SSL v3 Handshake Failure

Develop, Build & Integrate APIs & Integrations
21

I’ve not seen any of these errors now in the last two weeks. Like JZamecnik, I’ve only captured minimal error messages (what gets returned by Python in a typical try/except block).

One of the first things I did upon seeing these errors was check the HubSpot logs in Integrations > Private Apps > Logs. I found no errors.

I really believe that the clients are rejecting what is being offered (SSLv3) by one of the API farm servers in the SSL handshake transaction. If I see any more of these errors I will post in my support ticket the full URL, my requesting IP address and the timestamp. That should help in narrowing it down to a specific request.

22

On my end, unfortunately the error hasn’t disappeared yet. However, so far I haven’t been able to get a packet capture because it’s not well reproducible. If I manage to “catch it on camera”, I’ll let back to you, but this is to note that we are still affected.

23

Yep, I jinxed myself by reporting no issues in the past couple weeks yesterday. I had the error again last night. I posted the full details in my open support ticket, which should help in narrowing down the culprit here.

24

We are facing SSL handshake failures occasionally while sending data to hubspot. Here is the debug output:

* Trying 104.17.204.204:443...
* TCP_NODELAY set
* Connected to api.hubapi.com (104.17.204.204) port 443 (#0)
* ALPN, offering http/1.1
* successfully set certificate verify locations:
* CAfile: /etc/ssl/certs/ca-certificates.crt
 CApath: /etc/ssl/certs
* error:14094410:SSL routines:ssl3_read_bytes:sslv3 alert handshake failure
* Closing connection 0

We have checked our certificate with ssllabs.com, and it is fine. Our server supports both TLS 1.2 and 1.3. We have also checked the connectivity through the terminal using curl. The connectivity is also fine but sometimes your server responds with SSL handshake failure. What could be the issue? Is it anything misconfigured on one of your server or is there an issue on our side? Can you help us to figure it out?

25

{"name":"SourceError","message":"Hubspot request failed with error: {\"message\":\"write EPROTO 140236678432704:error:14094410:SSL routines:ssl3_read_bytes:sslv3 alert handshake failure:../deps/openssl/openssl/ssl/record/rec_layer_s3.c:1565:SSL alert number 40\\n\",\"name\":\"Error\",\"stack\":\"Error: write EPROTO 140236678432704:error:14094410:SSL routines:ssl3_read_bytes:sslv3 alert handshake failure:../deps/openssl/openssl/ssl/record/rec_layer_s3.c:1565:SSL alert number 40\\n\\n at WriteWrap.onWriteComplete [as oncomplete] (node:internal/stream_base_commons:94:16)\\n\",\"config\":{\"url\":\"https://api.hubapi.com/email/public/v1/campaigns/[REDACTED]\",\"method\":\"get\",\"data\":null,\"headers\":{\"Accept\":\"application/json, text/plain, */*\",\"Authorization\":\"Bearer [REDACTED]",\"User-Agent\":\"axios/0.21.1\"},\"baseURL\":\"https://api.hubapi.com\",\"transformRequest\":[null],\"transformResponse\":[null],\"timeout\":0,\"xsrfCookieName\":\"\",\"xsrfHeaderName\":\"",\"maxContentLength\":-1,\"maxBodyLength\":-1},\"code\":\"EPROTO\"}","stack":"SourceError: Hubspot request failed with error: {\"message\":\"write EPROTO 140236678432704:error:14094410:SSL routines:ssl3_read_bytes:sslv3 alert handshake failure:../deps/openssl/openssl/ssl/record/rec_layer_s3.c:1565:SSL alert number 40\\n\",\"name\":\"Error\",\"stack\":\"Error: write EPROTO 140236678432704:error:14094410:SSL routines:ssl3_read_bytes:sslv3 alert handshake failure:../deps/openssl/openssl/ssl/record/rec_layer_s3.c:1565:SSL alert number 40\\n\\n at WriteWrap.onWriteComplete [as oncomplete] ([REDACTED]94:16)\\n\",\"config\":{\"url\":\"https://api.hubapi.com/email/public/v1/campaigns/[REDACTED]?appId=[REDACTED]\",\"method\":\"get\",\"data\":null,\"headers\":{\"Accept\":\"application/json, text/plain, */*\",\"Authorization\":\"Bearer [REDACTED]\",\"User-Agent\":\"axios/0.21.1\"},\"baseURL\":\"https://api.hubapi.com\",\"transformRequest\":[null],\"transformResponse\":[null],\"timeout\":0,\"xsrfCookieName\":\"\",\"xsrfHeaderName\":\"\",\"maxContentLength\":-1,\"maxBodyLength\":-1},\"code\":\"EPROTO\"}\n at [REDACTED]

I’m still seeing a lot of `read ECONNRESET` and status code 500

26

I was indeed able to catch the failure on a packet capture. Sent you the file in a DM @Jaycee_Lewis .

27

Hi community followers! After managing it with the Cloudflare team, their fix is fully deployed, so we feel comfortable saying a fix has been deployed by our downstream provider. Please, you can comment here if anyone still faces issues after this. Thanks for your patience with this one. :heart:

28

Hey, could you tell if something was wrong on Cloudflare side that you managing wiht them to fix it?

29

unfortunatelly I’m still facing the same issue :confused: