some machines some machines can’t. SSL_ERROR_SYSCALL
I have configured the Proxy and used Origin Server SSL.
Where the first machine can run api but second machine can’t run api which both machines use different isp company.
Found that there were people having the same problem. But after that, the problem disappeared by itself for unknown reasons.
Some of the information says it’s because there is a direct connection to the Server, but here I use a set Proxied.
The first device can use the link.
lionants02@DESKTOP-7D90V9V:/mnt/c/Users/maxza$ nslookup tele-api.hii.in.th
Server: 172.30.192.1
Address: 172.30.192.1#53
Non-authoritative answer:
Name: tele-api.hii.in.th
Address: 104.21.55.197
Name: tele-api.hii.in.th
Address: 172.67.172.161
Name: tele-api.hii.in.th
Address: 2606:4700:3032::6815:37c5
Name: tele-api.hii.in.th
Address: 2606:4700:3037::ac43:aca1
lionants02@DESKTOP-7D90V9V:/mnt/c/Users/maxza$ curl -i -v https://tele-api.hii.in.th/
* Trying 104.21.55.197:443...
* TCP_NODELAY set
* Connected to tele-api.hii.in.th (104.21.55.197) port 443 (#0)
* ALPN, offering h2
* ALPN, offering http/1.1
* successfully set certificate verify locations:
* CAfile: /etc/ssl/certs/ca-certificates.crt
CApath: /etc/ssl/certs
* TLSv1.3 (OUT), TLS handshake, Client hello (1):
* TLSv1.3 (IN), TLS handshake, Server hello (2):
* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):
* TLSv1.3 (IN), TLS handshake, Certificate (11):
* TLSv1.3 (IN), TLS handshake, CERT verify (15):
* TLSv1.3 (IN), TLS handshake, Finished (20):
* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):
* TLSv1.3 (OUT), TLS handshake, Finished (20):
* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384
* ALPN, server accepted to use h2
* Server certificate:
* subject: C=US; ST=California; L=San Francisco; O=Cloudflare, Inc.; CN=sni.cloudflaressl.com
* start date: May 13 00:00:00 2022 GMT
* expire date: May 13 23:59:59 2023 GMT
* subjectAltName: host "tele-api.hii.in.th" matched cert's "*.hii.in.th"
* issuer: C=US; O=Cloudflare, Inc.; CN=Cloudflare Inc ECC CA-3
* SSL certificate verify ok.
* Using HTTP2, server supports multi-use
* Connection state changed (HTTP/2 confirmed)
* Copying HTTP/2 data in stream buffer to connection buffer after upgrade: len=0
* Using Stream ID: 1 (easy handle 0x56310b4eb8c0)
> GET / HTTP/2
> Host: tele-api.hii.in.th
> user-agent: curl/7.68.0
> accept: */*
>
* TLSv1.3 (IN), TLS handshake, Newsession Ticket (4):
* TLSv1.3 (IN), TLS handshake, Newsession Ticket (4):
* old SSL session ID is stale, removing
* Connection state changed (MAX_CONCURRENT_STREAMS == 256)!
< HTTP/2 200
HTTP/2 200
< date: Tue, 03 Jan 2023 08:46:50 GMT
date: Tue, 03 Jan 2023 08:46:50 GMT
< content-type: application/json
content-type: application/json
< content-length: 212
content-length: 212
< vary: Origin
vary: Origin
< cf-cache-status: DYNAMIC
cf-cache-status: DYNAMIC
< report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=JJ0Bqz9dhy5X%2FlfoWnZo4z8WEq3K515iPSmg07AJNnBW93mzJVMXGS%2F9zA%2Fd1hduDrJo4oGAHc2Dtgmm7yY1hmxBYUJG5MAf7fEN4xT42Nivg08hG6i9naryyeDH1fFHlXmPI7Y%3D"}],"group":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=JJ0Bqz9dhy5X%2FlfoWnZo4z8WEq3K515iPSmg07AJNnBW93mzJVMXGS%2F9zA%2Fd1hduDrJo4oGAHc2Dtgmm7yY1hmxBYUJG5MAf7fEN4xT42Nivg08hG6i9naryyeDH1fFHlXmPI7Y%3D"}],"group":"cf-nel","max_age":604800}
< nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
< server: cloudflare
server: cloudflare
< cf-ray: 783a775c9b8a8989-SIN
cf-ray: 783a775c9b8a8989-SIN
< alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
<
* Connection #0 to host tele-api.hii.in.th left intact
xxx
The second device cannot use the link.
lionants02@NB1-631-0169:~$ nslookup tele-api.hii.in.th
Server: 10.226.211.14
Address: 10.226.211.14#53
Non-authoritative answer:
Name: tele-api.hii.in.th
Address: 104.21.55.197
Name: tele-api.hii.in.th
Address: 172.67.172.161
Name: tele-api.hii.in.th
Address: 2606:4700:3037::ac43:aca1
Name: tele-api.hii.in.th
Address: 2606:4700:3032::6815:37c5
lionants02@NB1-631-0169:~$ curl -i -v https://tele-api.hii.in.th
* Trying 172.67.172.161:443...
* TCP_NODELAY set
* Connected to tele-api.hii.in.th (172.67.172.161) port 443 (#0)
* ALPN, offering h2
* ALPN, offering http/1.1
* successfully set certificate verify locations:
* CAfile: /etc/ssl/certs/ca-certificates.crt
CApath: /etc/ssl/certs
* TLSv1.3 (OUT), TLS handshake, Client hello (1):
* OpenSSL SSL_connect: SSL_ERROR_SYSCALL in connection to tele-api.hii.in.th:443
* Closing connection 0
curl: (35) OpenSSL SSL_connect: SSL_ERROR_SYSCALL in connection to tele-api.hii.in.th:443