SSL_do_handshake() failed (SSL: error:14094458:SSL routines:ssl3_read_bytes:tlsv1 unrecognized name:SSL alert number 112) while SSL handshaking to upstream, client: 127.0.0.1, server: , request: "GET /lab_control HTTP/1.1", upstream:

[Shivani-shi]

Version

4.0.1

What Kubernetes platforms are you running on?

AKS Azure

Steps to reproduce

In our aks cluster the nginx version was in 2.0.1 and we upgraded it to version 4.0.1. And the upgrade was through helm chart. updating the helm dependency, lease upgrade, and crd upgrades

The upgrade went well but there was a issue for the upstream appliance which was connecting to the application before upgrade with no error but now after the upgrade it has this error
SSL_do_handshake() failed (SSL: error:14094458:SSL routines:ssl3_read_bytes:tlsv1 unrecognized name:SSL alert number 112) while SSL handshaking to upstream, client: 127.0.0.1, server: , request: "GET /lab_control HTTP/1.1", upstream:

now that we have to fix this error but not at the appliance side but from the cluster side what parameter i should make change to fix this error

nginx-ingress:
enabled: true
controller:
config:
entries:
default-server-return: 302 https://www.skytap.com/
ssl-protocols: TLSv1.2
server-tokens: false
proxy_ssl_server_name: true

Does the addition of proxy_ssl_server_name: true in the values.yaml fix this?

[github-actions]

Hi @Shivani-shi thanks for reporting!

Be sure to check out the docs and the Contributing Guidelines while you wait for a human to take a look at this 🙂

Cheers!

[pdabelf5]

@Shivani-shi thank you for creating this issue.
Can you let us know if you are using the Ingress or VirtualServer resource for your host?
Also, are you an NGINX open source or NGINX Plus user?
Thanks