Nginx error log entries

Help
1

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. https://crt.sh/?q=example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is: shnflac.net

I ran this command: n/a

It produced this output: 2022/07/08 16:53:07 [crit] 458440#458440: *6686798 SSL_do_handshake() failed (SSL: error:0A00006E:SSL routines::bad extension) while SSL handshaki
ng, client: xxx.xxx.xxx.xxx, server: 0.0.0.0:443

My web server is (include version): nginx 1.21.6

The operating system my web server runs on is (include version): Ubuntu 22.04

My hosting provider, if applicable, is: DreamHost (DreamCompute)

I can login to a root shell on my machine (yes or no, or I don't know): yes

I'm using a control panel to manage my site (no, or provide the name and version of the control panel): no

The version of my client is (e.g. output of certbot --version or certbot-auto --version if you're using Certbot): 1.29.0

Not sure if this is a letsencrypt issue or not but I can find barely any information on the error (0A00006E) anywhere on the net. My nginx error log is filled with these messages (167224 in one particular day.)

Any insight appreciated, and if this is inappropriate for this forum, I apologize up front.

Thanks!

1 Like
2

That looks like nginx surfacing an error from openssl. usually those types of errors are from something like:

  • an old client trying to connect
  • http traffic trying to hit https
  • a bad proxy configuration that affects https
  • someone abusing SNI to exploit a bug

You're likely not going to find anything for that error code, but you can try asking on the nginx mailing list - which is pretty good for esoteric concerns. (see Info | nginx@nginx.org - mailman.nginx.org)

If you can increase your debug logging, you might be able to see some more info on where these requests are coming from

7 Likes
3

Thank you jvanasco. I will bring it up with the nginx community.

I appreciate you!

1 Like
4

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.