The "SSL routines:SSL23_GET_CLIENT_HELLO:http request" is OpenSSL's cryptic way of saying the client is using HTTP to talk to an HTTPS server. Since you've disabled LIBPROCESS_SSL_SUPPORT_DOWNGRADE, the error should be expected.
On Wed, Feb 20, 2019 at 2:06 PM Marc Roos <m.r...@f1-outsourcing.eu> wrote: > > > Why am I getting these when I connect with at browser to port 5050. How > to resolve this, looks like a bug or so. 192.168.10.151 has the same > cert as m1.local and the cert has even common name m01.local. But the > javascript is reporting "An error occurred: SEC_ERROR_UNKNOWN_ISSUER" > > > W0220 22:42:23.678849 21804 process.cpp:902] Failed to accept socket: > Failed accept: connection error: error:1407609C:SSL > routines:SSL23_GET_CLIENT_HELLO:http request > W0220 22:43:23.678017 21804 process.cpp:902] Failed to accept socket: > Failed accept: connection error: error:1407609C:SSL > routines:SSL23_GET_CLIENT_HELLO:http request > W0220 22:44:23.678727 21804 process.cpp:902] Failed to accept socket: > Failed accept: connection error: error:1407609C:SSL > routines:SSL23_GET_CLIENT_HELLO:http request > W0220 22:45:23.677820 21804 process.cpp:902] Failed to accept socket: > Failed accept: connection error: error:1407609C:SSL > routines:SSL23_GET_CLIENT_HELLO:http request > W0220 22:46:23.677990 21804 process.cpp:902] Failed to accept socket: > Failed accept: connection error: error:1407609C:SSL > routines:SSL23_GET_CLIENT_HELLO:http request > W0220 22:47:23.678474 21804 process.cpp:902] Failed to accept socket: > Failed accept: connection error: error:1407609C:SSL > routines:SSL23_GET_CLIENT_HELLO:http request > W0220 22:48:23.677384 21804 process.cpp:902] Failed to accept socket: > Failed accept: connection error: error:1407609C:SSL > routines:SSL23_GET_CLIENT_HELLO:http request > > LIBPROCESS_SSL_ENABLED=1 > LIBPROCESS_SSL_SUPPORT_DOWNGRADE=0 > LIBPROCESS_SSL_KEY_FILE=/etc/pki/tls/private/m01.local.key > LIBPROCESS_SSL_CERT_FILE=/etc/pki/tls/certs/m01.local.crt > LIBPROCESS_SSL_VERIFY_CERT=0 > LIBPROCESS_SSL_CA_FILE="/etc/pki/ca-trust/source/ca-own.crt" > > > mesosphere-zookeeper-3.4.6-0.1.20141204175332.centos7.x86_64 > mesos-1.7.1-2.0.1.x86_64 >
