amazon web services - Marklogic 8 http-get to AWS API gateway results in SSL handshake failure -


i want write xquery module calls aws api gateway endpoint. ran code following:

xdmp:http-get("https://gxkhphr091.execute-api.eu-west-1.amazonaws.com/prod",         <options xmlns="xdmp:http">           <allow-sslv3>false</allow-sslv3>           <allow-tls>true</allow-tls>         </options>) 

and is:

[1.0-ml] svc-socconn: xdmp:http-get("https://gxkhphr091.execute-api.eu-west-1.amazonaws.com/prod", <options xmlns="xdmp:http"/>) -- socket connect error: ssl_connect 192.168.15.17:59789-52.85.63.117:443: sslv3 alert handshake failure (0x14077410) 

the endpoint doesn't require client certification. doing curl same host works fine:

curl -v https://gxkhphr091.execute-api.eu-west-1.amazonaws.com/prod 

i read aws api gateway doesn't support sslv3 more - requires tls, why used above options, tried other combinations of options , result in same sslv3 error above.

i have tried other https:// urls such aws s3 , work, it's different way api gateway ssl/tls.

any ideas issue is?

from finding elsewhere, related lack of sni support in client. api gateway requires http clients support sni.

https://en.wikipedia.org/wiki/server_name_indication


Comments

  1. you have to add the CA in security Database from Admin api for that particluar client

    ReplyDelete

Post a Comment

Popular posts from this blog

php - isset function not working properly -

javascript - Thinglink image not visible until browser resize -

firebird - Error "invalid transaction handle (expecting explicit transaction start)" executing script from Delphi -