http: TLS handshake error from <ip:port> : tls: oversized record received with length 21536
- Dominant language
- Go
- Stars
- 9.5k
- Forks
- 1.2k
- PR merge metrics
- No merged PRs in 30d
Description
# ********************************
# At the signing server side
# ********************************
cat > signing-server.json <",
"type": "standard"
}
}
}
EOF
cat > multiroot-profile.ini < config-client.json <"
}
},
"signing" : {
"default" : {
"auth_remote" : {
"remote" : "default",
"auth_key" : "default"
}
}
},
"remotes" : {
"default" : ":8888"
}
}
EOF
echo '{"CN":"my-new","key":{"algo":"rsa","size":2048}}' | \
cfssl gencert \
-config=config-client.json \
-hostname=my-new \
-tls-remote-ca ca.crt \
-profile=default - | \
cfssljson -bare my-new
# while executing the above getting the below output
2018/05/23 01:20:36 [INFO] generate received request
2018/05/23 01:20:36 [INFO] received CSR
2018/05/23 01:20:36 [INFO] generating key: rsa-2048
2018/05/23 01:20:37 [INFO] encoded CSR
2018/05/23 01:20:37 [INFO] Using trusted CA from tls-remote-ca: ca.crt
{"code":7400,"message":"failed POST to http://:8888/api/v1/cfssl/authsign: Post http://:8888/api/v1/cfssl/authsign: net/http: HTTP/1.x transport connection broken: malformed HTTP response \"\\x15\\x03\\x01\\x00\\x02\\x02\\x16\""}
Failed to parse input: unexpected end of JSON input
# At the signing server gettignt he below error
http: TLS handshake error from :: tls: oversized record received with length 21536
This seems to be only happening when the multirootca is configured with TLS -tls-cert and -tls-key
# cfssl version
Version: 1.3.2
Revision: dev
Runtime: go1.10.2
Contributor guide
Assessment
This issue has not been assessed yet.