# Kong Nginx SSL Handshake

**URL:** <https://discuss.konghq.com/t/kong-nginx-ssl-handshake/12245>\
**Category:** General\
**Created:** [January 5, 2024, 9:32am UTC](https://discuss.konghq.com/t/kong-nginx-ssl-handshake/12245 "2024-01-05T09:32:31Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![Hakan\_Sen](https://avatars.discourse-cdn.com/v4/letter/h/0ea827/32.png) [@Hakan\_Sen](https://discuss.konghq.com/u/Hakan_Sen)\
**Post date:** [January 5, 2024, 9:32am UTC](https://discuss.konghq.com/t/kong-nginx-ssl-handshake/12245/1 "2024-01-05T09:32:31Z")

</div>

My web service address is [https://api.test.com/test/test.svc](https://api.test.com/test/test.svc) (the service uses a public certificate)  
ping [api.test.com](http://api.test.com) \> return 172.18.29.110  
curl [https://api.test.com](https://api.test.com) \> returns without any ssl error

Service and route definitions have been made on Kong

When I test as mykongip:8000/test I get “Eror An invalid response was received from the upstream server.” error.

I see in the nginx logs that it is trying to go to the defined service([https://api.test.com/test/test.svc](https://api.test.com/test/test.svc)) over IP and getting SSL\_do\_handshake error.

2024/01/04 16:56:36 [error] 72562#0: \*1245 SSL\_do\_handshake() failed (SSL: error:0A000152:SSL routines::unsafe legacy renegotiation disabled) while SSL handshaking to upstream, client: 10.10.104.77, server: kong, request: “GET /test6 HTTP/1.1”, upstream: “[https://172.18.29.110:443/test/test.svc](https://172.18.29.110:443/test/test.svc)”, host: “10.10.104.57:8000”, request\_id: “2fa6fe0624363e1832d78f361a1f3d16”

I also entered the following parameters in /etc/kong/kong.conf for this error, but no solution. What am I missing?  
nginx\_proxy\_proxy\_ssl\_server\_name = on  
nginx\_proxy\_proxy\_ssl\_session\_reuse = off

---

<div class="post-metadata">

**Author:** ![Hakan\_Sen](https://avatars.discourse-cdn.com/v4/letter/h/0ea827/32.png) [@Hakan\_Sen](https://discuss.konghq.com/u/Hakan_Sen)\
**Post date:** [January 5, 2024, 9:34am UTC](https://discuss.konghq.com/t/kong-nginx-ssl-handshake/12245/2 "2024-01-05T09:34:12Z")

</div>

Details of the defined service

{  
“request\_buffering”: true,  
“response\_buffering”: true,  
“preserve\_host”: false,  
“https\_redirect\_status\_code”: 426,  
“protocols”: [  
“http”,  
“https”  
],  
“methods”: null,  
“sources”: null,  
“destinations”: null,  
“service”: {  
“read\_timeout”: 60000,  
“host”: “[api.test.com](http://api.test.com)”,  
“enabled”: true,  
“path”: “/test/test.svc”,  
“id”: “e2688977-0a8c-491a-b469-edc6c537ecac”,  
“protocol”: “https”,  
“tls\_verify”: null,  
“tls\_verify\_depth”: null,  
“created\_at”: 1703505231,  
“write\_timeout”: 60000,  
“ca\_certificates”: null,  
“client\_certificate”: null,  
“port”: 443,  
“name”: “test”,  
“updated\_at”: 1703505231,  
“retries”: 5,  
“connect\_timeout”: 60000,  
“tags”: ,  
“extras”: {  
“createdUser”: null,  
“updatedUser”: null,  
“id”: 6,  
“service\_id”: “e2688977-0a8c-491a-b469-edc6c537ecac”,  
“kong\_node\_id”: “1”,  
“description”: null,  
“tags”: null,  
“createdAt”: “2023-12-25T11:53:51.000Z”,  
“updatedAt”: “2023-12-25T11:53:51.000Z”  
}  
},  
“snis”: null,  
“created\_at”: 1703505300,  
“path\_handling”: “v1”,  
“tags”: null,  
“regex\_priority”: 0,  
“strip\_path”: true,  
“name”: “test”,  
“updated\_at”: 1704446356,  
“headers”: null,  
“id”: “407b2de9-e0f0-4621-95f8-94fa4ee4e948”,  
“hosts”: null,  
“paths”: [  
“/test”  
]  
}