cloudflare / cloudflare/cfssl

http: TLS handshake error from <ip:port> : tls: oversized record received with length 21536

Open
#898 1 comment 0 reactions 0 assignees View on GitHub
Dominant language
Go
Stars
9.5k
Forks
1.2k
PR merge metrics
No merged PRs in 30d

Description

# ********************************
# At the signing server side
# ********************************
cat > signing-server.json <",
"type": "standard"
}
}
}
EOF

cat > multiroot-profile.ini < config-client.json <"
}
},
"signing" : {
"default" : {
"auth_remote" : {
"remote" : "default",
"auth_key" : "default"
}
}
},
"remotes" : {
"default" : ":8888"
}
}
EOF

echo '{"CN":"my-new","key":{"algo":"rsa","size":2048}}' | \
cfssl gencert \
-config=config-client.json \
-hostname=my-new \
-tls-remote-ca ca.crt \
-profile=default - | \
cfssljson -bare my-new

# while executing the above getting the below output
2018/05/23 01:20:36 [INFO] generate received request
2018/05/23 01:20:36 [INFO] received CSR
2018/05/23 01:20:36 [INFO] generating key: rsa-2048
2018/05/23 01:20:37 [INFO] encoded CSR
2018/05/23 01:20:37 [INFO] Using trusted CA from tls-remote-ca: ca.crt
{"code":7400,"message":"failed POST to http://:8888/api/v1/cfssl/authsign: Post http://:8888/api/v1/cfssl/authsign: net/http: HTTP/1.x transport connection broken: malformed HTTP response \"\\x15\\x03\\x01\\x00\\x02\\x02\\x16\""}
Failed to parse input: unexpected end of JSON input

# At the signing server gettignt he below error
http: TLS handshake error from :: tls: oversized record received with length 21536

This seems to be only happening when the multirootca is configured with TLS -tls-cert and -tls-key

# cfssl version
Version: 1.3.2
Revision: dev
Runtime: go1.10.2

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.