SSL3_CTX_CTRL:called a function you should not call

173279834462 nginx-forum at nginx.us
Thu Mar 19 20:02:10 UTC 2015


Update:

The original error "SSL3_CTX_CTRL:called a function you should not cal" is
no longer on the logs. 

The last occurrence dates back to early february:

2015/02/03 20:23:30 [alert] 69020#0: *16 ignoring stale global SSL error
(SSL: error:14085042:SSL routines:SSL3_CTX_CTRL:called a function you should
not call) while SSL handshaking, client: [my-IP], server: 0.0.0.0:443

>From my seat that error is gone.  

However, I do see the following on the error log when running ssllabs'
server test:

2015/03/19 20:45:24 [crit] 24179#0: *226 SSL_do_handshake() failed (SSL:
error:14094085:SSL routines:SSL3_READ_BYTES:ccs received early) while SSL
handshaking, client: 64.41.200.101, server: 0.0.0.0:443
2015/03/19 20:45:25 [crit] 24179#0: *227 SSL_do_handshake() failed (SSL:
error:14094085:SSL routines:SSL3_READ_BYTES:ccs received early) while SSL
handshaking, client: 64.41.200.101, server: 0.0.0.0:443

The timing occurs right before POODLE tests: 

> BEAST attack 	Not mitigated server-side (more info)   TLS 1.0: 0xc014

I am on nginx 1.7.10 with libressl 2.1.6.

Posted at Nginx Forum: http://forum.nginx.org/read.php?2,256381,257447#msg-257447



More information about the nginx mailing list