jeroen / openssl

OpenSSL bindings for R
Other
63 stars 22 forks source link

SSL routines:ssl3_get_record:decryption failed or bad record mac #104

Open slodge opened 1 year ago

slodge commented 1 year ago

In one of our RStudio Connect hosted apps, we're seeing occasional errors:

Error in curl::curl_fetch_memory: OpenSSL SSL_read: error:1408F119:SSL routines:ssl3_get_record:decryption failed or bad record mac, errno 0

Sadly (predictably) this error is hard to isolate - it happens frequently and fairly reproducibly (within a few minutes of active use) but only seems to occur when the app is actively performing a fair number (10 to 14) of parallel (furrr) requests.

Reading around this error, the only really useful hit I've had so far is https://medium.com/@philamersune/fixing-ssl-error-decryption-failed-or-bad-record-mac-d668e71a5409 which similarly mentions parallel requests as one of the symptoms.

I'm currently wondering about how to implement retries in our app (or working out how to de-parallelise it and still make it usable) - but thought I'd ask here: do you have any ideas about what anything that might be shared across parallel requests (to the same endpoint) which could be causing this?

Sorry for not attaching a reproducible sample - if I can make one I will provide it :)