orangeCatDeveloper commented on issue #2106: URL: https://github.com/apache/hertzbeat/issues/2106#issuecomment-5861051160
Root cause, still present on master: the shared HTTP client only enables `TLSv1`, `TLSv1.1`, `TLSv1.2` and `SSLv3`, so any server that only accepts TLS 1.3 rejects the handshake with `protocol_version`. https://github.com/apache/hertzbeat/blob/8104d7057c72f9c18dea31d32e076750d2c34020/hertzbeat-collector/hertzbeat-collector-common/src/main/java/org/apache/hertzbeat/collector/collect/common/http/CommonHttpClient.java#L97 This affects every HTTP-based monitor (website, api, k8s, etc.). A fix would be to enable `TLSv1.3` (and drop `SSLv3`), or pass `null` to use the JDK defaults. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
