ssl handshake fail when proxy between two tomcat with mutual authentication

[bhagt]

Hi all,

I have configured nginx to do mutual authentication to a loadbalancer
(ssl-offloading) which sends the http traffic to a webserver with virtual
hosts.

Keep getting the following error:

SSL_do_handshake() failed (SSL: error:14094410:SSL
routines:SSL3_READ_BYTES:sslv3 alert handshake failure:SSL alert number 40)
while SSL handshaking to upstream

if run nginx in debug mode i only see a small ssl client-hello.

But if i use openssl:

openssl s_client -state -debug -showcerts -verify 0 -connect <my_vip>:443

i can see the handshake.

Any help/lead would be appreciated.

Regards,

Bhagt

Posted at Nginx Forum: https://forum.nginx.org/read.php?2,241171,269719#msg-269719