openresty/1.13.6.2 report error continuously， are we getting attack?

junjiedream · 2019-05-21T20:42:47+00:00

Hi all,Does OpenResty support Server-sent events (SSE)? Thank!Ciao,Alessio

openresty/1.13.6.2 report error continuously， are we getting attack?

junjiedream

You may find the continuous error log as below. Not sure what happened, but we haven't changed any code recently. Seems that the https request can be processed as expected. I'm worried we are getting attacks.

2019/05/21 20:07:20 [crit] 14298#14298: *556855245 SSL_do_handshake() failed (SSL: error:04091068:rsa routines:int_rsa_verify:bad signature error:1417B07B:SSL routines:tls_process_cert_verify:bad signature) while SSL handshaking, client: 10.126.195.131, server: 0.0.0.0:443

2019/05/21 20:07:20 [crit] 14301#14301: *556855244 SSL_do_handshake() failed (SSL: error:04091068:rsa routines:int_rsa_verify:bad signature error:1417B07B:SSL routines:tls_process_cert_verify:bad signature) while SSL handshaking, client: 10.126.194.173, server: 0.0.0.0:443

2019/05/21 20:07:20 [crit] 14298#14298: *556855241 SSL_do_handshake() failed (SSL: error:04091068:rsa routines:int_rsa_verify:bad signature error:1417B07B:SSL routines:tls_process_cert_verify:bad signature) while SSL handshaking, client: 10.126.195.131, server: 0.0.0.0:443

2019/05/21 20:07:20 [crit] 14298#14298: *556855274 SSL_do_handshake() failed (SSL: error:1417D102:SSL routines:tls_process_client_hello:unsupported protocol) while SSL handshaking, client: 10.126.194.173, server: 0.0.0.0:443

2019/05/21 20:07:20 [crit] 14298#14298: *556855272 SSL_do_handshake() failed (SSL: error:1417D102:SSL routines:tls_process_client_hello:unsupported protocol) while SSL handshaking, client: 10.126.195.131, server: 0.0.0.0:443

2019/05/21 20:07:20 [crit] 14298#14298: *556855273 SSL_do_handshake() failed (SSL: error:1417D102:SSL routines:tls_process_client_hello:unsupported protocol) while SSL handshaking, client: 10.126.194.173, server: 0.0.0.0:443

2019/05/21 20:07:20 [crit] 14298#14298: *556855266 SSL_do_handshake() failed (SSL: error:04091068:rsa routines:int_rsa_verify:bad signature error:1417B07B:SSL routines:tls_process_cert_verify:bad signature) while SSL handshaking, client: 10.126.194.173, server: 0.0.0.0:443

Could anyone help with this?

Thanks in advance.

Versions below:

openresty/1.13.6.2
nginx/1.12.1
OpenSSL 1.0.2k-fips