tao12345666333 opened a new issue, #7526: URL: https://github.com/apache/apisix/issues/7526
### Current Behavior when I enable mTLS to protect route, I get an error in APISIX: * here is APISIX's log ``` 2022/07/23 18:08:15 [crit] 192#192: *1798713 SSL_do_handshake() failed (SSL: error:1417C086:SSL routines:tls_process_client_certificate:certificate verify failed) while SSL handshaking, client: 172.21.0.1, server: 0.0.0.0:9443 ``` * here is my client(curl) 's output ```bash ➜ certs curl -vvv --http1.1 --resolve 'mtls.httpbin.local:9443:127.0.0.1' "https://mtls.httpbin.local:9443/"; --cert $PWD/user2.pem --key $PWD/user2.key --cacert $PWD/ca.pem * Added mtls.httpbin.local:9443:127.0.0.1 to DNS cache * Hostname mtls.httpbin.local was found in DNS cache * Trying 127.0.0.1:9443... * Connected to mtls.httpbin.local (127.0.0.1) port 9443 (#0) * ALPN, offering http/1.1 * successfully set certificate verify locations: * CAfile: /home/tao/workspace/certs/ca.pem * CApath: none * TLSv1.3 (OUT), TLS handshake, Client hello (1): * TLSv1.3 (IN), TLS handshake, Server hello (2): * TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8): * TLSv1.3 (IN), TLS handshake, Request CERT (13): * TLSv1.3 (IN), TLS handshake, Certificate (11): * TLSv1.3 (IN), TLS handshake, CERT verify (15): * TLSv1.3 (IN), TLS handshake, Finished (20): * TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1): * TLSv1.3 (OUT), TLS handshake, Certificate (11): * TLSv1.3 (OUT), TLS handshake, CERT verify (15): * TLSv1.3 (OUT), TLS handshake, Finished (20): * SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 * ALPN, server accepted to use http/1.1 * Server certificate: * subject: C=CN; ST=Zhejiang; L=Hangzhou; O=ORG_NAME; OU=TEST; CN=APISIX.U; [email protected] * start date: Jul 22 17:15:12 2022 GMT * expire date: Jul 22 17:15:12 2023 GMT * subjectAltName: host "mtls.httpbin.local" matched cert's "mtls.httpbin.local" * issuer: C=CN; ST=Zhejiang; L=Hangzhou; O=ORG_NAME; OU=TEST; CN=APISIX.ROOT; [email protected] * SSL certificate verify ok. > GET / HTTP/1.1 > Host: mtls.httpbin.local:9443 > User-Agent: curl/7.79.1 > Accept: */* > * TLSv1.3 (IN), TLS alert, unknown CA (560): * OpenSSL SSL_read: error:14094418:SSL routines:ssl3_read_bytes:tlsv1 alert unknown ca, errno 0 * Closing connection 0 curl: (56) OpenSSL SSL_read: error:14094418:SSL routines:ssl3_read_bytes:tlsv1 alert unknown ca, errno 0 ``` ### Expected Behavior no error, and get the response from upstream. ### Error Logs ``` 2022/07/23 18:08:15 [crit] 192#192: *1798713 SSL_do_handshake() failed (SSL: error:1417C086:SSL routines:tls_process_client_certificate:certificate verify failed) while SSL handshaking, client: 172.21.0.1, server: 0.0.0.0:9443 ``` ### Steps to Reproduce 1. start APISIX using docker-compose. ``` cd apisix-docker/example docker compose -f docker-compose.yml up ``` 2. create route ```bash ➜ example git:(master) ✗ curl "http://127.0.0.1:9080/apisix/admin/routes/1"; -H "X-API-KEY: edd1c9f034335f136f87ad84b625c8f1" -X PUT -d ' { "methods": ["GET"], "host": "mtls.httpbin.local", "uri": "/*", "upstream": { "type": "roundrobin", "nodes": { "web1:80": 1 } } }' ``` 3. upload my certs by [example script](https://apisix.apache.org/docs/apisix/mtls/#how-to-configure-2) For more clarity, the certificate I created has been verified ``` ➜ certs git:(master) ✗ openssl verify -CAfile ./ca.pem ./user1.pem ./user1.pem: OK ➜ certs git:(master) ✗ openssl verify -CAfile ./ca.pem ./user2.pem ./user2.pem: OK ``` here is the ssl resource. ``` ➜ example git:(master) ✗ curl "http://127.0.0.1:9080/apisix/admin/ssl"; -H "X-API-KEY: edd1c9f034335f136f87ad84b625c8f1" -X GET {"action":"get","node":{"dir":true,"key":"\/apisix\/ssl","nodes":[{"createdIndex":15,"key":"\/apisix\/ssl\/1","modifiedIndex":15,"value":{"status":1,"id":"1","update_time":1658597129,"snis":["mtls.httpbin.local"],"client":{"depth":10,"ca":"-----BEGIN CERTIFICATE-----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 7MYj\nIDdvOZCnGop0o4Sjr3llBCrzuc4JmQusBh\/dSN8UTbsuAnnp8icrzHij7IrgJzft\nCNCTHAEdeLyDThpr3u3\/xb7YiLrQ7JmKnp7pCOIM3mQVD8CcDd1I98dYwgXowW5Z\nng6CE\/96m4HIMjvpxSlLiGKNyjuwxPhfZLpwPGLHu5ZDS689QL3EZR5La3ilXO7B\nKwy0m3Ku3d+8Kb+WDWUvzu+HQGzIwFqHVoyp1nCg\/w9Jc6Hl30nM0bA59G4IcRnI\nqP64MCb6dqPgEBgR5cEZOs75XNgI8f1thE7S5DQQC2z5vOGPI9FD0sDJNTKnHusX\nPLApoDRtuZpYJBY4acuPqyBLs+xn0fZ5pmM=\n-----END CERTIFICATE-----\n"},"create_time":1658597129,"key":"HrMHUvE9Esvn7GnZ+vAynaIg\/8wlB3r0zm0htmnwofZfNP\/lb3hMhRvQSQRCrw4vUzhx72wHJSFr+IQ6ep757oOH2BegBk2wwTCmstiPRU9DUzpmdlg3TBonVXagAW0sDnR7ySYhIwGZ0OuVcYCWaLx4Ss0DnVghmiQKYD5ayO3BJPpzBm0dCqPy9upf\/JdaD9Hf7U0Xbszox0ljqNPpULxwNsQ5mz3JC+CO47h5cH24i7kmPjOiM94Dsk7xZYptLYXm7vmavocfL8G9Pe3fibRdAu8Je5vK0GwyxtMNdoqnetakd2EZ2PeuJ445elk2teWpI\/8CHOpNUkH8yXFKOQKNiCQ79+LZUoglTciwpzCvJHBUFgKAEuWUj5tOj+9WFy+BEmGw0jirGA6qLAhW8801hldauanK1Et5yYXx7bJ1dI7+fSty2FCzZ4B+C1HumRwV5ns6rwlKa2QSglSslhCziQMKJ90ddrS6CF0dejmuh8eVthZQdeQZi32L70Z+e7XcznnmIKo5axC\/FT7KbNYpH7RmZTNuz44idW+F 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","cert":"-----BEGIN CERTIFICATE-----\nMIIF5jCCA86gAwIBAgIUBigWd84H8JCiKERdO40wSZ1JgP0wDQYJKoZIhvcNAQEL\nBQAwgZExCzAJBgNVBAYTAkNOMREwDwYDVQQIDAhaa GVqaWFuZzERMA8GA1UEBwwI\nSGFuZ3pob3UxETAPBgNVBAoMCE9SR19OQU1FMQ0wCwYDVQQLDARURVNUMRQwEgYD\nVQQDDAtBUElTSVguUk9PVDEkMCIGCSqGSIb3DQEJARYVZGV2QGFwaXNpeC5hcGFj\naGUub3JnMB4XDTIyMDcyMjE3MTUxMloXDTIzMDcyMjE3MTUxMlowgY4xCzAJBgNV\nBAYTAkNOMREwDwYDVQQIDAhaaGVqaWFuZzERMA8GA1UEBwwISGFuZ3pob3UxETAP\nBgNVBAoMCE9SR19OQU1FMQ0wCwYDVQQLDARURVNUMREwDwYDVQQDDAhBUElTSVgu\nVTEkMCIGCSqGSIb3DQEJARYVZGV2QGFwaXNpeC5hcGFjaGUub3JnMIICIjANBgkq\nhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAv6korMaGhJUZ46YuCXuZ13s+AQC\/Y2ut\nw\/T1\/qwQRNzQO\/RQ6hFSNTunws2AvYzKzxWyKMK+5rHrkbQ2s9UCtpDd1LLpA0W8\nt4dmwe3geDtlwW31tfeR1b0Cikg2YSiDpyS3M\/lQPhaKa1mnM66ntJ3QggI3HDZI\nlbQslG8L6\/Fw6ozPUQTIo+p5elDRpla0srO68+mQzhXTEoIzkDaiUb3RJkoM8g34\nH4BXikh73u527iDxKxdHoSrSMMQSkn4KNmJ+lSll2UiAbL87fJhLlhqJ4hn3xzOd\nRCxYIC7JgXwBIMHEShsxafvH1p3mZJp33n8K\/af7SVr7ge3a50xbNQuiXg3xR1pU\ny7BwYK37KMuHGebPS415m4E71X6bN\/0pL2M5dqu+Vj4dwSNjPVIHEzPDZL8gibRG\n+eBCr3gC3JW+l1AcngltY+GEcbEgTacSRzrHKA+f\/WVYBsAkAIvtiBhD8+MB5MLX\nlnrXISPIwMTZSYJ8ng2XO1WMt2PudCDRdSOgQ6c 1xCNUO6QfAtBIzU7G24iE1WxZ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\n+KFB4CWLG1UPFpkLB22o8CWMnFdn2fji3jk =\n-----END CERTIFICATE-----\n"}}]},"count":1} ``` 4. visit API ``` curl -vvv --http1.1 --resolve 'mtls.httpbin.local:9443:127.0.0.1' "https://mtls.httpbin.local:9443/"; --cert $PWD/user2.pem --key $PWD/user2.key --cacert $PWD/ca.pem ``` ### Environment - APISIX version (run `apisix version`): 2.14.1 ( apache/apisix:2.14.1-alpine docker image) - Operating system (run `uname -a`): Linux 5.18.11-100 By the way, here is my OpenSSL version ``` ➜ ~ openssl version OpenSSL 1.1.1o FIPS 3 May 2022 ``` -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
