Search code examples
ssllotus-dominogrpcdomino-appdev-pack

Configuring Proton for SSL / TLS throwing openssl wrong version number and gRPC client error


I'm kinda at a loss here. Trying to set up proton with SSL / TLS access, but after creating the certificates with the (modified) shell scripts supplied by the AppDev-Pack and linking the keyring and everything in notes.ini, I always seem to get the error "Handshake failed with fatal error SSL_ERROR_SSL: error: 100000f7:SSL routines:OPENSSL_internal: WRONG_VERSION_NUMBER".

Tried both a windows and linux server, as well as using the accessing node.js app with and without certificates - but with no success.

Also tried the troubleshoot section of https://doc.cwpcollaboration.com/appdevpack/docs/en/proton-admin.html and it connected just fine, but won't if i connect with node.js.

Looks like the error is thrown before a certificate is even checked?

In this example the error is thrown after trying to get a document by UNID.

notes.ini (proton parts)

gRPC Client Error

If someone has an idea how to fix that issue or where to start - that would really help me.

Thanks in advance.


Solution

  • It appears that the client side does not have the secure flag set. At least I get a similar stack when I try to connect without TLS when the server expects TLS.

    See the secure attribute when calling useServer() function, and you'll also need to provide the credentials attributes.