by thomas.berger@videxio.com:
In Go1.3
We sometime observe failing establishing of TLS1.2 connections
Error Message: tls: first record does not look like a TLS handshake
Root cause:
In file http://golang.org/src/pkg/crypto/tls/conn.go
Inside readRecord there is a check to ensure that the record is no longer than 12KB
(0x3000) (line 578):
if (typ != recordTypeAlert && typ != want) || vers >= 0x1000 || n >=
0x3000 {
However, some servers do have a lot of certificates installed, so we have observed more
than 12KB of data.
One example (depending on the server behind the load balancer):
Test: openssl s_client -connect sipfed0E.online.lync.com:5061
We have observed 0x3013 as length in some server hellos (which is > 0x3000).
I suggest the limit is raised to a higher number.
Kind regards,
Thomas M. Berger, videxio
by thomas.berger@videxio.com: