MirtoBusico opened a new issue, #2814: URL: https://github.com/apache/apisix-dashboard/issues/2814
### Issue description With Apisix 3.3.0 and Apisix-dashboard 3.0.0 when I create a new SNI and try to access the associated route I receive an error "failed to find any SSL certificate by SNI". Then I restart the Apisix pod and the route works correctly. Note: Apisix is installed on k3s cluster (1 master and 3 workers) alongside Istio 1.17.2 ### Expected behavior I expect to create a SNI and a route and use it without any other operation ### How to Reproduce 1. create an upstream, a route and a sni (here for the "https://k8s.h.net"; host) 2. try to access the "https://k8s.h.net"; url and receive an error message 3. look at the Apisix pod logs and see ``` 2023/05/26 14:11:18 [error] 49#49: *4142667 [lua] radixtree_sni.lua:176: match_and_set(): failed to find any SSL certificate by SNI: k8s.h.net, context: ssl_certificate_by_lua*, client: 127.0.0.6, server: 0.0.0.0:9443 2023/05/26 14:11:18 [error] 53#53: *4142669 [lua] radixtree_sni.lua:176: match_and_set(): failed to find any SSL certificate by SNI: k8s.h.net, context: ssl_certificate_by_lua*, client: 127.0.0.6, server: 0.0.0.0:9443 2023/05/26 14:11:18 [error] 50#50: *4142673 [lua] radixtree_sni.lua:176: match_and_set(): failed to find any SSL certificate by SNI: k8s.h.net, context: ssl_certificate_by_lua*, client: 127.0.0.6, server: 0.0.0.0:9443 ``` (one error for any worker node) 4. restart the Apisix deploment 5. access the "https://k8s.h.net"; url and verify it works correctly 6. look at the Apisix pod log and see: ``` 127.0.0.6 - - [26/May/2023:14:20:09 +0000] k8s.h.net "GET / HTTP/1.0" 200 821 0.010 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:102.0) Gecko/20100101 Firefox/102.0" 10.43.216.96:443 200 0.009 "https://k8s.h.net"; 127.0.0.6 - - [26/May/2023:14:20:10 +0000] k8s.h.net "GET /styles.243e6d874431c8e8.css HTTP/1.0" 200 28555 0.008 "https://k8s.h.net/"; "Mozilla/5.0 (X11; Linux x86_64; rv:102.0) Gecko/20100101 Firefox/102.0" 10.43.216.96:443 200 0.008 "https://k8s.h.net"; 127.0.0.6 - - [26/May/2023:14:20:10 +0000] k8s.h.net "GET /runtime.134ad7745384bed8.js HTTP/1.0" 200 2225 0.004 "https://k8s.h.net/"; "Mozilla/5.0 (X11; Linux x86_64; rv:102.0) Gecko/20100101 Firefox/102.0" 10.43.216.96:443 200 0.003 "https://k8s.h.net"; 127.0.0.6 - - [26/May/2023:14:20:10 +0000] k8s.h.net "GET /config HTTP/1.0" 200 28 0.001 "https://k8s.h.net/"; "Mozilla/5.0 (X11; Linux x86_64; rv:102.0) Gecko/20100101 Firefox/102.0" 10.43.216.96:443 200 0.001 "https://k8s.h.net"; ``` ### Screenshots _No response_ ### Environment - APISIX version (run `apisix version`): 3.3.0 - Operating system (run `uname -a`): `Linux apisix-694d5589cc-l2948 5.10.0-23-amd64 #1 SMP Debian 5.10.179-1 (2023-05-12) x86_64 GNU/Linux` - OpenResty / Nginx version (run `openresty -V` or `nginx -V`): - etcd version, if relevant (run `curl http://127.0.0.1:9090/v1/server_info`): - APISIX Dashboard version, if relevant: 3.0.0 - Plugin runner version, for issues related to plugin runners: - LuaRocks version, for installation issues (run `luarocks --version`): ### Additional context _No response_ -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
