ampproject / ampproject/amppackager
After updating SXG certificate, SSL isn't working
- Dominant language
- Go
- Stars
- 141
- Forks
- 46
- PR merge metrics
- No merged PRs in 30d
Description
I issued my SXG certificate from Google CA following this : https://support.google.com/webmasters/thread/181346937?hl=en&msgid=185724076 and https://support.google.com/webmasters/thread/181346937?hl=en&msgid=182535286
Then, I deployed this certificate following the doc of amppackager. After that, when I was requesting the url, I am getting this error:
```
SSL_do_handshake() failed (SSL: error:1408F10B:SSL routines:ssl3_get_record:wrong version number) while SSL handshaking to upstream, client: 2.2.2.2, server: example.com, request: "GET / HTTP/1.0", upstream: "https://1.1.1.1:443/priv/doc/https:something.example.com/", host: "example.com"
```
This is my amppkg.tofl file looks like :
```
Port = 443
LocalOnly = false
CertFile = 'qa/my/cert.pem'
KeyFile = 'qa/my/priv.key'
OCSPCache = '/tmp/amppkg-ocsp'
[[URLSet]]
[URLSet.Sign]
Domain = "something.example.com"
```
Would you guys help me why I am getting this error and how to fix this?
Contributor guide
Research direction
Start with the amppkg.tofl configuration shown in the issue and the linked AMP Packager deployment documentation, then trace the failing HTTPS request and its upstream handshake error. Compare the configured certificate, key, port, and URLSet domain with the request path; done means the SXG URL can be requested without the reported SSL_do_handshake error.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- go
- Domain
- networking, security
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100