How to specify http 1.1 in prometheus scrape config job

[Pragya Singh]

We are getting this error in prometheus while connecting to an endpoint
Get "https://10.14.0.42:443/health": stream error: stream ID 7; HTTP_1_1_REQUIRED; received from peer

When checked manually: curl https://10.14.0.42:443/health -k -v --http1.1
This works fine and provides list of metrics

I added scheme: http but that didn't work and I am getting the same error. Something like this
scrape_configs: 

   - job_name: 'example' 

     scheme: http

Any recommendations on what else I can try here?


Regards,
Pragya

[Brian Candler]

Try this:

enable_http2: false

[Pragya Singh]

I got a new error when I added enable_http2: false

local error : tls: no renegotiation

[Brian Candler]

Googling for that error:

https://stackoverflow.com/questions/57420833/tls-no-renegotiation-error-on-http-request

However, as far as I can see, Prometheus doesn't have this option:

https://prometheus.io/docs/prometheus/latest/configuration/configuration/#tls_config

You could try playing with min_version/max_version (see if you can tell which TLS version was used by curl)

[Brian Candler]

BTW, TLS renegotiation has security problems, and was removed entirely from TLS1.3.

https://security.stackexchange.com/questions/24554/should-i-use-ssl-tls-renegotiation

I suggest you get the target server updated. If you cannot, then you may need to put a proxy in between prometheus and that server - and the proxy must be configured to allow renegotiation, at least on the outbound session.