Menu
I got this error in nginx error log:
SSL_do_handshake() failed (SSL: error:141CF06C:SSL routines:tls_parse_ctos_key_share:bad key share) while SSL handshaking
I use Let's Encrypt currently. Any ideas to solve this problem? Thank you, guys.
503
Note that in this case, I am running an Nginx web server with an SSL certificate from Let’s Encrypt. The client is using really old hardware. As a result, it is unable to use your SSL ciphers. A client is deliberately attempting (but failing) to use an older insecure SSL protocol.
A client is deliberately attempting (but failing) to use an older insecure SSL protocol. Either way, you should not be concerned if you see this error every now and again. This is just a case of Nginx doing its job.
As a result, it is unable to use your SSL ciphers. A client is deliberately attempting (but failing) to use an older insecure SSL protocol. Either way, you should not be concerned if you see this error every now and again.
Actually you have used the option ssl_ecdh_curve to configure Diffie Hellman key exchange in Nginx but you have not provided a parameter file. Therefore you have to use the option ssl_dhparam and must create a file with openssl.
This isn't your problem.
The best thing you can do in this situation is just to keep your server reasonably updated and secured.
At best for you, the client side of a request was running seriously outdated software, and at worst your server is simply being scanned for vulnerabilities by compromised devices connected to the internet.
Personally I lean in the direction of this being scanning, as I myself see these errors on a private development server, to which only I should ever have a legitimate reason to connect to, yet I see a ton of IP addresses mentioned by the error from around the world.
Similar question and answer has already been provided here: https://serverfault.com/questions/905011/nginx-ssl-do-handshake-failed-ssl-error1417d18cssl/905019
Stay safe.
132
If you love us? You can donate to us via Paypal or buy me a coffee so we can maintain and grow! Thank you!
Donate Us With
