ocsp not working #386

scorpanv · 2023-08-31T22:47:26Z

scorpanv
Aug 31, 2023

Hi!

Can be upgraded the nginx to the version >=1.3.7 to be able to use OCSP Stapling?
Also to upgrade the https://github.com/ZoeyVid/nginx-proxy-manager to use newer version of nginx?

Thanks!
Victor Scorpan

Answered by Zoey2936

Sep 1, 2023

the latest version includes nginx v1.25.2, also npm uses OCSP by default

View full answer

Zoey2936 · 2023-09-01T04:44:47Z

Zoey2936
Sep 1, 2023
Maintainer

the latest version includes nginx v1.25.2, also npm uses OCSP by default

28 replies

cotti Sep 6, 2023

@scorpanv Apparently I have just encountered this issue here too, so you're not completely alone. Tried creating a simple bla.domain.com subdomain to point to a WordPress image, then requested a cert for it. nothing custom.

I'm using the latest image version, using the Portainer stack. I'm still skimming through the thread to see if I can do something on my side.

Alas, my knowledge in the area is next to nil at best, and I have not tinkered with anything related to web for a while. Things were working just fine for the base domain for months.

Installing php81-xmlwriter via apk...
Installing php81-zip via apk...
Installing php81-pecl-uploadprogress via apk...
Installing php81-opcache via apk...
Installing php81-pecl-memcached via apk...
Installing php81-bcmath via apk...
Installing php81-iconv via apk...
Installing php81-intl via apk...
Installing php81-simplexml via apk...
Installing php81-sodium via apk...
Installing php81-bz2 via apk...
Installing php81-pecl-ssh2 via apk...
Installing php81-ftp via apk...
Installing php81-fpm via apk...
Installing php81-imap via apk...
skipped '/data/php/81/conf.d/00_dom.ini'
skipped '/data/php/81/conf.d/00_openssl.ini'
skipped '/data/php/81/conf.d/00_curl.ini'
skipped '/data/php/81/conf.d/00_mbstring.ini'
skipped '/data/php/81/conf.d/00_fileinfo.ini'
skipped '/data/php/81/conf.d/01_mysqlnd.ini'
skipped '/data/php/81/conf.d/02_mysqli.ini'
skipped '/data/php/81/conf.d/00_xmlwriter.ini'
skipped '/data/php/81/conf.d/01_exif.ini'
skipped '/data/php/81/conf.d/00_opcache.ini'
skipped '/data/php/81/conf.d/imagick.ini'
skipped '/data/php/81/conf.d/01_xmlreader.ini'
skipped '/data/php/81/conf.d/00_xml.ini'
skipped '/data/php/81/conf.d/uploadprogress.ini'
skipped '/data/php/81/conf.d/00_session.ini'
skipped '/data/php/81/conf.d/00_bcmath.ini'
skipped '/data/php/81/conf.d/00_zip.ini'
skipped '/data/php/81/conf.d/00_iconv.ini'
skipped '/data/php/81/conf.d/00_intl.ini'
skipped '/data/php/81/conf.d/00_simplexml.ini'
skipped '/data/php/81/conf.d/10_igbinary.ini'
'/etc/php81/conf.d/00_sockets.ini' -> '/data/php/81/conf.d/00_sockets.ini'
'/etc/php81/conf.d/10_msgpack.ini' -> '/data/php/81/conf.d/10_msgpack.ini'
skipped '/data/php/81/conf.d/20_memcached.ini'
skipped '/data/php/81/conf.d/00_bz2.ini'
skipped '/data/php/81/conf.d/00_ftp.ini'
skipped '/data/php/81/conf.d/00_sodium.ini'
skipped '/data/php/81/conf.d/ssh2.ini'
skipped '/data/php/81/conf.d/00_imap.ini'
skipped '/data/php/81/php.ini'
skipped '/data/php/81/php-fpm.conf'
skipped '/data/php/81/php-fpm.d/www.conf'
skipped '/data/php/81/pear.conf'
mkdir: created directory '/data/tls/certbot/credentials'
mkdir: created directory '/data/etc/crowdsec'
mkdir: created directory '/data/etc/modsecurity'
----------------------------------------------------------
Let's Encrypt certificates cleanup - 2023/09/06 06:04:03
----------------------------------------------------------
Deleting /data/tls/certbot/archive/npm-1/cert1.pem.
Deleting /data/tls/certbot/archive/npm-1/cert2.pem.
Keeping /data/tls/certbot/archive/npm-1/cert3.pem.
Deleting /data/tls/certbot/archive/npm-1/chain1.pem.
Deleting /data/tls/certbot/archive/npm-1/chain2.pem.
Keeping /data/tls/certbot/archive/npm-1/chain3.pem.
Deleting /data/tls/certbot/archive/npm-1/fullchain1.pem.
Deleting /data/tls/certbot/archive/npm-1/fullchain2.pem.
Keeping /data/tls/certbot/archive/npm-1/fullchain3.pem.
Deleting /data/tls/certbot/archive/npm-1/privkey1.pem.
Deleting /data/tls/certbot/archive/npm-1/privkey2.pem.
Keeping /data/tls/certbot/archive/npm-1/privkey3.pem.
Keeping /data/tls/certbot/archive/npm-3/cert1.pem.
Keeping /data/tls/certbot/archive/npm-3/chain1.pem.
Keeping /data/tls/certbot/archive/npm-3/fullchain1.pem.
Keeping /data/tls/certbot/archive/npm-3/privkey1.pem.
Keeping /data/tls/certbot/archive/npm-4/cert1.pem.
Keeping /data/tls/certbot/archive/npm-4/chain1.pem.
Keeping /data/tls/certbot/archive/npm-4/fullchain1.pem.
Keeping /data/tls/certbot/archive/npm-4/privkey1.pem.
12 file(s) kept.
8 file(s) deleted.
'/usr/local/nginx/conf/conf.d/include/coreruleset/crs-setup.conf.example' -> '/data/etc/modsecurity/crs-setup.conf'
no NPM_CERT_ID set, using dummycerts for npm and default hosts.
'/usr/local/nginx/conf/conf.d/include/ban.html' -> '/data/etc/crowdsec/ban.html'
'/usr/local/nginx/conf/conf.d/include/captcha.html' -> '/data/etc/crowdsec/captcha.html'
'/usr/local/nginx/conf/conf.d/include/crowdsec.conf' -> '/data/etc/crowdsec/crowdsec.conf'
Working on file: /data/nginx/custom/events.conf
Working on file: /data/nginx/custom/http.conf
Working on file: /data/nginx/custom/http_top.conf
Working on file: /data/nginx/custom/root.conf
Working on file: /data/nginx/custom/server_dead.conf
Working on file: /data/nginx/custom/server_proxy.conf
Working on file: /data/nginx/custom/server_redirect.conf
Working on file: /data/nginx/custom/server_stream.conf
Working on file: /data/nginx/custom/server_stream_tcp.conf
Working on file: /data/nginx/custom/server_stream_udp.conf
Working on file: /data/nginx/custom/stream.conf
Working on file: /data/nginx/default.conf
Working on file: /data/nginx/ip_ranges.conf
Working on file: /data/nginx/proxy_host/1.conf
Working on file: /data/nginx/proxy_host/3.conf
Working on file: /data/nginx/proxy_host/5.conf
Success.
-------------------------------------
 _   _ ____  __  __
| \ | |  _ \|  \/  |
|  \| | |_) | |\/| |
| |\  |  __/| |  | |
|_| \_|_|   |_|  |_|
-------------------------------------
Version:  2.10.4+c943ccd
Date:     Wed Sep  6 06:04:10 CEST 2023
User:     root
PUID:     0
User ID:  0
PGID:     0
Group ID: 0
-------------------------------------
nginx: [warn] "ssl_stapling" ignored, issuer certificate not found for certificate "/data/tls/dummycert.pem"
nginx: [warn] "ssl_stapling" ignored, issuer certificate not found for certificate "/data/tls/dummycert.pem"
nginx: [warn] "ssl_stapling" ignored, issuer certificate not found for certificate "/data/tls/dummycert.pem"
[06-Sep-2023 06:04:10] NOTICE: fpm is running, pid 1005
[06-Sep-2023 06:04:10] NOTICE: ready to handle connections
[Global   ] › ℹ  info      Using Sqlite: /data/etc/npm/database.sqlite
[Migrate  ] › ℹ  info      Current database version: none
[IP Ranges] › ℹ  info      Fetching IP Ranges from online services...
[IP Ranges] › ℹ  info      Fetching https://ip-ranges.amazonaws.com/ip-ranges.json
[IP Ranges] › ℹ  info      Fetching https://www.cloudflare.com/ips-v4
[IP Ranges] › ℹ  info      Fetching https://www.cloudflare.com/ips-v6
[SSL      ] › ℹ  info      Certbot Renewal Timer initialized
[IP Ranges] › ℹ  info      IP Ranges Renewal Timer initialized
[Global   ] › ℹ  info      Backend PID 1007 listening on port 48693 ...
[Nginx    ] › ℹ  info      Starting Nginx in three seconds
2023/09/06 06:04:14 [warn] 1023#1023: "ssl_stapling" ignored, issuer certificate not found for certificate "/data/tls/dummycert.pem"
2023/09/06 06:04:14 [warn] 1023#1023: "ssl_stapling" ignored, issuer certificate not found for certificate "/data/tls/dummycert.pem"
2023/09/06 06:04:14 [warn] 1023#1023: "ssl_stapling" ignored, issuer certificate not found for certificate "/data/tls/dummycert.pem"
2023/09/06 06:04:14 [notice] 1023#1023: ModSecurity-nginx v1.0.3 (rules loaded inline/local/remote: 0/7/0)
2023/09/06 06:05:35 [error] 1027#1027: *2 SSL_do_handshake() failed (SSL: error:0A00010B:SSL routines::wrong version number) while SSL handshaking to upstream, client: 34.254.53.125, server: julisboa.cotti.moe, request: "GET / HTTP/1.1", upstream: "https://149.102.142.197:32772/", host: "julisboa.cotti.moe"
2023/09/06 06:05:35 [error] 1028#1028: *5 SSL_do_handshake() failed (SSL: error:0A00010B:SSL routines::wrong version number) while SSL handshaking to upstream, client: 34.254.53.125, server: julisboa.cotti.moe, request: "GET / HTTP/1.1", upstream: "https://149.102.142.197:32772/", host: "julisboa.cotti.moe"
2023/09/06 06:16:24 [error] 1026#1026: *22 SSL_do_handshake() failed (SSL: error:0A00010B:SSL routines::wrong version number) while SSL handshaking to upstream, client: 177.182.59.166, server: julisboa.cotti.moe, request: "GET / HTTP/2.0", upstream: "https://149.102.142.197:32772/", host: "julisboa.cotti.moe", referrer: "https://127.0.0.1:81/"
2023/09/06 06:16:24 [error] 1026#1026: *22 SSL_do_handshake() failed (SSL: error:0A00010B:SSL routines::wrong version number) while SSL handshaking to upstream, client: 177.182.59.166, server: julisboa.cotti.moe, request: "GET /favicon.ico HTTP/2.0", upstream: "https://149.102.142.197:32772/favicon.ico", host: "julisboa.cotti.moe", referrer: "https://julisboa.cotti.moe/"
2023/09/06 06:17:00 [error] 1026#1026: *29 SSL_do_handshake() failed (SSL: error:0A00010B:SSL routines::wrong version number) while SSL handshaking to upstream, client: 171.67.70.229, server: julisboa.cotti.moe, request: "GET / HTTP/1.1", upstream: "https://149.102.142.197:32772/", host: "julisboa.cotti.moe"
2023/09/06 06:19:18 [error] 1026#1026: *39 SSL_do_handshake() failed (SSL: error:0A00010B:SSL routines::wrong version number) while SSL handshaking to upstream, client: 177.182.59.166, server: julisboa.cotti.moe, request: "GET / HTTP/2.0", upstream: "https://149.102.142.197:32772/", host: "julisboa.cotti.moe", referrer: "https://127.0.0.1:81/"
2023/09/06 06:19:18 [error] 1026#1026: *39 SSL_do_handshake() failed (SSL: error:0A00010B:SSL routines::wrong version number) while SSL handshaking to upstream, client: 177.182.59.166, server: julisboa.cotti.moe, request: "GET /favicon.ico HTTP/2.0", upstream: "https://149.102.142.197:32772/favicon.ico", host: "julisboa.cotti.moe", referrer: "https://julisboa.cotti.moe/"
2023/09/06 06:19:19 [error] 1026#1026: *43 SSL_do_handshake() failed (SSL: error:0A00010B:SSL routines::wrong version number) while SSL handshaking to upstream, client: 177.182.59.166, server: julisboa.cotti.moe, request: "GET / HTTP/2.0", upstream: "https://149.102.142.197:32772/", host: "julisboa.cotti.moe", referrer: "https://127.0.0.1:81/"
2023/09/06 06:19:20 [error] 1026#1026: *43 SSL_do_handshake() failed (SSL: error:0A00010B:SSL routines::wrong version number) while SSL handshaking to upstream, client: 177.182.59.166, server: julisboa.cotti.moe, request: "GET /favicon.ico HTTP/2.0", upstream: "https://149.102.142.197:32772/favicon.ico", host: "julisboa.cotti.moe", referrer: "https://julisboa.cotti.moe/"
2023/09/06 06:19:21 [error] 1026#1026: *46 SSL_do_handshake() failed (SSL: error:0A00010B:SSL routines::wrong version number) while SSL handshaking to upstream, client: 177.182.59.166, server: julisboa.cotti.moe, request: "GET / HTTP/2.0", upstream: "https://149.102.142.197:32772/", host: "julisboa.cotti.moe", referrer: "https://127.0.0.1:81/"
2023/09/06 06:19:22 [error] 1026#1026: *46 SSL_do_handshake() failed (SSL: error:0A00010B:SSL routines::wrong version number) while SSL handshaking to upstream, client: 177.182.59.166, server: julisboa.cotti.moe, request: "GET /favicon.ico HTTP/2.0", upstream: "https://149.102.142.197:32772/favicon.ico", host: "julisboa.cotti.moe", referrer: "https://julisboa.cotti.moe/"
2023/09/06 06:19:28 [error] 1026#1026: *46 SSL_do_handshake() failed (SSL: error:0A00010B:SSL routines::wrong version number) while SSL handshaking to upstream, client: 177.182.59.166, server: julisboa.cotti.moe, request: "GET / HTTP/2.0", upstream: "https://149.102.142.197:32772/", host: "julisboa.cotti.moe", referrer: "https://127.0.0.1:81/"
Duplicate relation "access_list" in a relation expression. You should use "a.[b, c]" instead of "[a.b, a.c]". This will cause an error in objection 2.0
[SSL      ] › ℹ  info      Requesting Certbot certificates for Cert #5: julisboa.cotti.moe
[SSL      ] › ℹ  info      Command: certbot --logs-dir /tmp/certbot-log --work-dir /tmp/certbot-work --config-dir /data/tls/certbot certonly --config "/data/tls/certbot/config.ini" --cert-name "npm-5" --authenticator webroot --email "[email protected]" --preferred-challenges "dns,http" --domains "julisboa.cotti.moe"
[SSL      ] › ✔  success   Requesting a certificate for julisboa.cotti.moe
Successfully received certificate.
Certificate is saved at: /data/tls/certbot/live/npm-5/fullchain.pem
Key is saved at:         /data/tls/certbot/live/npm-5/privkey.pem
This certificate expires on 2023-12-05.
These files will be updated when the certificate renews.
NEXT STEPS:
- The certificate will need to be renewed before it expires. Certbot can automatically renew the certificate in the background, but you may need to take steps to enable that functionality. See https://certbot.org/renewal-setup for instructions.
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
If you like Certbot, please consider supporting our work by:
 * Donating to ISRG / Let's Encrypt:   https://letsencrypt.org/donate
 * Donating to EFF:                    https://eff.org/donate-le
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
[Nginx    ] › ⬤  debug     Deleting file: /data/nginx/proxy_host/5.conf
[Nginx    ] › ℹ  info      Quitting Nginx
[Nginx    ] › ℹ  info      Starting Nginx in three seconds
2023/09/06 06:22:39 [warn] 1575#1575: "ssl_stapling" ignored, issuer certificate not found for certificate "/data/tls/dummycert.pem"
2023/09/06 06:22:39 [warn] 1575#1575: "ssl_stapling" ignored, issuer certificate not found for certificate "/data/tls/dummycert.pem"
2023/09/06 06:22:39 [warn] 1575#1575: "ssl_stapling" ignored, issuer certificate not found for certificate "/data/tls/dummycert.pem"
2023/09/06 06:22:39 [notice] 1575#1575: ModSecurity-nginx v1.0.3 (rules loaded inline/local/remote: 0/796/0)
2023/09/06 06:22:45 [error] 1605#1605: *13 SSL_do_handshake() failed (SSL: error:0A00010B:SSL routines::wrong version number) while SSL handshaking to upstream, client: 177.182.59.166, server: julisboa.cotti.moe, request: "GET / HTTP/2.0", upstream: "https://149.102.142.197:32772/", host: "julisboa.cotti.moe", referrer: "https://127.0.0.1:81/"
2023/09/06 06:22:47 [error] 1605#1605: *13 SSL_do_handshake() failed (SSL: error:0A00010B:SSL routines::wrong version number) while SSL handshaking to upstream, client: 177.182.59.166, server: julisboa.cotti.moe, request: "GET / HTTP/2.0", upstream: "https://149.102.142.197:32772/", host: "julisboa.cotti.moe", referrer: "https://127.0.0.1:81/"
2023/09/06 06:22:48 [error] 1605#1605: *13 SSL_do_handshake() failed (SSL: error:0A00010B:SSL routines::wrong version number) while SSL handshaking to upstream, client: 177.182.59.166, server: julisboa.cotti.moe, request: "GET / HTTP/2.0", upstream: "https://149.102.142.197:32772/", host: "julisboa.cotti.moe", referrer: "https://127.0.0.1:81/"
2023/09/06 06:22:48 [error] 1605#1605: *13 SSL_do_handshake() failed (SSL: error:0A00010B:SSL routines::wrong version number) while SSL handshaking to upstream, client: 177.182.59.166, server: julisboa.cotti.moe, request: "GET / HTTP/2.0", upstream: "https://149.102.142.197:32772/", host: "julisboa.cotti.moe", referrer: "https://127.0.0.1:81/"
2023/09/06 06:22:49 [error] 1605#1605: *13 SSL_do_handshake() failed (SSL: error:0A00010B:SSL routines::wrong version number) while SSL handshaking to upstream, client: 177.182.59.166, server: julisboa.cotti.moe, request: "GET / HTTP/2.0", upstream: "https://149.102.142.197:32772/", host: "julisboa.cotti.moe", referrer: "https://127.0.0.1:81/"
2023/09/06 06:22:49 [error] 1605#1605: *13 SSL_do_handshake() failed (SSL: error:0A00010B:SSL routines::wrong version number) while SSL handshaking to upstream, client: 177.182.59.166, server: julisboa.cotti.moe, request: "GET / HTTP/2.0", upstream: "https://149.102.142.197:32772/", host: "julisboa.cotti.moe", referrer: "https://127.0.0.1:81/"
2023/09/06 06:22:50 [error] 1605#1605: *13 SSL_do_handshake() failed (SSL: error:0A00010B:SSL routines::wrong version number) while SSL handshaking to upstream, client: 177.182.59.166, server: julisboa.cotti.moe, request: "GET / HTTP/2.0", upstream: "https://149.102.142.197:32772/", host: "julisboa.cotti.moe", referrer: "https://127.0.0.1:81/"
2023/09/06 06:22:50 [error] 1605#1605: *13 SSL_do_handshake() failed (SSL: error:0A00010B:SSL routines::wrong version number) while SSL handshaking to upstream, client: 177.182.59.166, server: julisboa.cotti.moe, request: "GET / HTTP/2.0", upstream: "https://149.102.142.197:32772/", host: "julisboa.cotti.moe", referrer: "https://127.0.0.1:81/"
2023/09/06 06:22:50 [error] 1605#1605: *13 SSL_do_handshake() failed (SSL: error:0A00010B:SSL routines::wrong version number) while SSL handshaking to upstream, client: 177.182.59.166, server: julisboa.cotti.moe, request: "GET / HTTP/2.0", upstream: "https://149.102.142.197:32772/", host: "julisboa.cotti.moe", referrer: "https://127.0.0.1:81/"
2023/09/06 06:22:51 [error] 1605#1605: *25 SSL_do_handshake() failed (SSL: error:0A00010B:SSL routines::wrong version number) while SSL handshaking to upstream, client: 177.182.59.166, server: julisboa.cotti.moe, request: "GET / HTTP/2.0", upstream: "https://149.102.142.197:32772/", host: "julisboa.cotti.moe", referrer: "https://127.0.0.1:81/"
2023/09/06 06:22:51 [error] 1605#1605: *25 SSL_do_handshake() failed (SSL: error:0A00010B:SSL routines::wrong version number) while SSL handshaking to upstream, client: 177.182.59.166, server: julisboa.cotti.moe, request: "GET /favicon.ico HTTP/2.0", upstream: "https://149.102.142.197:32772/favicon.ico", host: "julisboa.cotti.moe", referrer: "https://julisboa.cotti.moe/"
2023/09/06 06:22:54 [error] 1605#1605: *30 SSL_do_handshake() failed (SSL: error:0A00010B:SSL routines::wrong version number) while SSL handshaking to upstream, client: 177.182.59.166, server: julisboa.cotti.moe, request: "GET / HTTP/2.0", upstream: "https://149.102.142.197:32772/", host: "julisboa.cotti.moe", referrer: "https://127.0.0.1:81/"
2023/09/06 06:22:54 [error] 1605#1605: *30 SSL_do_handshake() failed (SSL: error:0A00010B:SSL routines::wrong version number) while SSL handshaking to upstream, client: 177.182.59.166, server: julisboa.cotti.moe, request: "GET /favicon.ico HTTP/2.0", upstream: "https://149.102.142.197:32772/favicon.ico", host: "julisboa.cotti.moe", referrer: "https://julisboa.cotti.moe/"
2023/09/06 06:22:58 [error] 1605#1605: *33 SSL_do_handshake() failed (SSL: error:0A00010B:SSL routines::wrong version number) while SSL handshaking to upstream, client: 177.182.59.166, server: julisboa.cotti.moe, request: "GET / HTTP/2.0", upstream: "https://149.102.142.197:32772/", host: "julisboa.cotti.moe"
2023/09/06 06:22:58 [error] 1605#1605: *33 SSL_do_handshake() failed (SSL: error:0A00010B:SSL routines::wrong version number) while SSL handshaking to upstream, client: 177.182.59.166, server: julisboa.cotti.moe, request: "GET /favicon.ico HTTP/2.0", upstream: "https://149.102.142.197:32772/favicon.ico", host: "julisboa.cotti.moe", referrer: "https://julisboa.cotti.moe/"
2023/09/06 06:23:00 [error] 1605#1605: *33 SSL_do_handshake() failed (SSL: error:0A00010B:SSL routines::wrong version number) while SSL handshaking to upstream, client: 177.182.59.166, server: julisboa.cotti.moe, request: "GET / HTTP/2.0", upstream: "https://149.102.142.197:32772/", host: "julisboa.cotti.moe"
2023/09/06 06:23:00 [error] 1605#1605: *33 SSL_do_handshake() failed (SSL: error:0A00010B:SSL routines::wrong version number) while SSL handshaking to upstream, client: 177.182.59.166, server: julisboa.cotti.moe, request: "GET /favicon.ico HTTP/2.0", upstream: "https://149.102.142.197:32772/favicon.ico", host: "julisboa.cotti.moe", referrer: "https://julisboa.cotti.moe/"
[Nginx    ] › ⬤  debug     Deleting file: /data/nginx/proxy_host/5.conf
[Nginx    ] › ℹ  info      Quitting Nginx
[Nginx    ] › ℹ  info      Starting Nginx in three seconds
2023/09/06 06:23:19 [warn] 1873#1873: "ssl_stapling" ignored, issuer certificate not found for certificate "/data/tls/dummycert.pem"
2023/09/06 06:23:19 [warn] 1873#1873: "ssl_stapling" ignored, issuer certificate not found for certificate "/data/tls/dummycert.pem"
2023/09/06 06:23:19 [warn] 1873#1873: "ssl_stapling" ignored, issuer certificate not found for certificate "/data/tls/dummycert.pem"
2023/09/06 06:23:19 [notice] 1873#1873: ModSecurity-nginx v1.0.3 (rules loaded inline/local/remote: 0/796/0)
2023/09/06 06:23:31 [error] 1937#1937: *13 SSL_do_handshake() failed (SSL: error:0A00010B:SSL routines::wrong version number) while SSL handshaking to upstream, client: 159.69.91.132, server: julisboa.cotti.moe, request: "GET / HTTP/2.0", upstream: "https://149.102.142.197:32772/", host: "julisboa.cotti.moe"
2023/09/06 06:23:44 [error] 1903#1903: *18 SSL_do_handshake() failed (SSL: error:0A00010B:SSL routines::wrong version number) while SSL handshaking to upstream, client: 96.44.189.103, server: julisboa.cotti.moe, request: "GET / HTTP/1.1", upstream: "https://149.102.142.197:32772/", host: "julisboa.cotti.moe"
2023/09/06 06:24:45 [error] 1925#1925: *35 SSL_do_handshake() failed (SSL: error:0A00010B:SSL routines::wrong version number) while SSL handshaking to upstream, client: 75.101.209.95, server: julisboa.cotti.moe, request: "HEAD / HTTP/1.1", upstream: "https://149.102.142.197:32772/", host: "julisboa.cotti.moe"
2023/09/06 06:24:45 [error] 1903#1903: *34 [client 171.67.70.229] ModSecurity: Access denied with code 403 (phase 2). Matched "Operator `Ge' with parameter `5' against variable `TX:BLOCKING_INBOUND_ANOMALY_SCORE' (Value: `5' ) [file "/usr/local/nginx/conf/conf.d/include/coreruleset/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "176"] [id "949110"] [rev ""] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [data ""] [severity "0"] [ver "OWASP_CRS/4.0.0-rc1"] [maturity "0"] [accuracy "0"] [tag "anomaly-evaluation"] [hostname "149.102.142.197"] [uri "/"] [unique_id "169397428598.924265"] [ref ""], client: 171.67.70.229, server: julisboa.cotti.moe, request: "GET / HTTP/1.1", host: "julisboa.cotti.moe"
2023/09/06 06:24:45 [error] 1903#1903: *38 SSL_do_handshake() failed (SSL: error:0A00010B:SSL routines::wrong version number) while SSL handshaking to upstream, client: 75.101.209.95, server: julisboa.cotti.moe, request: "HEAD / HTTP/1.1", upstream: "https://149.102.142.197:32772/", host: "julisboa.cotti.moe"

Zoey2936 Sep 6, 2023
Maintainer

can you please also send me logs?

cotti Sep 6, 2023

@Zoey2936 Yup, I've edited the comment to add them. Can I get anything else?

cotti Sep 6, 2023

By the way, I have run docker exec -it nginx-proxy-manager sh -c "apk add --no-cache bind-tools && dig example.org" and docker exec -it nginx-proxy-manager sh -c "apk add --no-cache bind-tools && dig r3.o.lencr.org" as well. These logs reflect that state.

Zoey2936 Sep 6, 2023
Maintainer

please create a new discussion for it, it seems you have a diffrent problem

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

ocsp not working #386

{{title}}

Replies: 1 comment 28 replies

{{title}}

{{title}}

{{editor}}'s edit

{{editor}}'s edit

{{title}}

{{title}}

{{title}}

{{title}}

Select a reply

ocsp not working #386

scorpanv Aug 31, 2023

Replies: 1 comment · 28 replies

Zoey2936 Sep 1, 2023 Maintainer

cotti Sep 6, 2023

Zoey2936 Sep 6, 2023 Maintainer

cotti Sep 6, 2023

cotti Sep 6, 2023

Zoey2936 Sep 6, 2023 Maintainer

scorpanv
Aug 31, 2023

Replies: 1 comment 28 replies

Zoey2936
Sep 1, 2023
Maintainer

Zoey2936 Sep 6, 2023
Maintainer

Zoey2936 Sep 6, 2023
Maintainer