Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

output_http with tls produces "error="SSL_connect returned=1 errno=0 state=error: tlsv1 alert internal error" #3647

Closed
zouyingjie opened this issue Feb 27, 2022 · 2 comments
Labels

Comments

@zouyingjie
Copy link

Describe the bug

Sending data via output_http plugin with TLS configuration produces errors on fluentd side.

To Reproduce

  • Start an HTTP server that supports mTLS.
  • Use the output_http plugin to send data and set tls_ca_cert_pathtls_client_cert_path, tls_ private_ key_ path and https endpoint.

Then restart fluentd.

Expected behavior

Log data can be sent successfully

Your Environment

- TD Agent version: td-agent 4.3.0 fluentd 1.14.3 (438a82aead488a86180cd484bbc4e7e344a9032b)
- Operating system: NAME="Ubuntu" VERSION="20.04.1 LTS (Focal Fossa)"
- Kernel version:

Your Configuration

<source>
  @id system-log-mw02
  @type syslog
  port 5140
  tag system-log
</source>

<filter system-log**>
  @type record_transformer
  <record>
  service "mw02"
  </record>
</filter>

<match system-log**>
  @type http

  # list of seed brokers
  endpoint  https://192.168.1.1:30001/logs
  json_array true

  <format>
    @type json
  </format>

  tls_ca_cert_path /etc/td-agent/tls/tls_ca_cert.pem
  tls_client_cert_path /etc/td-agent/tls/client.crt
  tls_private_key_path /etc/td-agent/tls/client.key

  <buffer>
    flush_interval 10s
  </buffer>

</match>

Your Error Log

2022-02-27 09:54:07 +0000 [warn]: #0 failed to flush the buffer. retry_times=1 next_retry_time=2022-02-27 09:54:09 +0000 chunk="5d8fce5bd199331812fafb9e9693d772" error_class=OpenSSL::SSL::SSLError error="SSL_connect returned=1 errno=0 state=error: tlsv1 alert internal error"
  2022-02-27 09:54:07 +0000 [warn]: #0 suppressed same stacktrace
2022-02-27 09:54:08 +0000 [warn]: #0 failed to flush the buffer. retry_times=2 next_retry_time=2022-02-27 09:54:11 +0000 chunk="5d8fce5bd199331812fafb9e9693d772" error_class=OpenSSL::SSL::SSLError error="SSL_connect returned=1 errno=0 state=error: tlsv1 alert internal error"

Additional context

No response

@github-actions
Copy link

This issue has been automatically marked as stale because it has been open 90 days with no activity. Remove stale label or comment or this issue will be closed in 30 days

@github-actions github-actions bot added the stale label May 28, 2022
@github-actions
Copy link

This issue was automatically closed because of stale in 30 days

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

1 participant