amazon web services - Marklogic 8 http-get to AWS API gateway results in SSL handshake failure -
i want write xquery module calls aws api gateway endpoint. ran code following:
xdmp:http-get("https://gxkhphr091.execute-api.eu-west-1.amazonaws.com/prod", <options xmlns="xdmp:http"> <allow-sslv3>false</allow-sslv3> <allow-tls>true</allow-tls> </options>) and is:
[1.0-ml] svc-socconn: xdmp:http-get("https://gxkhphr091.execute-api.eu-west-1.amazonaws.com/prod", <options xmlns="xdmp:http"/>) -- socket connect error: ssl_connect 192.168.15.17:59789-52.85.63.117:443: sslv3 alert handshake failure (0x14077410) the endpoint doesn't require client certification. doing curl same host works fine:
curl -v https://gxkhphr091.execute-api.eu-west-1.amazonaws.com/prod i read aws api gateway doesn't support sslv3 more - requires tls, why used above options, tried other combinations of options , result in same sslv3 error above.
i have tried other https:// urls such aws s3 , work, it's different way api gateway ssl/tls.
any ideas issue is?
from finding elsewhere, related lack of sni support in client. api gateway requires http clients support sni.
you have to add the CA in security Database from Admin api for that particluar client
ReplyDelete