Issue

Description of problem: When using nginx as reverse-proxy the error "error:0A000126:SSL routines::unexpected eof while reading" occurs for every request. Clients show different error-messages: curl: transfer closed with outstanding read data remaining Firefox: NS_NET_ERROR_PARTIAL_TRANSFER Chrome, Edge: net::ERR_INCOMPLETE_CHUNKED_ENCODING Version-Release number of selected component (if applicable): 1.20.1 How reproducible: Use nginx as reverse-proxy and fetch a page Steps to Reproduce: 1. dnf install -y nginx 2. cat >/etc/nginx/default.d/proxy.conf <<END location / { proxy_pass https://www.google.com; proxy_pass_request_headers off; proxy_pass_request_body off; } END 3. systemctl start nginx 4. curl -sSo /dev/null localhost 5. tail /var/log/nginx/error.log Actual results: curl: (18) transfer closed with outstanding read data remaining 2023/05/10 10:22:35 [crit] 128#128: *9 SSL_read() failed (SSL: error:0A000126:SSL routines::unexpected eof while reading) while reading upstream, client: 127.0.0.1, server: _, request: "GET / HTTP/1.1", upstream: "https://x.x.x.x:443/", host: "localhost" Expected results: No error-message Additional info: OpenSSL 3.0 raises unexpected EOF as error (https://github.com/openssl/openssl/issues/18866#issuecomment-1194219601), but offers a setting to ignore this. nginx 1.20.2 has already integrated this: https://github.com/nginx/nginx/compare/release-1.20.1...release-1.20.2 So nginx has to be updated from 1.20.1 to 1.20.2. A test by adding the changes to 1.20.2 was successfully: dnf remove -y nginx dnf groupinstall -y "Development Tools" dnf install -y yum-utils rpm-build dnf download --source nginx rpm i nginx*.src.rpm curl -o /root/rpmbuild/SOURCES/0008-update-to-1.20.2.patch https://github.com/nginx/nginx/compare/release-1.20.1...release-1.20.2.patch sed -i 's/Patch6.*/&\nPatch7: 0008-update-to-1.20.2.patch/' /root/rpmbuild/SPECS/nginx.spec echo Skip .hgtags sed -i '/8747718e7751a9aac300595a96920141e3cc5078/,/From / {//!d;}' /root/rpmbuild/SOURCES/0008-update-to-1.20.2.patch echo Skip misc/GNUmakefile sed -i '/9b2488b2c350588423899f12fc062a35d5e86cad/,/From /{//!d;} ' /root/rpmbuild/SOURCES/0008-update-to-1.20.2.patch echo Skip docs/xml/nginx/changes.xml sed -i '/656597b6e248868d56ed25559846ab5c58f8f3ac/,/From / {//!d;} ' /root/rpmbuild/SOURCES/0008-update-to-1.20.2.patch dnf builddep -y /root/rpmbuild/SPECS/nginx.spec rpmbuild -bb /root/rpmbuild/SPECS/nginx.spec dnf install y /root/rpmbuild/RPMS/x86_64/nginx*.rpm curl -sSo /dev/null localhost

Release Notes

No. of Comments

Resolution

Unresolved