Skip to content

Instantly share code, notes, and snippets.

@jasonm

jasonm/00-README.md

Last active February 7, 2018 07:19
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save jasonm/680fbe1d583c9084b8373dbc14097ca4 to your computer and use it in GitHub Desktop.
Save jasonm/680fbe1d583c9084b8373dbc14097ca4 to your computer and use it in GitHub Desktop.
Download ZIP
Salesforce API TLS "Verify return code: 20 (unable to get local issuer certificate)"
Raw
00-README.md

Starting at Tue 2018-02-06 6:23pmPT we noticed a regular background job which connects to the Salesforce Bulk API via Python client started failing with the following message:

SSLHandshakeError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:661)

I am able to reproduce the failure to verify (and therefore connect to the API) from outside Python, using the openssl s_client command.

I can successfully connect from a macOS 10.11.6 client, and can confirm the failure from a variety of Ubuntu instances. Tried a variety of existing AWS instances, as well as a fresh Docker container on Ubuntu 16.04 from my local laptop. See the following two scripts demonstrating a successful connect/verify on macOS and failure to connect/verify on Ubuntu.

We deployed no code/OS changes at this time. Connections to the API had been succeeding after our most recent deploy, prior to Tue 2018-02-06 6:23pmPT.

The full Python stacktrace:

Traceback (most recent call last):
1 File "/opt/pyenv/versions/schools/lib/python2.7/site-packages/celery/app/trace.py" line 240 in trace_task
    R = retval = fun(*args, **kwargs)

2 File "/opt/pyenv/versions/2.7.13/envs/schools/lib/python2.7/site-packages/newrelic-2.60.0.46/newrelic/hooks/application_celery.py" line 66 in wrapper
    return wrapped(*args, **kwargs)

3 File "/opt/pyenv/versions/schools/lib/python2.7/site-packages/celery/app/trace.py" line 438 in __protected_call__
    return self.run(*args, **kwargs)

4 File "/home/ubuntu/schools/apps/sf/tasks.py", line 25 in sweep_pending_salesforce_sync_requests
    process_pending_salesforce_sync_requests()

5 File "/home/ubuntu/schools/apps/sf/batch_service.py", line 204 in process_pending_salesforce_sync_requests
    job = bulk_api.create_update_job(sfdc_object_type, contentType='CSV')

6 File "/opt/pyenv/versions/schools/lib/python2.7/site-packages/salesforce_bulk/salesforce_bulk.py" line 117 in create_update_job
    return self.create_job(object_name, "update", **kwargs)

7 File "/opt/pyenv/versions/schools/lib/python2.7/site-packages/salesforce_bulk/salesforce_bulk.py" line 137 in create_job
    body=doc)

8 File "/opt/pyenv/versions/2.7.13/envs/schools/lib/python2.7/site-packages/newrelic-2.60.0.46/newrelic/api/external_trace.py" line 124 in dynamic_wrapper
    return wrapped(*args, **kwargs)

9 File "/opt/pyenv/versions/schools/lib/python2.7/site-packages/httplib2/__init__.py" line 1570 in request
    '(response, content) = self._request(conn, autho..., method, body, headers, redirections, cachekey)'

10 File "/opt/pyenv/versions/schools/lib/python2.7/site-packages/httplib2/__init__.py" line 1317 in _request
    (response, content) = self._conn_request(conn, request_uri, method, body, headers)

11 File "/opt/pyenv/versions/schools/lib/python2.7/site-packages/httplib2/__init__.py" line 1252 in _conn_request
    conn.connect()

12 File "/opt/pyenv/versions/2.7.13/envs/schools/lib/python2.7/site-packages/newrelic-2.60.0.46/newrelic/api/external_trace.py" line 124 in dynamic_wrapper
    return wrapped(*args, **kwargs)

13 File "/opt/pyenv/versions/schools/lib/python2.7/site-packages/httplib2/__init__.py" line 1044 in connect
    raise SSLHandshakeError(e)

SSLHandshakeError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:661)

The salesforce_bulk.py referenced is the Heroku salesforce-bulk library 1.1.0: https://github.com/heroku/salesforce-bulk/blob/1.1.0/salesforce_bulk/salesforce_bulk.py#L137

Raw
01-macos-success.sh
$ uname -a
Darwin Jasons-MacBook-Pro-2.local 15.6.0 Darwin Kernel Version 15.6.0: Mon Nov 13 21:58:35 PST 2017; root:xnu-3248.72.11~1/RELEASE_X86_64 x86_64
$ openssl s_client -connect na56.salesforce.com:443
CONNECTED(00000003)
depth=1 /C=US/O=DigiCert Inc/CN=DigiCert SHA2 Secure Server CA
verify error:num=20:unable to get local issuer certificate
verify return:0
---
Certificate chain
0 s:/C=US/ST=California/L=San Francisco/O=salesforce.com, inc./OU=InfraSec/CN=*.salesforce.com
i:/C=US/O=DigiCert Inc/CN=DigiCert SHA2 Secure Server CA
1 s:/C=US/O=DigiCert Inc/CN=DigiCert SHA2 Secure Server CA
i:/C=US/O=DigiCert Inc/OU=www.digicert.com/CN=DigiCert Global Root CA
---
Server certificate
-----BEGIN CERTIFICATE-----
MIIHMDCCBhigAwIBAgIQAeAsgZd8oRgJg4Lffi7JazANBgkqhkiG9w0BAQsFADBN
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMScwJQYDVQQDEx5E
aWdpQ2VydCBTSEEyIFNlY3VyZSBTZXJ2ZXIgQ0EwHhcNMTcxMjAzMDAwMDAwWhcN
MjAxMjAyMTIwMDAwWjCBhzELMAkGA1UEBhMCVVMxEzARBgNVBAgTCkNhbGlmb3Ju
aWExFjAUBgNVBAcTDVNhbiBGcmFuY2lzY28xHTAbBgNVBAoTFHNhbGVzZm9yY2Uu
Y29tLCBpbmMuMREwDwYDVQQLEwhJbmZyYVNlYzEZMBcGA1UEAwwQKi5zYWxlc2Zv
cmNlLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAN2pX3c3xax5
ZCaViUrbqbvLsRTmy1durANsLvOg7nR+7F75twn9AjgLpOQbm2dlVu/SIiMg2qQo
GIkJK6WvnQGnHCeJg+HWiuZkqPKhvz7h6JUgl1Ws4q68ANrFTcUWx1SnkeaUiTMZ
DMwz/lzOELYpmKfDmV6Z29Z7VJA0wrrDvfb62G/qIj3xmX2VqqB75fIU8DIpCvDS
4Z5nTa1rqtir3Fcs6sVbatav9wJPVVtLMeZESllbkX00TU8Hm7pZRY6W4oj8luof
F1iwqN4lyYSw/LNxxBKRC9dNjKyjgVgK2mA+GVovj/3NuX72UuaXtfJsxtwT8eQy
47eCtQIVfVcCAwEAAaOCA88wggPLMB8GA1UdIwQYMBaAFA+AYRyCMWHVLyjnjUY4
tCzhxtniMB0GA1UdDgQWBBQZdWCBO9XLkcvazNAWR7Eaj8UQkjAbBgNVHREEFDAS
ghAqLnNhbGVzZm9yY2UuY29tMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggr
BgEFBQcDAQYIKwYBBQUHAwIwawYDVR0fBGQwYjAvoC2gK4YpaHR0cDovL2NybDMu
ZGlnaWNlcnQuY29tL3NzY2Etc2hhMi1nNi5jcmwwL6AtoCuGKWh0dHA6Ly9jcmw0
LmRpZ2ljZXJ0LmNvbS9zc2NhLXNoYTItZzYuY3JsMEwGA1UdIARFMEMwNwYJYIZI
AYb9bAEBMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8vd3d3LmRpZ2ljZXJ0LmNvbS9D
UFMwCAYGZ4EMAQICMHwGCCsGAQUFBwEBBHAwbjAkBggrBgEFBQcwAYYYaHR0cDov
L29jc3AuZGlnaWNlcnQuY29tMEYGCCsGAQUFBzAChjpodHRwOi8vY2FjZXJ0cy5k
aWdpY2VydC5jb20vRGlnaUNlcnRTSEEyU2VjdXJlU2VydmVyQ0EuY3J0MAkGA1Ud
EwQCMAAwggH3BgorBgEEAdZ5AgQCBIIB5wSCAeMB4QB2AKS5CZC0GFgUh7sTosxn
cAo8NZgE+RvfuON3zQ7IDdwQAAABYB6vPx8AAAQDAEcwRQIgQPfp/tH1YGXDwKFi
mIvm5SRv5RMioSdJiLK6Ih8WLacCIQDqMykA2CcbFw83YyhuZoC7clkyh/YSQWQv
EowrV96cBQB2AId1v+dZfPiMQ5lfvfNu/1aNR1Y2/0q1YMG06v9eoIMPAAABYB6v
P9AAAAQDAEcwRQIhAKYEv6RBCl5JtUA47xdwB8QiTMPkzFm1xzAu05/8qqBBAiAG
qurywjLh6bFYw4MEDuxZImyMTrwqqz5WUzrDcRyf0AB2ALvZ37wfinG1k5Qjl6qS
e0c4V5UKq1LoGpCWZDaOHtGFAAABYB6vP7MAAAQDAEcwRQIgWL6ZbzeKriPhfupA
KpTtsZvT+g3t6GZu/OHzHn41578CIQDB/uETaMAkca96GvaIDuC6hfkEetAmAavs
RoSc0P+hVwB3AG9Tdqwx8DEZ2JkApFEV/3cVHBHZAsEAKQaNsgiaN9kTAAABYB6v
Qd8AAAQDAEgwRgIhAOSdjtDs6uifFxH4jZJAJyvoVxq7vwtO3WOofMi1ONbTAiEA
hximSSrcX56x1+Z9njoTEQGQPW9OCIh2CPmVGtYHQT8wDQYJKoZIhvcNAQELBQAD
ggEBAKzjBVr5t2Rsw3DzeWHIQmZOfLo6I4YcOd65Zmxvpo/PN785IuIPFd19Lpoq
WuvzMJWGfei0vktZclOWtyNXBM2MjP7JU88kkCjE4n52dOEq3CcabsRk2+B0Rle4
OSgZn6GRAqD7MfmD1MfoPN5Z2YA6i4AhxC7gGJfKaWohZUYxNsUrClJqiEuspBvR
9FgfYMkrZP651PXtiEe98uHSIV99OaXdgcGIuZHoly5v5HoZbEnJ/VCKDQPR/FE/
PAcHPoU/o0YUPM11C5UqqdecTV8HCrHlvsIy767p4HhbTIpJWBnYdc2gpl75qKhl
6jNqAGuEOJVni+2DjPVhEHMD2g0=
-----END CERTIFICATE-----
subject=/C=US/ST=California/L=San Francisco/O=salesforce.com, inc./OU=InfraSec/CN=*.salesforce.com
issuer=/C=US/O=DigiCert Inc/CN=DigiCert SHA2 Secure Server CA
---
No client certificate CA names sent
---
SSL handshake has read 3192 bytes and written 456 bytes
---
New, TLSv1/SSLv3, Cipher is AES256-SHA
Server public key is 2048 bit
Secure Renegotiation IS supported
Compression: NONE
Expansion: NONE
SSL-Session:
Protocol : TLSv1
Cipher : AES256-SHA
Session-ID: 2B531F0FF198164C43516194937D3CCFFFB8BF29D3AECC4E0D1220CAA96A65F8
Session-ID-ctx:
Master-Key: B447D2FCE6A616B2B8B95AB0CF62B315CBA74ED048A229B13AAE61D2822AC14EC3282189AF27AB696653ED3C901D2230
Key-Arg : None
Start Time: 1517987220
Timeout : 300 (sec)
Verify return code: 0 (ok)
---
Raw
02-ubuntu1604-failure.sh
$ docker run -it ubuntu:16.04 bash -c "uname -a && apt-get update && apt-get install -y openssl && openssl s_client -connect na56.salesforce.com:443"
Linux 4b7aa74500ef 4.9.60-linuxkit-aufs #1 SMP Mon Nov 6 16:00:12 UTC 2017 x86_64 x86_64 x86_64 GNU/Linux
Get:1 http://security.ubuntu.com/ubuntu xenial-security InRelease [102 kB]
Get:2 http://archive.ubuntu.com/ubuntu xenial InRelease [247 kB]
Get:3 http://security.ubuntu.com/ubuntu xenial-security/universe Sources [58.3 kB]
Get:4 http://security.ubuntu.com/ubuntu xenial-security/main amd64 Packages [553 kB]
Get:5 http://security.ubuntu.com/ubuntu xenial-security/restricted amd64 Packages [12.7 kB]
Get:6 http://security.ubuntu.com/ubuntu xenial-security/universe amd64 Packages [253 kB]
Get:7 http://security.ubuntu.com/ubuntu xenial-security/multiverse amd64 Packages [3486 B]
Get:8 http://archive.ubuntu.com/ubuntu xenial-updates InRelease [102 kB]
Get:9 http://archive.ubuntu.com/ubuntu xenial-backports InRelease [102 kB]
Get:10 http://archive.ubuntu.com/ubuntu xenial/universe Sources [9802 kB]
Get:11 http://archive.ubuntu.com/ubuntu xenial/main amd64 Packages [1558 kB]
Get:12 http://archive.ubuntu.com/ubuntu xenial/restricted amd64 Packages [14.1 kB]
Get:13 http://archive.ubuntu.com/ubuntu xenial/universe amd64 Packages [9827 kB]
Get:14 http://archive.ubuntu.com/ubuntu xenial/multiverse amd64 Packages [176 kB]
Get:15 http://archive.ubuntu.com/ubuntu xenial-updates/universe Sources [239 kB]
Get:16 http://archive.ubuntu.com/ubuntu xenial-updates/main amd64 Packages [922 kB]
Get:17 http://archive.ubuntu.com/ubuntu xenial-updates/restricted amd64 Packages [13.1 kB]
Get:18 http://archive.ubuntu.com/ubuntu xenial-updates/universe amd64 Packages [747 kB]
Get:19 http://archive.ubuntu.com/ubuntu xenial-updates/multiverse amd64 Packages [18.5 kB]
Get:20 http://archive.ubuntu.com/ubuntu xenial-backports/main amd64 Packages [5162 B]
Get:21 http://archive.ubuntu.com/ubuntu xenial-backports/universe amd64 Packages [7179 B]
Fetched 24.8 MB in 5s (4501 kB/s)
Reading package lists... Done
Reading package lists... Done
Building dependency tree
Reading state information... Done
The following additional packages will be installed:
libssl1.0.0
Suggested packages:
ca-certificates
The following NEW packages will be installed:
libssl1.0.0 openssl
0 upgraded, 2 newly installed, 0 to remove and 6 not upgraded.
Need to get 1575 kB of archives.
After this operation, 4440 kB of additional disk space will be used.
Get:1 http://archive.ubuntu.com/ubuntu xenial-updates/main amd64 libssl1.0.0 amd64 1.0.2g-1ubuntu4.10 [1083 kB]
Get:2 http://archive.ubuntu.com/ubuntu xenial-updates/main amd64 openssl amd64 1.0.2g-1ubuntu4.10 [492 kB]
Fetched 1575 kB in 1s (887 kB/s)
debconf: delaying package configuration, since apt-utils is not installed
Selecting previously unselected package libssl1.0.0:amd64.
(Reading database ... 4768 files and directories currently installed.)
Preparing to unpack .../libssl1.0.0_1.0.2g-1ubuntu4.10_amd64.deb ...
Unpacking libssl1.0.0:amd64 (1.0.2g-1ubuntu4.10) ...
Selecting previously unselected package openssl.
Preparing to unpack .../openssl_1.0.2g-1ubuntu4.10_amd64.deb ...
Unpacking openssl (1.0.2g-1ubuntu4.10) ...
Processing triggers for libc-bin (2.23-0ubuntu10) ...
Setting up libssl1.0.0:amd64 (1.0.2g-1ubuntu4.10) ...
debconf: unable to initialize frontend: Dialog
debconf: (No usable dialog-like program is installed, so the dialog based frontend cannot be used. at /usr/share/perl5/Debconf/FrontEnd/Dialog.pm line 76.)
debconf: falling back to frontend: Readline
debconf: unable to initialize frontend: Readline
debconf: (Can't locate Term/ReadLine.pm in @INC (you may need to install the Term::ReadLine module) (@INC contains: /etc/perl /usr/local/lib/x86_64-linux-gnu/perl/5.22.1 /usr/local/share/perl/5.22.1 /usr/lib/x86_64-linux-gnu/perl5/5.22 /usr/share/perl5 /usr/lib/x86_64-linux-gnu/perl/5.22 /usr/share/perl/5.22 /usr/local/lib/site_perl /usr/lib/x86_64-linux-gnu/perl-base .) at /usr/share/perl5/Debconf/FrontEnd/Readline.pm line 7.)
debconf: falling back to frontend: Teletype
Setting up openssl (1.0.2g-1ubuntu4.10) ...
Processing triggers for libc-bin (2.23-0ubuntu10) ...
CONNECTED(00000003)
depth=1 C = US, O = DigiCert Inc, CN = DigiCert SHA2 Secure Server CA
verify error:num=20:unable to get local issuer certificate
---
Certificate chain
0 s:/C=US/ST=California/L=San Francisco/O=salesforce.com, inc./OU=InfraSec/CN=*.salesforce.com
i:/C=US/O=DigiCert Inc/CN=DigiCert SHA2 Secure Server CA
1 s:/C=US/O=DigiCert Inc/CN=DigiCert SHA2 Secure Server CA
i:/C=US/O=DigiCert Inc/OU=www.digicert.com/CN=DigiCert Global Root CA
---
Server certificate
-----BEGIN CERTIFICATE-----
MIIHMDCCBhigAwIBAgIQAeAsgZd8oRgJg4Lffi7JazANBgkqhkiG9w0BAQsFADBN
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMScwJQYDVQQDEx5E
aWdpQ2VydCBTSEEyIFNlY3VyZSBTZXJ2ZXIgQ0EwHhcNMTcxMjAzMDAwMDAwWhcN
MjAxMjAyMTIwMDAwWjCBhzELMAkGA1UEBhMCVVMxEzARBgNVBAgTCkNhbGlmb3Ju
aWExFjAUBgNVBAcTDVNhbiBGcmFuY2lzY28xHTAbBgNVBAoTFHNhbGVzZm9yY2Uu
Y29tLCBpbmMuMREwDwYDVQQLEwhJbmZyYVNlYzEZMBcGA1UEAwwQKi5zYWxlc2Zv
cmNlLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAN2pX3c3xax5
ZCaViUrbqbvLsRTmy1durANsLvOg7nR+7F75twn9AjgLpOQbm2dlVu/SIiMg2qQo
GIkJK6WvnQGnHCeJg+HWiuZkqPKhvz7h6JUgl1Ws4q68ANrFTcUWx1SnkeaUiTMZ
DMwz/lzOELYpmKfDmV6Z29Z7VJA0wrrDvfb62G/qIj3xmX2VqqB75fIU8DIpCvDS
4Z5nTa1rqtir3Fcs6sVbatav9wJPVVtLMeZESllbkX00TU8Hm7pZRY6W4oj8luof
F1iwqN4lyYSw/LNxxBKRC9dNjKyjgVgK2mA+GVovj/3NuX72UuaXtfJsxtwT8eQy
47eCtQIVfVcCAwEAAaOCA88wggPLMB8GA1UdIwQYMBaAFA+AYRyCMWHVLyjnjUY4
tCzhxtniMB0GA1UdDgQWBBQZdWCBO9XLkcvazNAWR7Eaj8UQkjAbBgNVHREEFDAS
ghAqLnNhbGVzZm9yY2UuY29tMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggr
BgEFBQcDAQYIKwYBBQUHAwIwawYDVR0fBGQwYjAvoC2gK4YpaHR0cDovL2NybDMu
ZGlnaWNlcnQuY29tL3NzY2Etc2hhMi1nNi5jcmwwL6AtoCuGKWh0dHA6Ly9jcmw0
LmRpZ2ljZXJ0LmNvbS9zc2NhLXNoYTItZzYuY3JsMEwGA1UdIARFMEMwNwYJYIZI
AYb9bAEBMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8vd3d3LmRpZ2ljZXJ0LmNvbS9D
UFMwCAYGZ4EMAQICMHwGCCsGAQUFBwEBBHAwbjAkBggrBgEFBQcwAYYYaHR0cDov
L29jc3AuZGlnaWNlcnQuY29tMEYGCCsGAQUFBzAChjpodHRwOi8vY2FjZXJ0cy5k
aWdpY2VydC5jb20vRGlnaUNlcnRTSEEyU2VjdXJlU2VydmVyQ0EuY3J0MAkGA1Ud
EwQCMAAwggH3BgorBgEEAdZ5AgQCBIIB5wSCAeMB4QB2AKS5CZC0GFgUh7sTosxn
cAo8NZgE+RvfuON3zQ7IDdwQAAABYB6vPx8AAAQDAEcwRQIgQPfp/tH1YGXDwKFi
mIvm5SRv5RMioSdJiLK6Ih8WLacCIQDqMykA2CcbFw83YyhuZoC7clkyh/YSQWQv
EowrV96cBQB2AId1v+dZfPiMQ5lfvfNu/1aNR1Y2/0q1YMG06v9eoIMPAAABYB6v
P9AAAAQDAEcwRQIhAKYEv6RBCl5JtUA47xdwB8QiTMPkzFm1xzAu05/8qqBBAiAG
qurywjLh6bFYw4MEDuxZImyMTrwqqz5WUzrDcRyf0AB2ALvZ37wfinG1k5Qjl6qS
e0c4V5UKq1LoGpCWZDaOHtGFAAABYB6vP7MAAAQDAEcwRQIgWL6ZbzeKriPhfupA
KpTtsZvT+g3t6GZu/OHzHn41578CIQDB/uETaMAkca96GvaIDuC6hfkEetAmAavs
RoSc0P+hVwB3AG9Tdqwx8DEZ2JkApFEV/3cVHBHZAsEAKQaNsgiaN9kTAAABYB6v
Qd8AAAQDAEgwRgIhAOSdjtDs6uifFxH4jZJAJyvoVxq7vwtO3WOofMi1ONbTAiEA
hximSSrcX56x1+Z9njoTEQGQPW9OCIh2CPmVGtYHQT8wDQYJKoZIhvcNAQELBQAD
ggEBAKzjBVr5t2Rsw3DzeWHIQmZOfLo6I4YcOd65Zmxvpo/PN785IuIPFd19Lpoq
WuvzMJWGfei0vktZclOWtyNXBM2MjP7JU88kkCjE4n52dOEq3CcabsRk2+B0Rle4
OSgZn6GRAqD7MfmD1MfoPN5Z2YA6i4AhxC7gGJfKaWohZUYxNsUrClJqiEuspBvR
9FgfYMkrZP651PXtiEe98uHSIV99OaXdgcGIuZHoly5v5HoZbEnJ/VCKDQPR/FE/
PAcHPoU/o0YUPM11C5UqqdecTV8HCrHlvsIy767p4HhbTIpJWBnYdc2gpl75qKhl
6jNqAGuEOJVni+2DjPVhEHMD2g0=
-----END CERTIFICATE-----
subject=/C=US/ST=California/L=San Francisco/O=salesforce.com, inc./OU=InfraSec/CN=*.salesforce.com
issuer=/C=US/O=DigiCert Inc/CN=DigiCert SHA2 Secure Server CA
---
No client certificate CA names sent
Peer signing digest: SHA1
Server Temp Key: ECDH, P-256, 256 bits
---
SSL handshake has read 3536 bytes and written 431 bytes
---
New, TLSv1/SSLv3, Cipher is ECDHE-RSA-AES256-GCM-SHA384
Server public key is 2048 bit
Secure Renegotiation IS supported
Compression: NONE
Expansion: NONE
No ALPN negotiated
SSL-Session:
Protocol : TLSv1.2
Cipher : ECDHE-RSA-AES256-GCM-SHA384
Session-ID: 2705052A92CF2A6C9B0FF74E2A56E19F269AFA36E87B64633C1DB7FE292E23BA
Session-ID-ctx:
Master-Key: 61B7EE0B4A5669E69153E4BC984F866CC62CE7E786A76E207BCD7847AB6ADA943A42712B783BE1DBFC3112247D0BDE87
Key-Arg : None
PSK identity: None
PSK identity hint: None
SRP username: None
Start Time: 1517987245
Timeout : 300 (sec)
Verify return code: 20 (unable to get local issuer certificate)
---
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment