A little update: :ssl API have been changed, and correct code would be
:ssl.cipher_suites(:all, :"tlsv1.2") ++ [%{key_exchange: :rsa, cipher: :aes_256_cbc, mac: :sha256}]
affficionado
1
tmariaz
This still doesn’t help me to fix my handshake error.
config.exs
http_options: [
timeout: 60_000,
recv_timeout: 60_000,
# ssl: [{:versions, [:"tlsv1.2"]}],
ssl: [
ciphers:
:ssl.cipher_suites(:all, :"tlsv1.2") ++
[%{key_exchange: :rsa, cipher: :aes_256_cbc, mac: :sha256}]
],
log_level: :debug
# hackney: [:insecure]
]
Error Log:
Request: POST /api/bill/payment
** (exit) an exception was raised:
** (HTTPoison.Error) {:tls_alert, 'handshake failure'}
(httpoison) lib/httpoison.ex:66: HTTPoison.request!/5
Not sure what is wrong?
The server still on Erlang OTP 20 and not yet updated to latest version.
0
D4no0
tmariaz
D4no0
This is part of common options:
ssl: [
ciphers:
:ssl.cipher_suites(:all, :"tlsv1.2") ++
[%{key_exchange: :rsa, cipher: :aes_256_cbc, mac: :sha256}],
log_level: :all
],
0
tmariaz
Still same error when calling the api… Do I have to look for the log?
When I run the following I get the TLS info.
curl -I -v --tlsv1.2 --tls-max 1.2 https://myserver/api/endpoint
* Trying myserver-ip-address:443...
* Connected to myserver (myserver-ip-address) port 443 (#0)
* ALPN, offering h2
* ALPN, offering http/1.1
* CAfile: ~/ssl/cacert.pem
* CApath: none
* TLSv1.2 (OUT), TLS handshake, Client hello (1):
* TLSv1.2 (IN), TLS handshake, Server hello (2):
* TLSv1.2 (IN), TLS handshake, Certificate (11):
* TLSv1.2 (IN), TLS handshake, Server key exchange (12):
* TLSv1.2 (IN), TLS handshake, Server finished (14):
* TLSv1.2 (OUT), TLS handshake, Client key exchange (16):
* TLSv1.2 (OUT), TLS change cipher, Change cipher spec (1):
* TLSv1.2 (OUT), TLS handshake, Finished (20):
* TLSv1.2 (IN), TLS handshake, Finished (20):
* SSL connection using TLSv1.2 / ECDHE-RSA-AES256-GCM-SHA384
What am I missing?
0