Uploaded image for project: 'Maistra'
  1. Maistra
  2. MAISTRA-2054

Mutual TLS over HTTPS failed to get response. OpenSSL SSL_read: error:1409445C:SSL routines:ssl3_read_bytes:tlsv13 alert certificate required, errno 0

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Duplicate
    • Icon: Major Major
    • None
    • maistra-1.1.11
    • None
    • None
    • False
    • False
    • Undefined

      Mutual TLS over HTTPS failed to get response. OpenSSL SSL_read: error:1409445C:SSL routines:ssl3_read_bytes:tlsv13 alert certificate required, errno 0

      task: https://istio.io/v1.4/docs/tasks/security/authentication/https-overlay/

      Build Info:
      OCP 4.6.6 aws OVNKubernetes network
      OSSM istio operator 2.0.1 from brew.registry.redhat.io/rh-osbs/iib:32767
      SMCP v1.1.11

      How to reproduce:
      1. Install OSSM 2.0.1 operators and create a v1.1.11 SMCP
      2. Create bookinfo ns and add it into a SMMR
      3. oc adm policy add-scc-to-user anyuid -z default -n bookinfo
      4. Follow
      task: https://istio.io/v1.4/docs/tasks/security/authentication/https-overlay/

      • Generate certificates and configmap
      • Deploy an HTTPS service without the Istio sidecar
      • kubectl exec -it $(kubectl get pod -l app=sleep -o jsonpath= {.items..metadata.name}

        ) -c istio-proxy /bin/bash
        curl https://my-nginx -k

      and see

      bash-4.4$ curl https://my-nginx -k
      curl: (56) OpenSSL SSL_read: error:1409445C:SSL routines:ssl3_read_bytes:tlsv13 alert certificate required, errno 0

      Expected result:
      curl nginx should return <h1>Welcome to nginx!</h1>

              Unassigned Unassigned
              yuaxu@redhat.com Yuanlin Xu
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

                Created:
                Updated:
                Resolved: