Connection Dropped When Connetcting from .Net app

[ro...@appworks.co.za]

We are in the process of upgrading to kong 0.11 from from kong 0.5.2 (yikes).

All browser traffic is working fine however when I try connect to an api over https using a .net client (which makes use of the .net WebRequest) the connection gets closed.

I suspect this has something to do with the cipher being used. I have configured Kong to use the old cipher suite but still no luck.

Has any one else come across this? And is there a way to get it resolved? We have a large number of .net client apps which need to connect to our API's

I have checked the logs and we are not seeing anything coming out there.

Thanks,

[ro...@appworks.co.za]

I turned on debug logging and managed to get more info. Most definitely related to ssl handshake.

So the question is what protocol is it trying to use...

2017/11/27 22:27:24 [info] 1980#0: *107 SSL_do_handshake() failed (SSL: error:140760FC:SSL routines:SSL23_GET_CLIENT_HELLO:unknown protocol) while SSL handshaking, client: 10.212.134.200, server: 0.0.0.0:8443

2017/11/27 22:27:25 [info] 1980#0: *108 SSL_do_handshake() failed (SSL: error:140760FC:SSL routines:SSL23_GET_CLIENT_HELLO:unknown protocol) while SSL handshaking, client: 10.212.134.200, server: 0.0.0.0:8443

[ro...@appworks.co.za]

Adding TLSv1 sorted out the problem

On Monday, November 27, 2017 at 10:22:27 PM UTC+2, ro...@appworks.co.za wrote:

[Robert Paprocki]

Hey Ross,

Thanks for reporting back your resolution here. And thanks for taking the plunge to Kong 0.11 from 0.5.2! :D

Just to note for posterity, we dropped support for TLS1 in the default template with the 0.10 release of Kong (https://github.com/Kong/kong/blob/master/CHANGELOG.md#0100---20170307 and https://github.com/Kong/kong/pull/2119).

--
You received this message because you are subscribed to the Google Groups "Kong" group.
To unsubscribe from this group and stop receiving emails from it, send an email to konglayer+unsubscribe@googlegroups.com.
To post to this group, send email to kong...@googlegroups.com.
Visit this group at https://groups.google.com/group/konglayer.
To view this discussion on the web visit https://groups.google.com/d/msgid/konglayer/dcdf25d0-cda8-40d9-8ed4-e4d39f8cc192%40googlegroups.com.

For more options, visit https://groups.google.com/d/optout.