Find the answer to your Linux question:
Results 1 to 1 of 1
Hello all. So in this corporate environment, we are running SSL on a gigaspaces/mule feed. The thing is, it seems like there is SSL termination either at the F5 load ...
Enjoy an ad free experience by logging in. Not a member yet? Register.
  1. #1
    Just Joined!
    Join Date
    Apr 2011
    Posts
    10

    HAProxy SSL Hello Health Check Failed Me


    Hello all.
    So in this corporate environment, we are running SSL on a gigaspaces/mule feed. The thing is, it seems like there is SSL termination either at the F5 load balancer or at the HAProxy that comes after it. I enabled the option 'ssl-hello-chk' http--haproxy.1wt.eu-download-1.4-doc-configuration.txt to be able to do SSL v3 hello checks, but it keeps throwing errors about bad SSL handshake.

    What could be going on here? HAProxy version 1.4.15

    12.07.24 15:37:16.919 +0000 ERROR :10637:128359 - org.mule.exception.DefaultSystemExceptionStrategy: Caught exception in Exception Strategy: Remote host closed connection during handshake
    12.07.24 15:37:16.919 +0000 ERROR :10637:128359 - org.mule.exception.DefaultSystemExceptionStrategy: javax.net.ssl.SSLHandshakeException: Remote host closed connection during handshake
    12.07.24 15:37:16.919 +0000 ERROR :10637:128359 - org.mule.exception.DefaultSystemExceptionStrategy: at com.sun.net.ssl.internal.ssl.SSLSocketImpl.readRec ord(SSLSocketImpl.java:817)
    12.07.24 15:37:16.919 +0000 ERROR :10637:128359 - org.mule.exception.DefaultSystemExceptionStrategy: at com.sun.net.ssl.internal.ssl.SSLSocketImpl.perform InitialHandshake(SSLSocketImpl.java:113
    12.07.24 15:37:16.919 +0000 ERROR :10637:128359 - org.mule.exception.DefaultSystemExceptionStrategy: at com.sun.net.ssl.internal.ssl.SSLSocketImpl.readDat aRecord(SSLSocketImpl.java:753)
    12.07.24 15:37:16.919 +0000 ERROR :10637:128359 - org.mule.exception.DefaultSystemExceptionStrategy: at com.sun.net.ssl.internal.ssl.AppInputStream.read(A ppInputStream.java:75)
    12.07.24 15:37:16.919 +0000 ERROR :10637:128359 - org.mule.exception.DefaultSystemExceptionStrategy: at com.sun.net.ssl.internal.ssl.AppInputStream.read(A ppInputStream.java:50)
    12.07.24 15:37:16.919 +0000 ERROR :10637:128359 - org.mule.exception.DefaultSystemExceptionStrategy: at org.apache.commons.httpclient.HttpParser.readRawLi ne(HttpParser.java:7
    12.07.24 15:37:16.919 +0000 ERROR :10637:128359 - org.mule.exception.DefaultSystemExceptionStrategy: at org.apache.commons.httpclient.HttpParser.readLine( HttpParser.java:106)
    12.07.24 15:37:16.919 +0000 ERROR :10637:128359 - org.mule.exception.DefaultSystemExceptionStrategy: at org.mule.transport.http.HttpServerConnection.readL ine(HttpServerConnection.java:219)
    12.07.24 15:37:16.919 +0000 ERROR :10637:128359 - org.mule.exception.DefaultSystemExceptionStrategy: at org.mule.transport.http.HttpServerConnection.readR equest(HttpServerConnection.java:185)
    12.07.24 15:37:16.919 +0000 ERROR :10637:128359 - org.mule.exception.DefaultSystemExceptionStrategy: at org.mule.transport.http.HttpMessageReceiver$HttpWo rker.run(HttpMessageReceiver.java:153)
    12.07.24 15:37:16.919 +0000 ERROR :10637:128359 - org.mule.exception.DefaultSystemExceptionStrategy: at org.mule.work.WorkerContext.run(WorkerContext.java :310)
    12.07.24 15:37:16.919 +0000 ERROR :10637:128359 - org.mule.exception.DefaultSystemExceptionStrategy: at java.util.concurrent.ThreadPoolExecutor$Worker.run Task(ThreadPoolExecutor.java:886)
    12.07.24 15:37:16.919 +0000 ERROR :10637:128359 - org.mule.exception.DefaultSystemExceptionStrategy: at java.util.concurrent.ThreadPoolExecutor$Worker.run (ThreadPoolExecutor.java:90
    12.07.24 15:37:16.919 +0000 ERROR :10637:128359 - org.mule.exception.DefaultSystemExceptionStrategy: at java.lang.Thread.run(Thread.java:662)
    12.07.24 15:37:16.919 +0000 ERROR :10637:128359 - org.mule.exception.DefaultSystemExceptionStrategy: Caused by: java.io.EOFException: SSL peer shut down incorrectly
    12.07.24 15:37:16.919 +0000 ERROR :10637:128359 - org.mule.exception.DefaultSystemExceptionStrategy: at com.sun.net.ssl.internal.ssl.InputRecord.read(Inpu tRecord.java:333)
    12.07.24 15:37:16.919 +0000 ERROR :10637:128359 - org.mule.exception.DefaultSystemExceptionStrategy: at com.sun.net.ssl.internal.ssl.SSLSocketImpl.readRec ord(SSLSocketImpl.java:79
    12.07.24 15:37:16.919 +0000 ERROR :10637:128359 - org.mule.exception.DefaultSystemExceptionStrategy: ... 13 more


    BTW, this is using tcp. This error shows whether I am using ssl-hello-chk or not. It only goes away when I disable all health checks entirely.


    Thank you for your help.
    Last edited by jasonmanley87; 07-25-2012 at 08:49 PM.

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •