Unable to access ONTAP S3 server using HTTPS due to TLS/SSL handshake failure when using PFS suites
Applies to
- ONTAP 9
- S3 Server access using HTTPS
Issue
- Unable to access ONTAP S3 Server using HTTPS
- TLS/SSL handshake fails:
openssl s_client -connect <FQDN_OR_IP>:443
CONNECTED(00000003)
write:errno=104
curl <FQDN_OR_IP> -k
curl: (35) Cannot communicate securely with peer: no common encryption algorithm(s).
Or:
LC_TIME=en_US date && curl -v <FQDN_OR_IP> --insecure ; LC_TIME=en_US date
Fri Mar 24 14:38:55 CET 2023
* Trying <ONTAP_S3_IP>:443...
* Connected to <FQDN_OR_IP> (<ONTAP_S3_IP>) port 443 (#0)
* ALPN: offers h2
* ALPN: offers http/1.1
* (304) (OUT), TLS handshake, Client hello (1):
* error:1404B410:SSL routines:ST_CONNECT:sslv3 alert handshake failure
* Closing connection 0
curl: (35) error:1404B410:SSL routines:ST_CONNECT:sslv3 alert handshake failure
Fri Mar 24 14:38:55 CET 2023