Comments (4)
pajod
commented on August 17, 2024
Are you certain you meant to configure cert_reqs, your curl test is not using client auth. Also, reread the logs emitted by Gunicorn. If you have not seen the warning telling you ssl_version is deprecated and ignored, maybe you missed something else there?
from gunicorn.
juparker37
commented on August 17, 2024
Are you certain you meant to configure
cert_reqs, your curl test is not using client auth. Also, reread the logs emitted by Gunicorn. If you have not seen the warning telling youssl_versionis deprecated and ignored, maybe you missed something else there?
I am trying to configure mTLS actually between Ngnix reverse proxy and Gunicorn. I assume the cert_reqs would be needed and both sides need the TLS CA certificate installed.
Yes, you are correct on the Curl command used. I changed it to just a Curl request without options. But when trying to hit the proxied "/dashboard/" via 9443 it has a 301 redirect but the TLS connection fails.
curl https://server01.mydomain.com:9443/dashboard
<html>
<head><title>301 Moved Permanently</title></head>
<body bgcolor="white">
<center><h1>301 Moved Permanently</h1></center>
<hr><center>nginx/1.14.1</center>
</body>
</html>
curl https://server01.mydoamin.com:9450/dashboard
curl: (35) schannel: failed to receive handshake, SSL/TLS connection failed
from gunicorn.
juparker37
commented on August 17, 2024
Are we assuming that Gunicorn does not support mTLS (mutual TLS) to secure the backend instead of terminating the TLS connection a Nginx and the plaintext talking to the app?
from gunicorn.
juparker37
commented on August 17, 2024
When I go to https://192.168.46.69:9450/dashboard using Incognito directly and bypass proxy, the Gunicorn TLS config is still not working. Browser is still saying connection not secure.
I tried to comment out all lines in the gunicorn.conf.py and use the cli
gunicorn --certfile /home/djangoweb/certs/star.mydomain.com.pem --keyfile /home/djangoweb/certs/private/star.mydoamin.com.key -c cloudmonitor/gunicorn.conf.py --error-logfile -
2024/08/16 11:54:54 [error] 4169609#0: *1 peer closed connection in SSL handshake (104: Connection reset by peer) while SSL handshaking to upstream, client: 10.206.10.11, server: server01.oversightsystems.com, request: "GET /dashboard/ HTTP/1.1", upstream: "https://192.168.46.69:9450/dashboard/", host: "server01.mydomain:9443"
For sanity, I may try my Django app with uwsgi to see if I can reproduce the issue or not.
from gunicorn.
Related Issues (20)
- Can Gunicorn be made to run and manage MultiServer apps? HOT 1
- gunicorn + gevent(worker class) generating exception when terminating the process with `ctrl+c` HOT 2
- Clarify Gunicorn's advice to use Nginx proxy HOT 3
- Docs: What are AsyncIO Workers? HOT 1
- gthread timeout during launch HOT 2
- Reloader: follow symlinks for reload_extra_files HOT 1
- Gunicorn doesn't strip tabs and spaces from header values on the right HOT 1
- Server Error - Respect the Accept header in responses HOT 1
- TransportError and KeyError Encountered in Flask Application HOT 3
- Add option to purge largest worker HOT 3
- Workers time out during `sock.sendall` HOT 2
- More verbose README HOT 1
- introduce profile setting to gunicorn HOT 2
- sdist is missing `tox.ini` HOT 1
- when worker calss is eventlet, how to choose free worker to handle received request? HOT 5
- Gunicorn in docker sends SIGKILL to workers when SIGHUP sent to master process HOT 2
- Gunicorn spiking memory consumption regularly after 3 weeks HOT 4
- Gunicorn 23.0 Django 5.1 ModuleNotFoundError: No module named 'cloudmonitor.wsgi' HOT 4
- CVE-2024-6827 HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from gunicorn.