ampproject / ampproject/amppackager

After updating SXG certificate, SSL isn't working

Open
#677 1 comment 0 reactions 0 assignees View on GitHub
Dominant language
Go
Stars
141
Forks
46
PR merge metrics
No merged PRs in 30d

Description

I issued my SXG certificate from Google CA following this : https://support.google.com/webmasters/thread/181346937?hl=en&msgid=185724076 and https://support.google.com/webmasters/thread/181346937?hl=en&msgid=182535286

Then, I deployed this certificate following the doc of amppackager. After that, when I was requesting the url, I am getting this error:

```
SSL_do_handshake() failed (SSL: error:1408F10B:SSL routines:ssl3_get_record:wrong version number) while SSL handshaking to upstream, client: 2.2.2.2, server: example.com, request: "GET / HTTP/1.0", upstream: "https://1.1.1.1:443/priv/doc/https:something.example.com/", host: "example.com"
```

This is my amppkg.tofl file looks like :
```
Port = 443
LocalOnly = false
CertFile = 'qa/my/cert.pem'
KeyFile = 'qa/my/priv.key'
OCSPCache = '/tmp/amppkg-ocsp'

[[URLSet]]
[URLSet.Sign]
Domain = "something.example.com"
```

Would you guys help me why I am getting this error and how to fix this?

Contributor guide

Open the contributing guide

Research direction

Start with the amppkg.tofl configuration shown in the issue and the linked AMP Packager deployment documentation, then trace the failing HTTPS request and its upstream handshake error. Compare the configured certificate, key, port, and URLSet domain with the request path; done means the SXG URL can be requested without the reported SSL_do_handshake error.

Written by the indexing model from the issue text.

Assessment

Tech stack
go
Domain
networking, security
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.