Starting this past Thursday (9/30) we started experiencing an issue where a user won't be able to reach our confluence web application, with the intermittent errors below.
"PR_CONNECT_RESET_ERROR" OR "Timeout while reading data from remote server during SSL handshake"
Is this a possible coincidence with the general expiration of some digital SSL certs that help fortify the web...I do recall the providers Let's Encrypt and ssl.com making a reference to it recently.
If the SSL certificate was expired there would be a different error. This error is usually caused by a firewall or F5 terminating the connection. Have you had any network changes? (Firewall, VPN, F5, etc)
@Brant Schroeder The SSL cert hasn't expired, still at least a week left. No network changes, no loadbalancer or FW (i.e. VPN) modifications...checked with the hosting company as our VPS is an unmanaged (i.e. no filtering). Just regular weekly windows updates on this environment and our testing one prior with no issues. Tracerts seem straightforward.
As I mentioned, the site would intermittently work for a while and then boom a connection problem. Our monitoring service (i.e. site24x7.com) would throw the "Timeout while reading data from remote server during SSL handshake" error in logs.
Thanks for your time Brant!
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
I didn't see anything odd outside of typical warnings/errors (i.e. email, low disk space, duplicate attachment, etc) in the "log analyzer" or 'thread diagnostics' when things weren't working externally (i.e. outside IP) vs from inside (i.e. https:/localhost).
NOTE:- I am still not convinced there isn't an issue with DNS propagation with our hosting ISP where the VM resides, since I am able to peruse the application from inside the network during the external outage
Should I be looking for anything specific directly in the apache/tomcat/confluence logs?
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.