Cannot connect to port 8080

[jhiemer]

Hi,
I have setup concourse via bosh, I have provided a self-signed certificate and the deployment process went through smoothly. I can't see any suspect logs but I am not able to connect to port 8080.

openssl s_client
connect: Connection refused
connect:errno=111
bosh_mriosgbjp@16819eb4-b5ba-437b-924c-45b2063d72af:~$ openssl s_client -connect 172.24.100.11:8080
CONNECTED(00000003)
140278836115104:error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol:s23_clnt.c:795:

---
no peer certificate available

---
No client certificate CA names sent

---
SSL handshake has read 7 bytes and written 295 bytes

---
New, (NONE), Cipher is (NONE)
Secure Renegotiation IS NOT supported
Compression: NONE
Expansion: NONE

---

I have debugged for a couple of hours now and have no idea anymore. When I do a tcpump, I can see the the requests arriving:

20:21:30.824231 IP p4FEAACE3.dip0.t-ipconnect.de.61582 > 172.24.100.11.http-alt: Flags [.], ack 89, win 4101, options [nop,nop,TS val 387114186 ecr 21660283], length 0
20:21:30.824674 IP p4FEAACE3.dip0.t-ipconnect.de.61582 > 172.24.100.11.http-alt: Flags [.], ack 90, win 4101, options [nop,nop,TS val 387114186 ecr 21660283], length 0
20:21:30.824721 IP p4FEAACE3.dip0.t-ipconnect.de.61582 > 172.24.100.11.http-alt: Flags [P.], seq 130:137, ack 90, win 4101, options [nop,nop,TS val 387114186 ecr 21660283], length 7

But they do not get processed properly.

[concourse-bot]

Hi there!

We use Pivotal Tracker to provide visibility into what our team is working on. A story for this issue has been automatically created.

The current status is as follows:

• #126734703 Cannot connect to port 8080

This comment, as well as the labels on the issue, will be automatically updated as the status in Tracker changes.

[jhiemer]

Further debugging, I also did a telnet to the specific IP, which shows that the port is reachable:

telnet 217.26.224.148 8080
Trying 217.26.224.148...
Connected to 217.26.224.148.
Escape character is '^]'.

The certificate was generated with:

openssl genrsa -des3 -passout pass:x -out server.pass.key 2048
openssl rsa -passin pass:x -in server.pass.key -out server.key
rm server.pass.key
openssl req -new -key server.key -out server.csr

openssl x509 -req -sha256 -days 365 -in server.csr -signkey server.key -out server.crt