Wrong certificate from EKS cluster nginx SSL terminator
I have a strange problem w.r.t secure websoket connection to a spring boot application (with WSS endpoint running). Basically I have a websoket client which is part of my production code and it is suppose to connect to the wss end point available in EKS cluster using let's encrypt certificate. However due to some reason it does not connect and throws me an exception stating "not a valid certificate path". I am sure that I have used the correct certificate on both sides.
After some investigations I found that EKS gives me a Kubernetes fake certificate during handshake rather than let's encrypt certificate due to some reason. And the interesting fact is, if I write a simple websoket client out side my production code, I am able to connect to the end point using let's encrypt certificate.
FYI, I am running both code from my laptop, so JVM environment, certificate store is same. Has anybody faced this issue before, or can you please help me with areas where I should start investigation?
With wireshirk capture I see below difference in production request and my sample app request, server_name is missing from prod app, no idea why.
This problem basically occurs with Java 8. In some specific scenarios this happens. Basically if websocket endpoint has one IP with multiple hostnames, then host_name extension header (SNI) to be supplied from client side and if does not happen then you might end up with problems like getting wrong certificate.
I have used this link to resolve this issue. Basically I had to use the websocket client from and provide socket factory wrapper from above link.
- Math.Sin() gives incorrect value
- How to run my python script when the sunOS is start booting
- Express-session: not resetting cookie expiration on each request
- Getting a stack overflow exception when normalizing a vector
- Edit default summary function in R gives error for multiple variables
- What was a For loop? Why isn't it needed in R?
- How to use download button in shiny and save results in various formats (csv, texte, pdf, spss...)?
- Why are there two assignment operators, `<-` and `->` in R?
- lm()$assign: what is it?
- How to get the value of list(...) in R and S functions
- Design matrix for MLM from library(lme4) with fixed and random effects
- how to generate elements not included in my sample
- Create a matrix with gradually changing values without a for loop
- Emacs ESS and S-plus ( S+ ) 8.1 compatability
- How to lag date-index in a time-series in R?
- Nonlinear regression in R / S
- Calling R from S-Plus?