search

grahamedgecombe / nginx-ct

Certificate Transparency module for nginx.
https://grahamedgecombe.com/projects/nginx-ct
ISC License
175 stars 27 forks source link

generating errors with some older browsers. as result, page not displayed. #38

Open i300220 opened 6 years ago

i300220 commented 6 years ago

Since I've installed it, and I installed it correctly, I get these errors in my nginx 1.15.1 error logs every day, tons of them. Disabling it fixed the issue.

2018/07/06 15:57:03 [warn] 19687#19687: *287966 SSL_set_current_cert failed while SSL handshaking, client: 70.48.61.228, server: 0.0.0.0:443
2018/07/06 15:57:03 [crit] 19687#19687: *287966 SSL_do_handshake() failed (SSL: error:1422A0EA:SSL routines:custom_ext_add:callback failed) while SSL
handshaking, client: 70.48.61.228, server: 0.0.0.0:443

The error given by the BROWSER is ERR_SSL_PROTOCOL_ERROR

Verified with the Epic privacy browser using Chromium Version 62.0.3202.94. Users can possibly join the http page, switch to https but thereafter no navigation possible over https.

I know another user has reported similar behavior for Chromium 64.

I know that Chromiun 66 and 67 are working well. Chromium 65 untested as well Chromium 45-61.

Would like to get that addressed, otherwise would be forced to disable it permanently. We're losing users and potential customers.

Willing to help/assist in tests if need be,

best regards!

jasonmader commented 6 years ago

I'm seeing the same problem. nginx/1.14.0 + nginx-ct with ssl_ct on; web browser Windows Chrome 70.0.3538.67