Re: RE: Intermittent SSL Handshake Errors

2015-02-06 Thread ericr
We've been unable to reproduce it with any one browser or IP address. It really is very intermittent. Fortunately, I believe we've gotten to the bottom of this. It looks like our data center switched us over to anti-DDoS route. This means all of our traffic has been passing through hardware that pe

Re: Intermittent SSL Handshake Errors

2015-02-03 Thread ericr
The errors went away, and now the only errors I see in our logs relating to SSL are handshake timeouts when I turn debug logs on. Now that I think about it, though, isn't this to be expected? The errors immediately went away as soon as I downgraded far enough back to a version of OpenSSL that didn

Re: Intermittent SSL Handshake Errors

2015-02-03 Thread ericr
I just finished running an experiment that has shed some light on the issue. It has not yet been solved though. I setup another nginx server with the same configuration with an upstream app that always responds with HTTP 200. I included JS on each page load in production to make a single request t

Re: Intermittent SSL Handshake Errors

2015-02-02 Thread ericr
Prior to this issue starting, we had not changed our ciphers in several months. I have tried changing them once since. We have also tried restarting nginx several times on each server to clear the cache, but it has not helped. Posted at Nginx Forum: http://forum.nginx.org/read.php?2,256373,256406