{"action":"created","issue":{"url":"https://api.github.com/repos/istio/istio/issues/7009","repository_url":"https://api.github.com/repos/istio/istio","labels_url":"https://api.github.com/repos/istio/istio/issues/7009/labels{/name}","comments_url":"https://api.github.com/repos/istio/istio/issues/7009/comments","events_url":"https://api.github.com/repos/istio/istio/issues/7009/events","html_url":"https://github.com/istio/istio/issues/7009","id":340277482,"node_id":"MDU6SXNzdWUzNDAyNzc0ODI=","number":7009,"title":"SSL received a record that exceeded the maximum permissible length","user":{"login":"wjwinner","id":18672640,"node_id":"MDQ6VXNlcjE4NjcyNjQw","avatar_url":"https://avatars1.githubusercontent.com/u/18672640?v=4","gravatar_id":"","url":"https://api.github.com/users/wjwinner","html_url":"https://github.com/wjwinner","followers_url":"https://api.github.com/users/wjwinner/followers","following_url":"https://api.github.com/users/wjwinner/following{/other_user}","gists_url":"https://api.github.com/users/wjwinner/gists{/gist_id}","starred_url":"https://api.github.com/users/wjwinner/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/wjwinner/subscriptions","organizations_url":"https://api.github.com/users/wjwinner/orgs","repos_url":"https://api.github.com/users/wjwinner/repos","events_url":"https://api.github.com/users/wjwinner/events{/privacy}","received_events_url":"https://api.github.com/users/wjwinner/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":1,"created_at":"2018-07-11T14:50:27Z","updated_at":"2018-07-12T14:17:28Z","closed_at":null,"author_association":"NONE","body":"**Describe the bug**\r\nA clear and concise description of what the bug is.\r\n\r\n**Expected behavior**\r\nA clear and concise description of what you expected to happen.\r\n\r\n**Steps to reproduce the bug**\r\n```yaml\r\napiVersion: networking.istio.io/v1alpha3\r\nkind: Gateway\r\n  name: gateway\r\n  namespace: default\r\nspec:\r\n  selector:\r\n    istio: ingressgateway\r\n  servers:\r\n  - hosts:\r\n    - '*.test.com'\r\n    port:\r\n      name: http\r\n      number: 80\r\n      protocol: HTTP\r\n  - hosts:\r\n    - demo.test.com\r\n    port:\r\n      name: https\r\n      number: 443\r\n      protocol: HTTPS\r\n    tls:\r\n      mode: SIMPLE\r\n      privateKey: /etc/istio/ingressgateway-certs/tls.key\r\n      serverCertificate: /etc/istio/ingressgateway-certs/tls.crt\r\n---\r\napiVersion: networking.istio.io/v1alpha3\r\nkind: VirtualService\r\nmetadata:\r\n  name: demo-echo-deploy\r\n  namespace: mynamespace\r\nspec:\r\n  gateways:\r\n  - gateway.default.svc.cluster.local\r\n  hosts:\r\n  - demo.test.com\r\n  http:\r\n  - route:\r\n    - destination:\r\n        host: demo-echo-deploy\r\n        port:\r\n          number: 8080\r\n---\r\napiVersion: v1\r\nkind: Service\r\nmetadata:\r\n  name: demo-echo-deploy\r\n  namespace: mynamespace\r\nspec:\r\n  ports:\r\n  - name: http-8080\r\n    port: 8080\r\n    protocol: TCP\r\n    targetPort: 8080\r\n  selector:\r\n    app: demo-echo\r\n    reference: demo-echo-deploy\r\n```\r\n\r\n```bash\r\n[root@host01 /tmp/tls]# curl -v 'https://demo.test.com'\r\n* About to connect() to demo.test.com port 443 (#0)\r\n*   Trying 10.233.32.89...\r\n* Connected to demo.test.com (10.233.32.89) port 443 (#0)\r\n* Initializing NSS with certpath: sql:/etc/pki/nssdb\r\n*   CAfile: /etc/pki/tls/certs/ca-bundle.crt\r\n  CApath: none\r\n* NSS error -12263 (SSL_ERROR_RX_RECORD_TOO_LONG)\r\n* SSL received a record that exceeded the maximum permissible length.\r\n* Closing connection 0\r\ncurl: (35) SSL received a record that exceeded the maximum permissible length.\r\n```\r\n\r\n**Version**\r\nistio 1.0\r\n \r\n**Is Istio Auth enabled or not?**\r\nno\r\n\r\n"},"comment":{"url":"https://api.github.com/repos/istio/istio/issues/comments/404527965","html_url":"https://github.com/istio/istio/issues/7009#issuecomment-404527965","issue_url":"https://api.github.com/repos/istio/istio/issues/7009","id":404527965,"node_id":"MDEyOklzc3VlQ29tbWVudDQwNDUyNzk2NQ==","user":{"login":"vadimeisenbergibm","id":16784982,"node_id":"MDQ6VXNlcjE2Nzg0OTgy","avatar_url":"https://avatars1.githubusercontent.com/u/16784982?v=4","gravatar_id":"","url":"https://api.github.com/users/vadimeisenbergibm","html_url":"https://github.com/vadimeisenbergibm","followers_url":"https://api.github.com/users/vadimeisenbergibm/followers","following_url":"https://api.github.com/users/vadimeisenbergibm/following{/other_user}","gists_url":"https://api.github.com/users/vadimeisenbergibm/gists{/gist_id}","starred_url":"https://api.github.com/users/vadimeisenbergibm/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/vadimeisenbergibm/subscriptions","organizations_url":"https://api.github.com/users/vadimeisenbergibm/orgs","repos_url":"https://api.github.com/users/vadimeisenbergibm/repos","events_url":"https://api.github.com/users/vadimeisenbergibm/events{/privacy}","received_events_url":"https://api.github.com/users/vadimeisenbergibm/received_events","type":"User","site_admin":false},"created_at":"2018-07-12T14:17:28Z","updated_at":"2018-07-12T14:17:28Z","author_association":"MEMBER","body":"@wjwinner Could you please follow the steps in https://preliminary.istio.io/docs/tasks/traffic-management/secure-ingress/#troubleshooting ?"}}
{"actor":{"display_login":"vadimeisenbergibm"}}