Please help, SSL_do_handshake failed for different reasons

[伍仁广]

Hi, openssl users

Nginx: 1.19.3.1
Openssl : 1.1.1n
QAT: QAT crypto engine(qat_sw) v0.6.18


I don’t know openssl much, just using it in Nginx. Now I get some trouble. Can someone help me to fix it?

2023/07/03 15:22:08 [crit] 43398#43398: *102515615882 SSL_do_handshake() failed (SSL: error:141B306E:SSL routines:tls_collect_extensions:bad extension) while SSL handshaking, client: 111.48.134.22, server: 0.0.0.0:443
2023/07/03 15:22:09 [crit] 43427#43427: *102515662350 SSL_do_handshake() failed (SSL: error:141B306E:SSL routines:tls_collect_extensions:bad extension) while SSL handshaking, client: 111.48.134.167, server: 0.0.0.0:443
2023/07/03 15:22:11 [crit] 43407#43407: *102515718900 SSL_do_handshake() failed (SSL: error:800640A8:lib(128):aes_gcm_tls_cipher:gcm tag verify failure error:1408F119:SSL routines:ssl3_get_record:decryption failed or bad record mac) while SSL handshaking, client: 111.48.114.203, server: 0.0.0.0:443
2023/07/03 15:22:13 [crit] 43448#43448: *102515803442 SSL_do_handshake() failed (SSL: error:800640A8:lib(128):aes_gcm_tls_cipher:gcm tag verify failure error:1408F119:SSL routines:ssl3_get_record:decryption failed or bad record mac) while SSL handshaking, client: 111.48.134.63, server: 0.0.0.0:443
2023/07/03 15:22:14 [crit] 43416#43416: *102515843377 SSL_do_handshake() failed (SSL: error:800640A8:lib(128):aes_gcm_tls_cipher:gcm tag verify failure error:1408F119:SSL routines:ssl3_get_record:decryption failed or bad record mac) while SSL handshaking, client: 111.48.114.56, server: 0.0.0.0:443
2023/07/03 15:22:16 [crit] 43380#43380: *102515959222 SSL_do_handshake() failed (SSL: error:141B306E:SSL routines:tls_collect_extensions:bad extension) while SSL handshaking, client: 111.48.114.35, server: 0.0.0.0:443

Besh Wishes

________________________________
本?件及其附件内容可能含有机密和/或?私信息，?供指定个人或机?使用。若?非?件人指定收件人或其代理人，?勿使用、?播、?制或存?此?件之任何内容或其附件。如??收本?件，?即以回?或??方式通知?件人，并将原始?件、附件及其所有?本?除。??。
The contents of this message and any attachments may contain confidential and/or privileged information and are intended exclusively for the addressee(s). If you are not the intended recipient of this message or their agent, please note that any use, dissemination, copying, or storage of this message or its attachments is not allowed. If you receive this message in error, please notify the sender by reply the message or phone and delete this message, any attachments and any copies immediately.
Thank you
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://mta.openssl.org/pipermail/openssl-users/attachments/20230703/ea613ee3/attachment.htm>