-
Notifications
You must be signed in to change notification settings - Fork 3.9k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Log tls handshake timeouts #11171
Comments
@ansd you might find this interesting. When the TLS handshake times out, this is what
I'm assuming this is why nothing is logged ... I'm continuing my investigation. I'm kind of surprised a UPDATE: oh, here's why:
UPDATE 2: yeah, it seems like the whole supervisor setup for a TCP/SSL ranch listener swallows errors like TLS handshake timeout, with nary a log message or crash anywhere. |
Fixes #11171 An MQTT user encountered TLS handshake timeouts with their IoT device, and the actual error from `ssl:handshake` / `ranch:handshake` was not caught and logged. At this time, `ranch` uses `exit(normal)` in the case of timeouts, but that should change in the future (ninenines/ranch#336)
This issue would be helped by having ninenines/ranch#336 addressed in Ranch. |
Is your feature request related to a problem? Please describe.
https://groups.google.com/g/rabbitmq-users/c/VT4GKJVJT7s
In the above discussion, the user reported that their ESP8266 device wouldn't connect to RabbitMQ when the following server settings are enabled:
If the above verification is disabled, the connection succeeds. It turns out that
ssl:handshake
took longer than the default 5 second timeout set by thessl_handshake_timeout
setting. I determined this by usingredbug
, because NOTHING was logged by RabbitMQ! 🤦♂️Describe the solution you'd like
RabbitMQ should clearly log TLS errors like handshake timeouts.
The text was updated successfully, but these errors were encountered: