$ curl -v https://stream.wikimedia.org/rcstream_status * Trying 2620:0:861:ed1a::3:15... * connect to 2620:0:861:ed1a::3:15 port 443 failed: Network is unreachable * Trying 208.80.154.249... * Connected to stream.wikimedia.org (208.80.154.249) port 443 (#0) * found 180 certificates in /etc/ssl/certs/ca-certificates.crt * found 724 certificates in /etc/ssl/certs * ALPN, offering http/1.1 * gnutls_handshake() failed: An unexpected TLS packet was received. * Closing connection 0 curl: (35) gnutls_handshake() failed: An unexpected TLS packet was received. $ curl -v http://stream.wikimedia.org:443/rcstream_status * Trying 2620:0:861:ed1a::3:15... * connect to 2620:0:861:ed1a::3:15 port 443 failed: Network is unreachable * Trying 208.80.154.249... * Connected to stream.wikimedia.org (208.80.154.249) port 443 (#0) > GET /rcstream_status HTTP/1.1 > Host: stream.wikimedia.org:443 > User-Agent: curl/7.42.1 > Accept: */* > < HTTP/1.1 200 OK < Server: nginx/1.4.6 (Ubuntu) < Date: Sat, 13 Jun 2015 01:02:16 GMT < Content-Type: application/json < Content-Length: 41 < Connection: keep-alive < * Connection #0 to host stream.wikimedia.org left intact {"connected_clients": 1, "queue_size": 0}
Description
Description
Details
Details
Subject | Repo | Branch | Lines +/- | |
---|---|---|---|---|
rcstream: fix TLS configuration | operations/puppet | production | +5 -1 |
Status | Subtype | Assigned | Task | ||
---|---|---|---|---|---|
Resolved | • ema | T108827 Investigate TCP Fast Open for tlsproxy | |||
Declined | None | T107236 Switch port 80 to nginx on primary clusters | |||
Resolved | BBlack | T104681 HTTPS Plans (tracking / high-level info) | |||
Declined | None | T140128 HTTPS-only for stream.wikimedia.org | |||
Resolved | faidon | T102313 stream.wikimedia.org speaks http (not https) on port 443 |
Event Timeline
Comment Actions
Change 220222 had a related patch set uploaded (by Faidon Liambotis):
rcstream: fix TLS configuration