SSL setup for route

[mortalys]

Hi

I'm trying to setup SSL for a domain but having some issues to setup, and I do know exactly where is the problem, maybe someone can give me a clue

Let me start with CONF file from apisix

`
apisix:
node_listen: 9080 # APISIX listening port
enable_ipv6: false

enable_control: true
control:
ip: "0.0.0.0"
port: 9092

ssl:
enable: true
listen:
- port: 9443
ssl_protocols: TLSv1.2 TLSv1.3
`

When I try to use curl from the host to see if there is connection I got this answer

`
curl https://192.168.1.140:9443/ -v -k -I

• Trying 192.168.1.140:9443...
• Connected to 192.168.1.140 (192.168.1.140) port 9443 (#0)
• ALPN, offering h2
• ALPN, offering http/1.1
• TLSv1.0 (OUT), TLS header, Certificate Status (22):
• TLSv1.3 (OUT), TLS handshake, Client hello (1):
• TLSv1.2 (IN), TLS header, Unknown (21):
• TLSv1.3 (IN), TLS alert, internal error (592):
• error:0A000438:SSL routines::tlsv1 alert internal error
• Closing connection 0
  curl: (35) error:0A000438:SSL routines::tlsv1 alert internal error
  `

I'm using version 3.7.0 and using Docker version

I might be missing something.

Thank you for your time reading.

[mortalys]

2023/12/08 19:57:15 [error] 52#52: 5940 [lua] init.lua:195: http_ssl_client_hello_phase(): failed to find SNI: please check if the client requests via IP or uses an outdated protocol. If you need to report an issue, provide a packet capture file of the TLS handshake., context: ssl_client_hello_by_lua, client: 192.168.1.101, server: 0.0.0.0:9443

I got more information, I guess I need to create a certicate for the URL 192.168.1.140

[mortalys]

I had manage to fix the issue adding to the configuration a default SNI

ssl: fallback_sni: a.domain.com