SSL3_GET_RECORD:decryption failed or bad record

[Matteo Collina]

Hi guys,

starting from the 10th of June we are receiving from a Production app in Node.js (v0.8.24) some errors from S3 that didn't happened before (we didn't deploy any change in the app in the last days) that's related to the access of files via standard HTTPS GET calls (no api).

The error is something like: XXXX-XXXX-XXXX-240:error:1408F119:SSL routines:SSL3_GET_RECORD:decryption failed or bad record mac:../deps/openssl/openssl/ssl/s3_pkt.c:500

Any of you are experienced something similar or do you know about some recent changes on the SSL management in S3? Or maybe someone can just provide some guidance into debugging this?

Thx a lot,
Matteo

P.S. We are having 1-2 errors every hour so it's something very occasional, anyway to understand better.

[mscdex]

On Jun 12, 9:31 am, Matteo Collina <matteo.coll...@gmail.com> wrote:
> The error is something like: XXXX-XXXX-XXXX-240:error:1408F119:SSL
> routines:SSL3_GET_RECORD:decryption failed or bad record
> mac:../deps/openssl/openssl/ssl/s3_pkt.c:500

Google seems to think this issue is fixed in OpenSSL 1.0.1e, which is
included with node v0.10.x. You might want to try node v0.10.10 if you
can.

[mscdex]

Hrmm, scratch that. v0.8.24 bundles OpenSSL 1.0.1f. It's kind of odd
that v0.8 has a newer version than v0.10.

[Matteo Collina]

Have you got a reference for this?

The real question is why it has started last week :(, and why it is so sporadic.

Unfortunately we are stuck on 0.8 until v0.10.11 comes out.

We have encountered a bug in libuv regarding asserts and streams.

https://github.com/joyent/node/issues/5622

Thanks!

Matteo

 

[Kevin]

I am having this same problem and it started about the same time. We are running node 0.8.9. It seems to crash one instance every 1 - 2 days. Any solution?

[Ben Noordhuis]

There's an off-by-0.0.1 error in your comment, Brian.

$ v0.8/out/Release/node -pe process.versions.openssl
1.0.0f

$ v0.10/out/Release/node -pe process.versions.openssl
1.0.1e