Comments (6)
ADD-SP
commented on September 25, 2024
https://docs.konghq.com/gateway/changelog/#3600
In OpenSSL 3.2, the default SSL/TLS security level has been changed from 1 to 2. This means the security level is set to 112 bits of security. As a result, the following are prohibited:
RSA, DSA, and DH keys shorter than 2048 bits
ECC keys shorter than 224 bits
Any cipher suite using RC4
SSL version 3 Additionally, compression is disabled.
Bumped OpenSSL from 3.1.4 to 3.2.1 #12264
@salyh Thanks for your report. Could you please check the TLS settings of your Postgres database? This issue might be caused by the behavior changes of OpenSSL.
from kong.
weberpatr
commented on September 25, 2024
seems to be the same issue as #12702
from kong.
ADD-SP
commented on September 25, 2024
Thanks to @weberpatr. @fffonion Any update on this issue?
from kong.
jeremyjpj0916
commented on September 25, 2024
Seems 3.7.x is imminent to fix the postgres TLS issues, see here for a possible workaround too:
#12702 (comment)
from kong.
Water-Melon
commented on September 25, 2024
It's fixed in 3.7, please refer to #12592.
from kong.
weberpatr
commented on September 25, 2024
can confirm the issue is solved after updating to 3.7
thanks a lot!
from kong.
Related Issues (20)
- File named `api.lua` in the custom lua plugin directory causes 500 API Admin errors for kong manager HOT 4
- The available memory of the Kong machine suddenly dropped from 18G to 6.12G HOT 5
- Passive health checks not behaving as expected. HOT 19
- Kong opensource installation HOT 3
- rate-limiting error Redis timeout HOT 15
- bootstrap failure inside the container: migrations.lua:212: [PostgreSQL error] failed to retrieve PostgreSQL server_version_num: connection refused HOT 15
- abnormal route occurred on the kong upstream HOT 6
- Kong to backend FastAPI service: 405 Method Not Allowed HOT 6
- Building kong deb package failed behind proxy for version3.5.0 and above HOT 6
- Kong Gateway API with 104 Connection reset by peer message to OpenShift IngressController HOT 6
- How to store config info in kong HOT 3
- Strings in luajit are infinitely bloated, even if they are not rereferenced in the lua vm HOT 1
- Strings in luajit are infinitely bloated, even if they are not rereferenced in the lua vm HOT 3
- Kong 3.7.1 Exponential memory growth over time. HOT 16
- Failure to enable openid-connect plugin HOT 4
- Kong DP keep restarting HOT 3
- Error occurs on endpoints when `tags` parameter is empty HOT 1
- Postgres read/write primary node seeming timeouts led to runtime traffic failures on existing runtime proxies HOT 2
- ip address based rate-limiting does not use real client ip address but last proxy ip address HOT 3
- [healthchecks] failed setting peer status (upstream: 7b069e34-9542-48cb-8a16-15eb144a3e5d:rest-service-upstream): not a known address, context: ngx.timer HOT 6
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from kong.