, scalable web/proxy server - common files ii  nginx-core                       1.4.6-1ubuntu3.3                      amd64        nginx web/proxy server (core version) ii  openssl                          1.0.1f-1ubuntu2.15                    amd64        secure sockets layer toolkit - cryptographic utility ii  ssl-cert                         1.0.33                                         simple debconf wrapper openssl

the client scvmm 2012 r2.

does know cause of this?

after disabled tls1.2. ssl error gone. here configuration in nginx after change:

ssl_protocols tlsv1 tlsv1.1; ssl_ciphers ecdh+aesgcm:dh+aesgcm:ecdh+aes256:dh+aes256:ecdh+aes128:dh+aes:ecdh+3des:dh+3des:rsa+aes:rsa+3des:!anull:!md5:!dss; ssl_prefer_server_ciphers on;

-

Comments

Post a Comment

Popular posts from this blog

java - UnknownEntityTypeException: Unable to locate persister (Hibernate 5.0) -

Image
in code below when try execute main.java getting exception: exception in thread "main" org.hibernate.unknownentitytypeexception: unable locate persister: com.np.vta.test.pojo.users @ org.hibernate.internal.sessionfactoryimpl.locateentitypersister(sessionfactoryimpl.java:792) @ org.hibernate.internal.sessionimpl.locateentitypersister(sessionimpl.java:2637) @ org.hibernate.internal.sessionimpl.access$2500(sessionimpl.java:164) @ org.hibernate.internal.sessionimpl$identifierloadaccessimpl.<init>(sessionimpl.java:2575) @ org.hibernate.internal.sessionimpl$identifierloadaccessimpl.<init>(sessionimpl.java:2562) @ org.hibernate.internal.sessionimpl.byid(sessionimpl.java:1044) @ org.hibernate.internal.sessionimpl.get(sessionimpl.java:955) @ com.app.test.main.main(main.java:20) but if uncomment cfg.addclass( users.class ).addresource( "com/np/vta/test/pojo/users.hbm.xml" ); code works fine. why not reading <mapping...
Read more

python - ValueError: empty vocabulary; perhaps the documents only contain stop words -

i'm using (for first time) scikit library , got error: valueerror: empty vocabulary; perhaps documents contain stop words file "c:\users\a605563\desktop\velibprojetpreso\traitementtwitterdico.py", line 33, in <module> x_train_counts = count_vect.fit_transform(filetweets) file "c:\python27\lib\site-packages\sklearn\feature_extraction\text.py", line 804, in fit_transform self.fixed_vocabulary_) file "c:\python27\lib\site-packages\sklearn\feature_extraction\text.py", line 751, in _count_vocab raise valueerror("empty vocabulary; perhaps documents contain stop words but don't understand why that's happening. import sklearn sklearn.feature_extraction.text import countvectorizer import pandas pd import numpy import unicodedata import nltk tweetsfile = open('tweets2015-08-13.csv', 'r+') f2 = open('analyzer.txt', 'a') print tweetsfile.readline() count_vect = countvectorizer(strip_accents='ascii...
Read more

ubuntu - collect2: fatal error: ld terminated with signal 9 [Killed] -

Image
i'm trying build precimonious on ubuntu 16.04.3 x64. allocated 1gb memory it. file structure looks like ~ |--- llvm/ |--- precimonious/ where llvm on version 3.0 mentioned @ https://github.com/corvette-berkeley/precimonious#requirement . followed steps on readme command make ended with ... llvm[1]: linking debug shared library libllvm-3.0.so collect2: fatal error: ld terminated signal 9 [killed] compilation terminated. ... i went through answers online , might because there's not enough memory perform link. memory usage the gcc version on machine gcc version 5.4.0 20160609 (ubuntu 5.4.0-6ubuntu1~16.04.4) , installed via apt-get install build-essential . fresh droplet created on digitalocean btw. appreciated. it memory exhaustion. sampling interval memory measurement not small enough covers exact point oom killer kicks in. depending on container/vm technology, may able set vm.overcommit_memory=2 before build, process not killed (but doing requires m...
Read more