Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

SSLLabs stuck at Renegotiation Test #31

Open
namm2 opened this issue Mar 4, 2022 · 0 comments
Open

SSLLabs stuck at Renegotiation Test #31

namm2 opened this issue Mar 4, 2022 · 0 comments

Comments

@namm2
Copy link

namm2 commented Mar 4, 2022

I found there are a lot (~ 6400 events/day) of error logs from SSLLabs that look like this:

  "_source": {
    "http_bytes": 0,
    "http_method": "GET",
    "http_path": "https://domain.tld:443/?SSL_Labs_Renegotiation_Test=User_Agent_May_Not_Show",
    "http_protocol": "https",
    "http_received_bytes": 138,
    "http_status": 400,
    "http_time_sec": -1,
    "http_uri": "/?SSL_Labs_Renegotiation_Test=User_Agent_May_Not_Show",
    "http_useragent": "SSL Labs (https://www.ssllabs.com/about/assessment.html)",
    "http_version": "1.0",
    "http_x_fwd_for": "x.x.x.x",
    "request_creation_time": "2022-03-04T08:59:03.877000Z",
    "request_processing_time": -1,
    "request_protocol": "HTTP/1.0",
    "response_processing_time": -1,
    "severity": "info",
    "source_type": "aws_s3",
    "ssl_cipher": "(NONE)",
    "ssl_protocol": "TLSv1.2",
    "target_processing_time": -1,
    "type": "load_balancer"
  }
}

It looks like SSLLab test is sticking at Renegotiation test of TLS v1.0(?). And also SSLLab-exporter container can't pull results either which is expected as the test wasn't finished:

{"level":"error","error":"context deadline exceeded","target":"domain.tld","timestamp":"2022-03-01T22:51:36.554160826Z","msg":"failed to fetch updates"}
{"level":"error","error":"context deadline exceeded","target":"domain.tld","timestamp":"2022-03-01T22:51:36.554213881Z","msg":"assessment failed"}

So the exporter is serving stale results.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant