Why fail to open secure connection to the client incidentally, and what's the proper cleaning strategy for the generated certificates?
Miles Wen <[email protected]> Mon, 15 Mar 2021 10:51:29 +0800
| Newsgroups | gmane.comp.web.privoxy.user |
|---|---|
| Message-ID | <CAJZuUJAw79ZQ82L9igiE5H91yon_f81xTWrLPb-tpPesUG_iPQ@mail.gmail.com> |
I'm using privoxy v3.0.32 on macosx v10.15.6 catalina. With https inspection on. With those debug options set: > debug 1024 # Log the destination for requests Privoxy didn't let through, and the reason why. > debug 8192 # Non-fatal errors > > I incidentally get some error logs like this: > 2021-03-15 10:07:44.978 7f863fa1f700 Error: The TLS/SSL handshake with the > client failed: error:1408F09C:SSL routines:ssl3_get_record:http request > 2021-03-15 10:07:44.978 7f863fa1f700 Error: Failed to open a secure > connection with the client > Anybody have ideas about this error msg? As long as I'm using https inspection, I wrote a program to delete the generated certificate files older than 11 hours. But I don't know if this is the best cleaning strategy. I also get some errors like this: > 2021-03-15 10:10:07.260 7f86209e1700 Error: X509 subject name (code: CN, > val: > only-d-pmjr9f4mclevwwl2mwckreicm8k1afzk-1615774207025.nstool.netease.com) > error: error:0D07A097:asn1 encoding routines:ASN1_mbstring_ncopy:string too > long > 2021-03-15 10:10:07.260 7f86209e1700 Error: generate_host_certificate > failed: -1 > 2021-03-15 10:10:07.260 7f86209e1700 Error: Failed to open a secure > connection with the client > 2021-03-15 10:10:07.268 7f86209e1700 Error: A website key already exists > but there's no matching certificate. Removing > /tmp/privoxyTmp/certGen/6e8849e15804dbafb007349e8271b483.pem before > creating a new key and certificate. > 2021-03-15 10:10:07.653 7f86209e1700 Error: X509 subject name (code: CN, > val: > only-d-pmjr9f4mclevwwl2mwckreicm8k1afzk-1615774207025.nstool.netease.com) > error: error:0D07A097:asn1 encoding routines:ASN1_mbstring_ncopy:string too > long > 2021-03-15 10:10:07.654 7f86209e1700 Error: generate_host_certificate > failed: -1 > 2021-03-15 10:10:07.654 7f86209e1700 Error: Failed to open a secure > connection with the client > Are these errors related to my certificates cleaning? What's next I can do to try to fix it? thanks. -- Regards. Wen Yue