Deployment issue while Spring Boot 2.1.3 WAR ON Websphere 8.5 - websphere-8

I am trying to deploy a war files created using Spring Boot version 2.1.3.RELEASE on Websphere 8.5.5.13
I read some articles and found the Spring boot version 2.1.x is not supported in Websphere 8.5.5.13 but on Websphere 9.x
Although I found some work around and tried the same - UI version.
But I am getting below exception.
We have some MDB bean setup in our application. Looks like the modified configuration not able to initialize MDB bean successfully.
Any guidance is highly appreciated.
[3/23/19 11:59:10:004 EDT] 0000028a SystemErr R com.ibm.ws.exception.RuntimeWarning: Error while processing references for EJB-in-WAR: com.ibm.ejs.container.EJBConfigurationException: EJB class com.kundan.hrms.employee.mdb.EmployeeCacheRefreshSubscriber must have a public constructor that takes no parameters : cddb-api-boot_war#cddb-api-boot.war#EmployeeCacheRefreshSubscriber
[3/23/19 11:59:10:004 EDT] 0000028a SystemErr R at com.ibm.ws.runtime.component.EJBContainerImpl.createNestedModuleMetaData(EJBContainerImpl.java:3434)
[3/23/19 11:59:10:005 EDT] 0000028a SystemErr R at com.ibm.ws.runtime.component.EJBContainerImpl.createNestedModuleMetaData(EJBContainerImpl.java:750)
[3/23/19 11:59:10:005 EDT] 0000028a SystemErr R at com.ibm.ws.runtime.component.MetaDataMgrImpl.createNestedModuleMetaData(MetaDataMgrImpl.java:564)
[3/23/19 11:59:10:005 EDT] 0000028a SystemErr R at com.ibm.ws.runtime.component.DeployedModuleImpl.start(DeployedModuleImpl.java:633)
[3/23/19 11:59:10:005 EDT] 0000028a SystemErr R at com.ibm.ws.runtime.component.DeployedApplicationImpl.start(DeployedApplicationImpl.java:979)
[3/23/19 11:59:10:005 EDT] 0000028a SystemErr R at com.ibm.ws.runtime.component.ApplicationMgrImpl.startApplication(ApplicationMgrImpl.java:795)
[3/23/19 11:59:10:005 EDT] 0000028a SystemErr R at com.ibm.ws.runtime.component.ApplicationMgrImpl.startApplicationDynamically(ApplicationMgrImpl.java:1413)
[3/23/19 11:59:10:005 EDT] 0000028a SystemErr R at com.ibm.ws.runtime.component.ApplicationMgrImpl.start(ApplicationMgrImpl.java:2273)
[3/23/19 11:59:10:005 EDT] 0000028a SystemErr R at com.ibm.ws.runtime.component.CompositionUnitMgrImpl.start(CompositionUnitMgrImpl.java:436)
[3/23/19 11:59:10:005 EDT] 0000028a SystemErr R at com.ibm.ws.runtime.component.CompositionUnitImpl.start(CompositionUnitImpl.java:123)
[3/23/19 11:59:10:005 EDT] 0000028a SystemErr R at com.ibm.ws.runtime.component.CompositionUnitMgrImpl.start(CompositionUnitMgrImpl.java:379)
[3/23/19 11:59:10:005 EDT] 0000028a SystemErr R at com.ibm.ws.runtime.component.CompositionUnitMgrImpl.access$500(CompositionUnitMgrImpl.java:127)
[3/23/19 11:59:10:005 EDT] 0000028a SystemErr R at com.ibm.ws.runtime.component.CompositionUnitMgrImpl$1.run(CompositionUnitMgrImpl.java:654)
[3/23/19 11:59:10:006 EDT] 0000028a SystemErr R at com.ibm.ws.security.auth.ContextManagerImpl.runAs(ContextManagerImpl.java:5554)
[3/23/19 11:59:10:006 EDT] 0000028a SystemErr R at com.ibm.ws.security.auth.ContextManagerImpl.runAsSystem(ContextManagerImpl.java:5680)
[3/23/19 11:59:10:006 EDT] 0000028a SystemErr R at com.ibm.ws.security.core.SecurityContext.runAsSystem(SecurityContext.java:255)
[3/23/19 11:59:10:006 EDT] 0000028a SystemErr R at com.ibm.ws.runtime.component.CompositionUnitMgrImpl.startCompositionUnit(CompositionUnitMgrImpl.java:668)
[3/23/19 11:59:10:006 EDT] 0000028a SystemErr R at com.ibm.ws.runtime.component.CompositionUnitMgrImpl.startCompositionUnit(CompositionUnitMgrImpl.java:612)
[3/23/19 11:59:10:006 EDT] 0000028a SystemErr R at com.ibm.ws.runtime.component.ApplicationMgrImpl.startApplication(ApplicationMgrImpl.java:1303)
[3/23/19 11:59:10:006 EDT] 0000028a SystemErr R at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
[3/23/19 11:59:10:006 EDT] 0000028a SystemErr R at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:90)
[3/23/19 11:59:10:006 EDT] 0000028a SystemErr R at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:55)
[3/23/19 11:59:10:006 EDT] 0000028a SystemErr R at java.lang.reflect.Method.invoke(Method.java:508)
[3/23/19 11:59:10:006 EDT] 0000028a SystemErr R at sun.reflect.misc.Trampoline.invoke(MethodUtil.java:83)
[3/23/19 11:59:10:006 EDT] 0000028a SystemErr R at sun.reflect.GeneratedMethodAccessor292.invoke(Unknown Source)
[3/23/19 11:59:10:006 EDT] 0000028a SystemErr R at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:55)
[3/23/19 11:59:10:006 EDT] 0000028a SystemErr R at java.lang.reflect.Method.invoke(Method.java:508)
[3/23/19 11:59:10:007 EDT] 0000028a SystemErr R at sun.reflect.misc.MethodUtil.invoke(MethodUtil.java:287)
[3/23/19 11:59:10:007 EDT] 0000028a SystemErr R at javax.management.modelmbean.RequiredModelMBean$4.run(RequiredModelMBean.java:1263)
[3/23/19 11:59:10:007 EDT] 0000028a SystemErr R at java.security.AccessController.doPrivileged(AccessController.java:664)
[3/23/19 11:59:10:007 EDT] 0000028a SystemErr R at java.security.ProtectionDomain$JavaSecurityAccessImpl.doIntersectionPrivilege(ProtectionDomain.java:91)
[3/23/19 11:59:10:007 EDT] 0000028a SystemErr R at javax.management.modelmbean.RequiredModelMBean.invokeMethod(RequiredModelMBean.java:1257)
[3/23/19 11:59:10:007 EDT] 0000028a SystemErr R at javax.management.modelmbean.RequiredModelMBean.invoke(RequiredModelMBean.java:1096)
[3/23/19 11:59:10:007 EDT] 0000028a SystemErr R at com.sun.jmx.interceptor.DefaultMBeanServerInterceptor.invoke(DefaultMBeanServerInterceptor.java:831)
[3/23/19 11:59:10:007 EDT] 0000028a SystemErr R at com.sun.jmx.mbeanserver.JmxMBeanServer.invoke(JmxMBeanServer.java:813)
[3/23/19 11:59:10:007 EDT] 0000028a SystemErr R at com.ibm.ws.management.AdminServiceImpl$1.run(AdminServiceImpl.java:1350)
[3/23/19 11:59:10:007 EDT] 0000028a SystemErr R at com.ibm.ws.security.util.AccessController.doPrivileged(AccessController.java:118)
[3/23/19 11:59:10:007 EDT] 0000028a SystemErr R at com.ibm.ws.management.AdminServiceImpl.invoke(AdminServiceImpl.java:1243)
[3/23/19 11:59:10:007 EDT] 0000028a SystemErr R at com.ibm.ws.management.commands.AdminServiceCommands$InvokeCmd.execute(AdminServiceCommands.java:251)
[3/23/19 11:59:10:007 EDT] 0000028a SystemErr R at com.ibm.ws.console.core.mbean.MBeanHelper.invoke(MBeanHelper.java:246)
[3/23/19 11:59:10:008 EDT] 0000028a SystemErr R at com.ibm.ws.console.appdeployment.ApplicationDeploymentCollectionAction.execute(ApplicationDeploymentCollectionAction.java:608)
[3/23/19 11:59:10:008 EDT] 0000028a SystemErr R at org.apache.struts.action.RequestProcessor.processActionPerform(Unknown Source)
[3/23/19 11:59:10:008 EDT] 0000028a SystemErr R at org.apache.struts.action.RequestProcessor.process(Unknown Source)
[3/23/19 11:59:10:008 EDT] 0000028a SystemErr R at org.apache.struts.action.ActionServlet.process(Unknown Source)
[3/23/19 11:59:10:008 EDT] 0000028a SystemErr R at org.apache.struts.action.ActionServlet.doPost(Unknown Source)
[3/23/19 11:59:10:008 EDT] 0000028a SystemErr R at javax.servlet.http.HttpServlet.service(HttpServlet.java:595)
[3/23/19 11:59:10:008 EDT] 0000028a SystemErr R at javax.servlet.http.HttpServlet.service(HttpServlet.java:668)
[3/23/19 11:59:10:008 EDT] 0000028a SystemErr R at com.ibm.ws.webcontainer.servlet.ServletWrapper.service(ServletWrapper.java:1233)
[3/23/19 11:59:10:008 EDT] 0000028a SystemErr R at com.ibm.ws.webcontainer.servlet.ServletWrapper.handleRequest(ServletWrapper.java:782)
[3/23/19 11:59:10:008 EDT] 0000028a SystemErr R at com.ibm.ws.webcontainer.servlet.ServletWrapper.handleRequest(ServletWrapper.java:481)
[3/23/19 11:59:10:008 EDT] 0000028a SystemErr R at com.ibm.ws.webcontainer.servlet.ServletWrapperImpl.handleRequest(ServletWrapperImpl.java:178)
[3/23/19 11:59:10:008 EDT] 0000028a SystemErr R at com.ibm.ws.webcontainer.filter.WebAppFilterChain.invokeTarget(WebAppFilterChain.java:136)
[3/23/19 11:59:10:008 EDT] 0000028a SystemErr R at com.ibm.ws.webcontainer.filter.WebAppFilterChain.doFilter(WebAppFilterChain.java:79)
[3/23/19 11:59:10:009 EDT] 0000028a SystemErr R at com.ibm.ws.webcontainer.filter.WebAppFilterManager.doFilter(WebAppFilterManager.java:967)
[3/23/19 11:59:10:009 EDT] 0000028a SystemErr R at com.ibm.ws.webcontainer.filter.WebAppFilterManager.invokeFilters(WebAppFilterManager.java:1107)
[3/23/19 11:59:10:009 EDT] 0000028a SystemErr R at com.ibm.ws.webcontainer.webapp.WebAppRequestDispatcher.dispatch(WebAppRequestDispatcher.java:1404)
[3/23/19 11:59:10:009 EDT] 0000028a SystemErr R at com.ibm.ws.webcontainer.webapp.WebAppRequestDispatcher.forward(WebAppRequestDispatcher.java:196)
[3/23/19 11:59:10:009 EDT] 0000028a SystemErr R at org.apache.struts.action.RequestProcessor.doForward(Unknown Source)
[3/23/19 11:59:10:009 EDT] 0000028a SystemErr R at org.apache.struts.tiles.TilesRequestProcessor.doForward(Unknown Source)
[3/23/19 11:59:10:009 EDT] 0000028a SystemErr R at org.apache.struts.action.RequestProcessor.processForwardConfig(Unknown Source)
[3/23/19 11:59:10:009 EDT] 0000028a SystemErr R at org.apache.struts.tiles.TilesRequestProcessor.processForwardConfig(Unknown Source)
[3/23/19 11:59:10:009 EDT] 0000028a SystemErr R at org.apache.struts.action.RequestProcessor.process(Unknown Source)
[3/23/19 11:59:10:009 EDT] 0000028a SystemErr R at org.apache.struts.action.ActionServlet.process(Unknown Source)
[3/23/19 11:59:10:009 EDT] 0000028a SystemErr R at org.apache.struts.action.ActionServlet.doPost(Unknown Source)
[3/23/19 11:59:10:009 EDT] 0000028a SystemErr R at javax.servlet.http.HttpServlet.service(HttpServlet.java:595)
[3/23/19 11:59:10:010 EDT] 0000028a SystemErr R at javax.servlet.http.HttpServlet.service(HttpServlet.java:668)
[3/23/19 11:59:10:010 EDT] 0000028a SystemErr R at com.ibm.ws.webcontainer.servlet.ServletWrapper.service(ServletWrapper.java:1233)
[3/23/19 11:59:10:010 EDT] 0000028a SystemErr R at com.ibm.ws.webcontainer.servlet.ServletWrapper.handleRequest(ServletWrapper.java:782)
[3/23/19 11:59:10:010 EDT] 0000028a SystemErr R at com.ibm.ws.webcontainer.servlet.ServletWrapper.handleRequest(ServletWrapper.java:481)
[3/23/19 11:59:10:010 EDT] 0000028a SystemErr R at com.ibm.ws.webcontainer.servlet.ServletWrapperImpl.handleRequest(ServletWrapperImpl.java:178)
[3/23/19 11:59:10:010 EDT] 0000028a SystemErr R at com.ibm.ws.webcontainer.filter.WebAppFilterChain.invokeTarget(WebAppFilterChain.java:136)
[3/23/19 11:59:10:010 EDT] 0000028a SystemErr R at com.ibm.ws.webcontainer.filter.WebAppFilterChain.doFilter(WebAppFilterChain.java:97)
[3/23/19 11:59:10:010 EDT] 0000028a SystemErr R at com.ibm.ws.console.core.servlet.WSCUrlFilter.setUpCommandAssistance(WSCUrlFilter.java:967)
[3/23/19 11:59:10:010 EDT] 0000028a SystemErr R at com.ibm.ws.console.core.servlet.WSCUrlFilter.continueStoringTaskState(WSCUrlFilter.java:514)
[3/23/19 11:59:10:010 EDT] 0000028a SystemErr R at com.ibm.ws.console.core.servlet.WSCUrlFilter.doFilter(WSCUrlFilter.java:335)
[3/23/19 11:59:10:010 EDT] 0000028a SystemErr R at com.ibm.ws.webcontainer.filter.FilterInstanceWrapper.doFilter(FilterInstanceWrapper.java:195)
[3/23/19 11:59:10:010 EDT] 0000028a SystemErr R at com.ibm.ws.webcontainer.filter.WebAppFilterChain.doFilter(WebAppFilterChain.java:91)
[3/23/19 11:59:10:010 EDT] 0000028a SystemErr R at com.ibm.ws.webcontainer.filter.WebAppFilterManager.doFilter(WebAppFilterManager.java:967)
[3/23/19 11:59:10:010 EDT] 0000028a SystemErr R at com.ibm.ws.webcontainer.filter.WebAppFilterManager.invokeFilters(WebAppFilterManager.java:1107)
[3/23/19 11:59:10:011 EDT] 0000028a SystemErr R at com.ibm.ws.webcontainer.servlet.CacheServletWrapper.handleRequest(CacheServletWrapper.java:87)
[3/23/19 11:59:10:011 EDT] 0000028a SystemErr R at com.ibm.ws.webcontainer.WebContainer.handleRequest(WebContainer.java:949)
[3/23/19 11:59:10:011 EDT] 0000028a SystemErr R at com.ibm.ws.webcontainer.WSWebContainer.handleRequest(WSWebContainer.java:1817)
[3/23/19 11:59:10:011 EDT] 0000028a SystemErr R at com.ibm.ws.webcontainer.channel.WCChannelLink.ready(WCChannelLink.java:200)
[3/23/19 11:59:10:011 EDT] 0000028a SystemErr R at com.ibm.ws.http.channel.inbound.impl.HttpInboundLink.handleDiscrimination(HttpInboundLink.java:463)
[3/23/19 11:59:10:011 EDT] 0000028a SystemErr R at com.ibm.ws.http.channel.inbound.impl.HttpInboundLink.handleNewRequest(HttpInboundLink.java:530)
[3/23/19 11:59:10:011 EDT] 0000028a SystemErr R at com.ibm.ws.http.channel.inbound.impl.HttpInboundLink.processRequest(HttpInboundLink.java:316)
[3/23/19 11:59:10:011 EDT] 0000028a SystemErr R at com.ibm.ws.http.channel.inbound.impl.HttpICLReadCallback.complete(HttpICLReadCallback.java:88)
[3/23/19 11:59:10:011 EDT] 0000028a SystemErr R at com.ibm.ws.ssl.channel.impl.SSLReadServiceContext$SSLReadCompletedCallback.complete(SSLReadServiceContext.java:1833)
[3/23/19 11:59:10:011 EDT] 0000028a SystemErr R at com.ibm.ws.tcp.channel.impl.AioReadCompletionListener.futureCompleted(AioReadCompletionListener.java:175)
[3/23/19 11:59:10:011 EDT] 0000028a SystemErr R at com.ibm.io.async.AbstractAsyncFuture.invokeCallback(AbstractAsyncFuture.java:217)
[3/23/19 11:59:10:011 EDT] 0000028a SystemErr R at com.ibm.io.async.AsyncChannelFuture.fireCompletionActions(AsyncChannelFuture.java:161)
[3/23/19 11:59:10:011 EDT] 0000028a SystemErr R at com.ibm.io.async.AsyncFuture.completed(AsyncFuture.java:138)
[3/23/19 11:59:10:012 EDT] 0000028a SystemErr R at com.ibm.io.async.ResultHandler.complete(ResultHandler.java:204)
[3/23/19 11:59:10:012 EDT] 0000028a SystemErr R at com.ibm.io.async.ResultHandler.runEventProcessingLoop(ResultHandler.java:775)
[3/23/19 11:59:10:012 EDT] 0000028a SystemErr R at com.ibm.io.async.ResultHandler$2.run(ResultHandler.java:905)
[3/23/19 11:59:10:012 EDT] 0000028a SystemErr R at com.ibm.ws.util.ThreadPool$Worker.run(ThreadPool.java:1892)
[3/23/19 11:59:10:012 EDT] 0000028a SystemErr R Caused by: com.ibm.ejs.container.EJBConfigurationException: EJB class com.kundan.hrms.employee.mdb.EmployeeCacheRefreshSubscriber must have a public constructor that takes no parameters : cddb-api-boot_war#cddb-api-boot.war#EmployeeCacheRefreshSubscriber
[3/23/19 11:59:10:012 EDT] 0000028a SystemErr R at com.ibm.ws.ejbcontainer.jitdeploy.EJBUtils.validateEjbClass(EJBUtils.java:375)
[3/23/19 11:59:10:012 EDT] 0000028a SystemErr R at com.ibm.ws.ejbcontainer.jitdeploy.JITDeploy.validateInterfaceBasics(JITDeploy.java:253)
[3/23/19 11:59:10:012 EDT] 0000028a SystemErr R at com.ibm.ws.metadata.ejb.EJBMDOrchestrator.loadCustomerProvidedClasses(EJBMDOrchestrator.java:4243)
[3/23/19 11:59:10:012 EDT] 0000028a SystemErr R at com.ibm.ws.metadata.ejb.EJBMDOrchestrator.finishBMDInitForReferenceContext(EJBMDOrchestrator.java:7868)
[3/23/19 11:59:10:012 EDT] 0000028a SystemErr R at com.ibm.ws.ejbcontainer.runtime.AbstractEJBRuntime.finishBMDInitForReferenceContext(AbstractEJBRuntime.java:1678)
[3/23/19 11:59:10:012 EDT] 0000028a SystemErr R at com.ibm.ws.runtime.component.EJBContainerImpl.createNestedModuleMetaData(EJBContainerImpl.java:3427)
[3/23/19 11:59:10:012 EDT] 0000028a SystemErr R ... 95 more
[3/23/19 11:59:10:012 EDT] 0000028a SystemErr R Caused by: java.lang.ClassFormatError: JVMCFRE074 no Code attribute specified; class=javax/jms/JMSException, method=<init>(Ljava/lang/String;Ljava/lang/String;)V, pc=0
[3/23/19 11:59:10:012 EDT] 0000028a SystemErr R at java.lang.ClassLoader.defineClassImpl(Native Method)
[3/23/19 11:59:10:013 EDT] 0000028a SystemErr R at java.lang.ClassLoader.defineClass(ClassLoader.java:377)
[3/23/19 11:59:10:013 EDT] 0000028a SystemErr R at java.security.SecureClassLoader.defineClass(SecureClassLoader.java:154)
[3/23/19 11:59:10:013 EDT] 0000028a SystemErr R at com.ibm.ws.classloader.CompoundClassLoader._defineClass(CompoundClassLoader.java:857)
[3/23/19 11:59:10:013 EDT] 0000028a SystemErr R at com.ibm.ws.classloader.CompoundClassLoader.localFindClass(CompoundClassLoader.java:765)
[3/23/19 11:59:10:013 EDT] 0000028a SystemErr R at com.ibm.ws.classloader.CompoundClassLoader.loadClass(CompoundClassLoader.java:606)
[3/23/19 11:59:10:013 EDT] 0000028a SystemErr R at java.lang.ClassLoader.loadClass(ClassLoader.java:852)
[3/23/19 11:59:10:013 EDT] 0000028a SystemErr R at java.lang.J9VMInternals.prepareClassImpl(Native Method)
[3/23/19 11:59:10:013 EDT] 0000028a SystemErr R at java.lang.J9VMInternals.prepare(J9VMInternals.java:300)
[3/23/19 11:59:10:013 EDT] 0000028a SystemErr R at java.lang.Class.getConstructor(Class.java:543)
[3/23/19 11:59:10:013 EDT] 0000028a SystemErr R at com.ibm.ws.ejbcontainer.jitdeploy.EJBUtils.validateEjbClass(EJBUtils.java:365)
[3/23/19 11:59:10:013 EDT] 0000028a SystemErr R ... 100 more

Related

SSL_do_handshake() failed (SSL: error:141CF06C:SSL routines:tls_parse_ctos_key_share:bad key share) while SSL handshaking, client:

A few months ago I started getting complaints from dozens of users about getting errors when connecting to my site. When I look into the error.log of nginx I see daily SSL errors:
I have no idea what could cause this issue since 99% of users are getting through and I can't seem to replicate it myself. One user said that switching to a VPN fixed the issue for him. Other posts on stackoverflow suggested that this occurs with malicious requests from the same ip but that is not the case here.
Does anyone know a fix to this?
(I have not made any changes to this server/config in months.)
The webserver is running on Ubuntu 20.10
Nginx error.log
2022/04/16 04:40:19 [crit] 809329#809329: *13542487 SSL_do_handshake() failed (SSL: error:141CF06C:SSL routines:tls_parse_ctos_key_share:bad key share) while SSL handshaking, client: 138.197.194.139, server: 0.0.0.0:443
2022/04/16 04:40:32 [crit] 809329#809329: *13542919 SSL_do_handshake() failed (SSL: error:141CF06C:SSL routines:tls_parse_ctos_key_share:bad key share) while SSL handshaking, client: 38.132.118.76, server: 0.0.0.0:443
2022/04/16 04:58:54 [crit] 809329#809329: *13564742 SSL_do_handshake() failed (SSL: error:141CF06C:SSL routines:tls_parse_ctos_key_share:bad key share) while SSL handshaking, client: 165.227.227.95, server: 0.0.0.0:443
2022/04/16 05:10:29 [crit] 809329#809329: *13578753 SSL_do_handshake() failed (SSL: error:141CF06C:SSL routines:tls_parse_ctos_key_share:bad key share) while SSL handshaking, client: 138.197.194.139, server: 0.0.0.0:443
2022/04/16 05:59:32 [crit] 809329#809329: *13638601 SSL_do_handshake() failed (SSL: error:141CF06C:SSL routines:tls_parse_ctos_key_share:bad key share) while SSL handshaking, client: 178.73.215.171, server: 0.0.0.0:443
2022/04/16 07:16:27 [crit] 809330#809330: *13730741 SSL_do_handshake() failed (SSL: error:141CF06C:SSL routines:tls_parse_ctos_key_share:bad key share) while SSL handshaking, client: 65.49.20.67, server: 0.0.0.0:443
2022/04/16 07:18:19 [crit] 809330#809330: *13733448 SSL_do_handshake() failed (SSL: error:141CF06C:SSL routines:tls_parse_ctos_key_share:bad key share) while SSL handshaking, client: 192.241.223.231, server: 0.0.0.0:443
2022/04/16 09:51:15 [crit] 809330#809330: *13937194 SSL_do_handshake() failed (SSL: error:141CF06C:SSL routines:tls_parse_ctos_key_share:bad key share) while SSL handshaking, client: 165.227.227.95, server: 0.0.0.0:443
Nginx config
server {
server_name api.rekonise.com www.api.rekonise.com;
location / {
proxy_pass http://localhost:3000/;
proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection 'upgrade';
proxy_set_header Host $host;
proxy_cache_bypass $http_upgrade;
}
listen [::]:443 ssl; # managed by Certbot
listen 443 ssl; # managed by Certbot
ssl_certificate /etc/letsencrypt/live/api.rekonise.com/fullchain.pem; # managed by Certbot
ssl_certificate_key /etc/letsencrypt/live/api.rekonise.com/privkey.pem; # managed by Certbot
include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
}
server {
if ($host = www.api.rekonise.com) {
return 301 https://$host$request_uri;
} # managed by Certbot
if ($host = api.rekonise.com) {
return 301 https://$host$request_uri;
} # managed by Certbot
listen 80;
listen [::]:80;
server_name api.rekonise.com www.api.rekonise.com;
return 404; # managed by Certbot
}

nginx unknown directive return 302

I am trying to do something like this:
https://serverfault.com/questions/562756/how-to-remove-the-path-with-an-nginx-proxy-pass
In my case it is:
server {
listen 8080;
server_name localhost;
location /kibana {
return 301 /kibana/;
} # end location
location /kibana/ {
proxy_pass http://ip:5601/;
proxy_set_header Host address;
auth_basic "Restricted";
auth_basic_user_file /etc/nginx/htpasswd.users;
} # end location
}
But when I start Nginx, I get the following error:
 nginx: [emerg] unknown directive "return 302 /kibana/" in /etc/nginx/nginx.conf:
Has something changed?
nginx -V
nginx version: nginx/1.12.2
built by gcc 4.8.5 20150623 (Red Hat 4.8.5-16) (GCC)
built with OpenSSL 1.0.2k-fips 26 Jan 2017
TLS SNI support enabled
configure arguments: --prefix=/usr/share/nginx --sbin-path=/usr/sbin/nginx --modules-path=/usr/lib64/nginx/modules --conf-path=/etc/nginx/nginx.conf --error-log-path=/var/log/nginx/error.log --http-log-path=/var/log/nginx/access.log --http-client-body-temp-path=/var/lib/nginx/tmp/client_body --http-proxy-temp-path=/var/lib/nginx/tmp/proxy --http-fastcgi-temp-path=/var/lib/nginx/tmp/fastcgi --http-uwsgi-temp-path=/var/lib/nginx/tmp/uwsgi --http-scgi-temp-path=/var/lib/nginx/tmp/scgi --pid-path=/run/nginx.pid --lock-path=/run/lock/subsys/nginx --user=nginx --group=nginx --with-file-aio --with-ipv6 --with-http_auth_request_module --with-http_ssl_module --with-http_v2_module --with-http_realip_module --with-http_addition_module --with-http_xslt_module=dynamic --with-http_image_filter_module=dynamic --with-http_geoip_module=dynamic --with-http_sub_module --with-http_dav_module --with-http_flv_module --with-http_mp4_module --with-http_gunzip_module --with-http_gzip_static_module --with-http_random_index_module --with-http_secure_link_module --with-http_degradation_module --with-http_slice_module --with-http_stub_status_module --with-http_perl_module=dynamic --with-mail=dynamic --with-mail_ssl_module --with-pcre --with-pcre-jit --with-stream=dynamic --with-stream_ssl_module --with-google_perftools_module --with-debug --with-cc-opt='-O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -m64 -mtune=generic' --with-ld-opt='-Wl,-z,relro -specs=/usr/lib/rpm/redhat/redhat-hardened-ld -Wl,-E'
There was an unknowm sign in config.

http2 doesn't work on nginx 1.12 - debian8

I'm setting up http2 on the nginx. The below snippet is my nginx virtual host in sites-available directory:
upstream mysite {
server unix:/home/user/myproject/mysite.sock fail_timeout=0;
}
server {
listen 443 ssl http2 default_server;
listen [::]:443 ssl http2;
server_name www.mysite.com;
ssl on;
ssl_certificate /etc/nginx/ssl/mysite.com.chained.crt;
ssl_certificate_key /etc/nginx/ssl/mysite.com.key;
client_max_body_size 4G;
location = /favicon.ico { access_log off; log_not_found off; }
location /static/ {
root /home/user/myproject;
expires 1d;
}
# access_log /opt/simple_academy/logs/nginx-access.log;
# error_log /opt/simple_academy/logs/nginx-error.log;
location / {
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto https; # <-
proxy_set_header Host $http_host;
proxy_redirect off;
if (!-f $request_filename) {
proxy_pass http://mysite;
break;
}
}
}
The nginx is reverse proxy here and the main webserver is Gunicorn that used for serving Django codes.
When I test the site with Chrome or Firefox inspect elements, it displays all the connections protocol as HTTP1.1.
How can I solve the problem?
Updated
The below is result of nginx -V command:
--prefix=/etc/nginx --sbin-path=/usr/sbin/nginx --modules-path=/usr/lib/nginx/modules --conf-path=/etc/nginx/nginx.conf --error-log-path=/var/log/nginx/error.log --http-log-path=/var/log/nginx/access.log --pid-path=/var/run/nginx.pid --lock-path=/var/run/nginx.lock --http-client-body-temp-path=/var/cache/nginx/client_temp --http-proxy-temp-path=/var/cache/nginx/proxy_temp --http-fastcgi-temp-path=/var/cache/nginx/fastcgi_temp --http-uwsgi-temp-path=/var/cache/nginx/uwsgi_temp --http-scgi-temp-path=/var/cache/nginx/scgi_temp --user=nginx --group=nginx --with-compat --with-file-aio --with-threads --with-http_addition_module --with-http_auth_request_module --with-http_dav_module --with-http_flv_module --with-http_gunzip_module --with-http_gzip_static_module --with-http_mp4_module --with-http_random_index_module --with-http_realip_module --with-http_secure_link_module --with-http_slice_module --with-http_ssl_module --with-http_stub_status_module --with-http_sub_module --with-http_v2_module --with-mail --with-mail_ssl_module --with-stream --with-stream_realip_module --with-stream_ssl_module --with-stream_ssl_preread_module --with-cc-opt='-g -O2 -fstack-protector-strong -Wformat -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -fPIC' --with-ld-opt='-Wl,-z,relro -Wl,-z,now -Wl,--as-needed -pie'

Unable to unwrap data, invalid status CLOSED

Spring-Boot, Vaadin 8 application with vaadin push
#Push(transport = Transport.WEBSOCKET_XHR)
No problem if the application gets user operation without any pause. Few seconds without any user request/operation get following error on the console. This makes our error log file doodle.
Thank you in advance.
Spring-boot, vaadin 8, Nginx, Plesk onyx, ubuntu 16, lets-encrypt
java.io.IOException: Unable to unwrap data, invalid status [CLOSED]
at org.apache.tomcat.util.net.SecureNioChannel.read(SecureNioChannel.java:604)
at org.apache.tomcat.util.net.NioEndpoint$NioSocketWrapper.fillReadBuffer(NioEndpoint.java:1240)
at org.apache.tomcat.util.net.NioEndpoint$NioSocketWrapper.fillReadBuffer(NioEndpoint.java:1213)
at org.apache.tomcat.util.net.NioEndpoint$NioSocketWrapper.read(NioEndpoint.java:1186)
at org.apache.tomcat.websocket.server.WsFrameServer.onDataAvailable(WsFrameServer.java:72)
at org.apache.tomcat.websocket.server.WsFrameServer.doOnDataAvailable(WsFrameServer.java:171)
at org.apache.tomcat.websocket.server.WsFrameServer.notifyDataAvailable(WsFrameServer.java:151)
at org.apache.tomcat.websocket.server.WsHttpUpgradeHandler.upgradeDispatch(WsHttpUpgradeHandler.java:148)
at org.apache.coyote.http11.upgrade.UpgradeProcessorInternal.dispatch(UpgradeProcessorInternal.java:54)
at org.apache.coyote.AbstractProcessorLight.process(AbstractProcessorLight.java:53)
at org.apache.coyote.AbstractProtocol$ConnectionHandler.process(AbstractProtocol.java:868)
at org.apache.tomcat.util.net.NioEndpoint$SocketProcessor.doRun(NioEndpoint.java:1455)
at org.apache.tomcat.util.net.SocketProcessorBase.run(SocketProcessorBase.java:49)
at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)
at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)
at org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run(TaskThread.java:61)
at java.lang.Thread.run(Thread.java:748)
nginx config:
location / {
proxy_pass https://ip:port;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Accel-Internal /internal-nginx-static-location;
access_log off;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
}
spring boot application.properties
server.tomcat.remote_ip_header = x-forwarded-for
server.tomcat.protocol_header = x-forwarded-proto
server.tomcat.port-header = X-Forwarded-Port
server.use-forward-headers = true
in localhost:
java.io.EOFException: null
at org.apache.tomcat.util.net.NioEndpoint$NioSocketWrapper.fillReadBuffer(NioEndpoint.java:1250)
at org.apache.tomcat.util.net.NioEndpoint$NioSocketWrapper.read(NioEndpoint.java:1190)
at org.apache.tomcat.websocket.server.WsFrameServer.onDataAvailable(WsFrameServer.java:72)
at org.apache.tomcat.websocket.server.WsFrameServer.doOnDataAvailable(WsFrameServer.java:171)
at org.apache.tomcat.websocket.server.WsFrameServer.notifyDataAvailable(WsFrameServer.java:151)
at org.apache.tomcat.websocket.server.WsHttpUpgradeHandler.upgradeDispatch(WsHttpUpgradeHandler.java:148)
at org.apache.coyote.http11.upgrade.UpgradeProcessorInternal.dispatch(UpgradeProcessorInternal.java:54)
at org.apache.coyote.AbstractProcessorLight.process(AbstractProcessorLight.java:53)
at org.apache.coyote.AbstractProtocol$ConnectionHandler.process(AbstractProtocol.java:868)
at org.apache.tomcat.util.net.NioEndpoint$SocketProcessor.doRun(NioEndpoint.java:1459)
at org.apache.tomcat.util.net.SocketProcessorBase.run(SocketProcessorBase.java:49)
at java.util.concurrent.ThreadPoolExecutor.runWorker(Unknown Source)
at java.util.concurrent.ThreadPoolExecutor$Worker.run(Unknown Source)
at org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run(TaskThread.java:61)
at java.lang.Thread.run(Unknown Source)
that was bug by vaadin 8 and fixed in 8.4.1. /atmosphere 2.4.24/

nginx location proxy to subdomain

in my setup i do have some subdomains. They are fully configured and working.
For some reasons i need a proxy from my main domain to these sub domains.
eg. I have a sub named subdomain.domain.tdl and i want to pass all from domain.tld/p/subdomain to subdomain.domain.tdl
My config so far:
location / {
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_pass http://localhost:8002;
}
# Proxy to subdomains
location ^/p/(.+)/(.*)$ {
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_pass http://$1.my-example-domain.tld/$2;
}
but this is not working.
All requests to /p/subdomain/index.html are fetched by the node server running on localhost:8002
Can you give me some advice how to route /p/* to $1.my-example-domain/*?
Thanks a lot in advance.
ps
* UPDATE *
This is my -V:
$ nginx -V
nginx version: nginx/1.2.1
TLS SNI support enabled
configure arguments:
--prefix=/etc/nginx
--conf-path=/etc/nginx/nginx.conf
--error-log-path=/var/log/nginx/error.log
--http-client-body-temp-path=/var/lib/nginx/body
--http-fastcgi-temp-path=/var/lib/nginx/fastcgi
--http-log-path=/var/log/nginx/access.log
--http-proxy-temp-path=/var/lib/nginx/proxy
--http-scgi-temp-path=/var/lib/nginx/scgi
--http-uwsgi-temp-path=/var/lib/nginx/uwsgi
--lock-path=/var/lock/nginx.lock
--pid-path=/var/run/nginx.pid
--with-pcre-jit
--with-debug
--with-http_addition_module
--with-http_dav_module
--with-http_geoip_module
--with-http_gzip_static_module
--with-http_image_filter_module
--with-http_realip_module
--with-http_stub_status_module
--with-http_ssl_module
--with-http_sub_module
--with-http_xslt_module
--with-ipv6
--with-sha1=/usr/include/openssl
--with-md5=/usr/include/openssl
--with-mail
--with-mail_ssl_module
--add-module=/tmp/buildd/nginx-1.2.1/debian/modules/nginx-auth-pam
--add-module=/tmp/buildd/nginx-1.2.1/debian/modules/nginx-echo
--add-module=/tmp/buildd/nginx-1.2.1/debian/modules/nginx-upstream-fair
--add-module=/tmp/buildd/nginx-1.2.1/debian/modules/nginx-dav-ext-module
Thanks to SuddenHead, this works:
location ~ ^/p/(.+?)/(.*)$ {
resolver 8.8.8.8;
proxy_set_header X-Real-IP $remote_addr;
proxy_pass http://$1.domain.tld/$2;
}
i had to remove the host header and add a resolver.

Resources