NGINX errors. SSL Routines TLSv1 Alert Protocol Version. ssl alert number 70

N

Got gateway 502 error on AlmaLinux 8 server with nginx+apache. The logs were filled with lines like this:

[error] 1387293#0: *28 SSL_do_handshake() failed (SSL: error:0A00042E:SSL routine::tlsv1 alert protocol version:SSL alert number 70) while doing handshake on SSL upstream, client: 2.3.4.5, server: web. example.com, request: “GET/HTTP/2.0”, upstream: “host: “web.example.com”

possible solution

Solution for Directadmin Server

  • Update file: /etc/nginx/nginx-defaults.conf

Servers without DirectAdmin may have other files that you can update.

Anyway you need to add the following lines to Nginx configuration:

proxy_ssl_protocols TLSv1.2 TLSv1.3;
proxy_ssl_ciphers DEFAULT;

And restart the webserver.

I hope it helps.

Add comment

By Ranjan