Http: TLS handshake error from x.x.x.x:y: no certificate available for ''

GreatFireWall · July 20, 2019, 9:33pm

I’m using AlibabaCloud CDN. Does anyone have this problem when using CDN like me?

Whitestrake · July 21, 2019, 2:52am

Junk traffic is pretty common. Looks like a few IP addresses trying repeat requests with no SNI. Shouldn’t be too much of a problem unless they’re flooding you with enough traffic to consume a lot of resources, in which case you could look into fail2ban or rate limiting.

GreatFireWall · July 21, 2019, 4:13pm

You may have misunderstood me. I mean that my CDN settings do not work. I visited my own website - > CDN - > my website - > and made the above tls error. @Whitestrake

Whitestrake · July 21, 2019, 4:20pm

You need to ensure your CDN is sending the hostname via SNI. I’m not sure how that’s done on AlibabaCloud.

GreatFireWall · July 22, 2019, 4:33pm

Bingo, it’s the SNI issue. Thank you.

matt · July 22, 2019, 8:34pm

You can also specify the -default-sni CLI flag to allow connections without SNI, if you need a “default” certificate.

system · October 20, 2019, 8:34pm

This topic was automatically closed 90 days after the last reply. New replies are no longer allowed.