I am getting the following repeated Handshake error in my NGINX logs
2018/12/12 11:40:01 [crit] 1097#1097: *8328 SSL_do_handshake() failed (SSL: error:10067066:elliptic curve routines:ec_GFp_simple_oct2point:invalid encoding error:1419C010:SSL routines:tls_process_cke_ecdhe:EC lib) while SSL handshaking, client: 37.255.12.19, server: 0.0.0.0:443
It does not show for every connection made over https just occasional connections.
My NGINX config is:
server {
listen 80;
root /var/www/html;
index index.php index.html index.htm index.nginx-debian.html;
server_name propertyindustryeye.com www.propertyindustryeye.com;
access_log /var/log/nginx/access.log;
error_log /var/log/nginx/error.log;
location = /favicon.ico { log_not_found off; access_log off; }
location = /robots.txt { log_not_found off; access_log off; allow all; }
location ~* \.(css|gif|ico|jpeg|jpg|js|png)$ {
expires max;
log_not_found off;
}
location / {
# try_files $uri $uri/ =404;
try_files $uri $uri/ /index.php$is_args$args;
}
location ~ \.php$ {
include snippets/fastcgi-php.conf;
fastcgi_pass unix:/var/run/php/php7.2-fpm.sock;
fastcgi_read_timeout 240;
}
location ~ /\.ht {
deny all;
}
client_max_body_size 100m;
client_body_buffer_size 128k;
listen 443 ssl; # managed by Certbot
ssl_certificate /etc/letsencrypt/live/propertyindustryeye.com/fullchain.pem; # managed by Certbot
ssl_certificate_key /etc/letsencrypt/live/propertyindustryeye.com/privkey.pem; # managed by Certbot
include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
}
I can’t seem to find any info on what this part of the error means tls_process_cke_ecdhe. But my SSL protocols are:
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;