Re: [HAP 2.3.8] Is there a way to see why "" and "SSL handshake failure" happens

[Aleksandar Lazic]

On 27.03.21 12:01, Lukas Tribus wrote:

Hello,

On Sat, 27 Mar 2021 at 11:52, Aleksandar Lazic <al-hapr...@none.at> wrote:

Hi.

I have a lot of such entries in my logs.

```
Mar 27 11:48:20 lb1 haproxy[14556]: ::ffff:<CLIENT-IP>:23167 [27/Mar/2021:11:48:20.523] https-in~ 
https-in/<NOSRV> -1/-1/-1/-1/0 0 0 - - PR-- 1041/1011/0/0/0 0/0 "<BADREQ>"
Mar 27 11:48:20 lb1 haproxy[14556]: ::ffff:<CLIENT-IP>:23167 [27/Mar/2021:11:48:20.523] https-in~ 
https-in/<NOSRV> -1/-1/-1/-1/0 0 0 - - PR-- 1041/1011/0/0/0 0/0 "<BADREQ>"

Use show errors on the admin socket:
https://cbonte.github.io/haproxy-dconv/2.0/management.html#9.3-show%20errors

Thanks.

Mar 27 11:48:20 lb1 haproxy[14556]: ::ffff:<CLIENT-IP>:23166 
[27/Mar/2021:11:48:20.440] https-in/sock-1: SSL handshake failure
Mar 27 11:48:20 lb1 haproxy[14556]: ::ffff:<CLIENT-IP>:23166 
[27/Mar/2021:11:48:20.440] https-in/sock-1: SSL handshake failure

That's currently a pain point:

https://github.com/haproxy/haproxy/issues/693

Thanks.

Lukas

Regards
Alex