I don't think it is that, because connections to some files on 5050 are ok and the ones with even the hostname are not (see attchment). While I have this hostname in the cert
Not Before: Feb 16 12:47:20 2019 GMT
Not After : Feb 15 12:47:20 2024 GMT
Subject: CN=m01.local
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
00:d4:62:c6:f4:9f:21:93:7f:c5:ef:f6:f4:4b:6c:
ea:ce:75:c6:0d:81:0d:98:
X509v3 Subject Alternative Name:
DNS:m01.local
Signature Algorithm: sha512WithRSAEncryption
-----Original Message-----
Sent: 20 February 2019 23:20
To: user
Subject: Re: Failed to accept socket: Failed accept: connection error:
error:1407609C:SSL routines:SSL23_GET_CLIENT_HELLO:http request
The "SSL routines:SSL23_GET_CLIENT_HELLO:http request" is OpenSSL's
cryptic way of saying the client is using HTTP to talk to an HTTPS
server. Since you've disabled LIBPROCESS_SSL_SUPPORT_DOWNGRADE, the
error should be expected.
On Wed, Feb 20, 2019 at 2:06 PM Marc Roos <[email protected]>
wrote:
Why am I getting these when I connect with at browser to port 5050.
How
to resolve this, looks like a bug or so. 192.168.10.151 has the
same
cert as m1.local and the cert has even common name m01.local. But
the
javascript is reporting "An error occurred:
SEC_ERROR_UNKNOWN_ISSUER"
W0220 22:42:23.678849 21804 process.cpp:902] Failed to accept
socket:
Failed accept: connection error: error:1407609C:SSL
routines:SSL23_GET_CLIENT_HELLO:http request
W0220 22:43:23.678017 21804 process.cpp:902] Failed to accept
socket:
Failed accept: connection error: error:1407609C:SSL
routines:SSL23_GET_CLIENT_HELLO:http request
W0220 22:44:23.678727 21804 process.cpp:902] Failed to accept
socket:
Failed accept: connection error: error:1407609C:SSL
routines:SSL23_GET_CLIENT_HELLO:http request
W0220 22:45:23.677820 21804 process.cpp:902] Failed to accept
socket:
Failed accept: connection error: error:1407609C:SSL
routines:SSL23_GET_CLIENT_HELLO:http request
W0220 22:46:23.677990 21804 process.cpp:902] Failed to accept
socket:
Failed accept: connection error: error:1407609C:SSL
routines:SSL23_GET_CLIENT_HELLO:http request
W0220 22:47:23.678474 21804 process.cpp:902] Failed to accept
socket:
Failed accept: connection error: error:1407609C:SSL
routines:SSL23_GET_CLIENT_HELLO:http request
W0220 22:48:23.677384 21804 process.cpp:902] Failed to accept
socket:
Failed accept: connection error: error:1407609C:SSL
routines:SSL23_GET_CLIENT_HELLO:http request
LIBPROCESS_SSL_ENABLED=1
LIBPROCESS_SSL_SUPPORT_DOWNGRADE=0
LIBPROCESS_SSL_KEY_FILE=/etc/pki/tls/private/m01.local.key
LIBPROCESS_SSL_CERT_FILE=/etc/pki/tls/certs/m01.local.crt
LIBPROCESS_SSL_VERIFY_CERT=0
LIBPROCESS_SSL_CA_FILE="/etc/pki/ca-trust/source/ca-own.crt"
mesosphere-zookeeper-3.4.6-0.1.20141204175332.centos7.x86_64
mesos-1.7.1-2.0.1.x86_64
5050.png
Description: Binary data
