接收到“返回的SSL_connect = 1 errno = 0状态= SSLv3读取服务器问候A:sslv3警报握手失败".与openshift nodejs应用程序 [英] Receiving "SSL_connect returned=1 errno=0 state=SSLv3 read server hello A: sslv3 alert handshake failure" with openshift nodejs app

问题描述

我在openshift上有一个nodejs应用，当我们在本地开发时，我们使用rhc port-forward命令连接到我们的数据库.

I have a nodejs app on openshift, and we use the rhc port-forward command to connect to our database when we develop locally.

我们已实施护照，以通过Google和Facebook验证用户身份.我已经验证了自己的身份，我们仍然可以使用rhc命令.我的伴侣最近通过Facebook进行了身份验证，此后不久(约1周)，我们抛出了这个错误.不知道这是否完全相关，但是包含它也不会有什么坏处.

We have implemented passport to authenticate users through google and through facebook. I have authenticated my self, and we could still use the rhc commands. My partner has recently authenticated himself through facebook, and shortly after that (~1 week), we got this error thrown our way. Dont know if that is entirely relevant, but it couldn't hurt to include.

Connection to openshift.redhat.com failed: A secure connection could not be established to the   server
(SSL_connect returned=1 errno=0 state=SSLv3 read server hello A: sslv3 alert handshake failure). You may
disable secure connections to your server with the -k (or --insecure) option
'https://openshift.redhat.com/broker/rest/api'.

If your server is using a self-signed certificate, you may disable certificate checks with the -k (or
--insecure) option. Using this option means that your data is potentially visible to third parties.

关于如何解决此问题的任何想法?我在其他堆栈问题上都看到了此错误，但是我看到的每个问题中，提出该问题的人都在使用ruby.

Any ideas on how to resolve this? I have seen this error on other stack questions, but every question I saw, the people posing the question were using ruby.

推荐答案

这可能是POODLE SSLv3崩溃的结果.您可以通过更新httpclient ruby​​ gem来修复它.在命令行中输入:

This is likely a result of the POODLE SSLv3 debacle. You can fix it by updating the httpclient ruby gem. At the command line type:

sudo gem update httpclient

或者您也可以通过将以下内容添加到您的.openshift/express.conf文件中来对其进行修复:

Or you can also fix it by adding the following to your .openshift/express.conf file:

ssl_version=tlsv1

这两个修补程序本质上都告诉您的应用使用TLSv1而不是SSLv3.

Both of these fixes essentially tell your app to use TLSv1 instead of SSLv3.

这篇关于接收到“返回的SSL_connect = 1 errno = 0状态= SSLv3读取服务器问候A:sslv3警报握手失败".与openshift nodejs应用程序的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！