search

ethpandaops / ansible-collection-general

Ansible collection with multiple reusable roles used by the EthPandaOps team
MIT License
26 stars 10 forks source link

fix SSL error on config upstreams #281

Closed skylenet closed 4 weeks ago

skylenet commented 4 weeks ago

Fix for ingress-nginx-public-controller-678c58d9d6-8p8vj controller 2024-10-21T10:41:45.462803094+02:00 2024/10/21 08:41:45 [crit] 165#165: *18127 SSL_do_handshake() failed (SSL: error:0A000458:SSL routines::tlsv1 unrecognized name:SSL alert number 112) while SSL handshaking to upstream, client: 185.71.112.107, server: config.pectra-devnet-4.ethpandaops.io, request: "GET /api/v1/nodes/validator-ranges HTTP/1.1", upstream: "https://209.38.212.82:443/meta/api/v1/validator-ranges.json", host: "config.pectra-devnet-4.ethpandaops.io"

proxy_ssl_name=

Allows overriding the server name used to verify the certificate of the proxied HTTPS server and to be passed through SNI when establishing a connection with the proxied HTTPS server.

By default, the host part of the proxy_pass URL is used.

proxy_ssl_server_name=on

Enables or disables passing of the server name through TLS Server Name Indication extension (SNI, RFC 6066) when establishing a connection with the proxied HTTPS server.