Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

SSL handshake failure on server requiring Server Name Indication #179

Closed
ThrawnCA opened this issue Apr 4, 2019 · 1 comment
Closed

Comments

@ThrawnCA
Copy link
Contributor

ThrawnCA commented Apr 4, 2019

We're trying to load a resource into the DataPusher from a URL that only works correctly with Server Name Indication enabled (in this case, https://www.communities.qld.gov.au/resources/open-data/ds-nmds-services-provided-service-type.csv). The DataPusher gives the following error:

Error: [Errno 1] _ssl.c:510: error:14077410:SSL routines:SSL23_GET_SERVER_HELLO:sslv3 alert handshake failure

Attempting to connect to this URL with openssl s_client -connect www.communities.qld.gov.au:443 (OpenSSL versions 1.0.1f and 1.0.2k-fips tested) gives essentially the same thing, just with a different line number:

139630400169808:error:14077410:SSL routines:SSL23_GET_SERVER_HELLO:sslv3 alert handshake failure:s23_clnt.c:769:

However, if we use the Server Name Indication extension (openssl s_client -connect www.communities.qld.gov.au:443 -servername www.communities.qld.gov.au), it works. It also works via curl and wget without any problems. SSL Labs confirms that the site will only work with SNI.

Is there some way we can configure the DataPusher to use Server Name Indication?

@ThrawnCA ThrawnCA changed the title SSL handshake failure on server requiring SNI SSL handshake failure on server requiring Server Name Indication Apr 4, 2019
@ThrawnCA ThrawnCA closed this as completed Apr 4, 2019
@ThrawnCA
Copy link
Contributor Author

ThrawnCA commented Apr 4, 2019

This appears to be from using an older DataPusher version. The latest version does not exhibit this behavior.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant