Handshake failed with `-alpine` nginx images

[robertsLando]

Handshake failed with `-alpine` nginx images

[JonasAlfredsson]

From the parent container: nginxinc/docker-nginx#743

If you absolutely need TLS 1.0 then the Debian image is currently your solution. However, I would really recommend you to move to TLS 1.2 as soon as possible since I believe Debian will also stop supporting this in the near future.

[robertsLando]

Thanks for your answer Jonas, I know about the security implications but unfortunally the application must be back compatibile with some very old edge device that doesn't support an higher TLS version (for now). The idea is to make them supported right now and remve it in a future release so at least there is the possibility to update them using this application

BTW It's ok for me, I will just stay stiky with the debian version for now until I can remove the back compatibility. Thanks 🙏🏼

[robertsLando]

Regarding this, I switched to Debian based version but seems I still get the error related to #165

Does 4.2.0 includes the fix?

[JonasAlfredsson]

It should include it:

docker run -it --entrypoint=/bin/bash jonasal/nginx-certbot:4.2.0 --version                                        
GNU bash, version 5.2.15(1)-release (x86_64-pc-linux-gnu)

Testing with the HUP signal on the container it works as expected.

Do we need to add some kind of "if empty file check" as well?

[robertsLando]

Do we need to add some kind of "if empty file check" as well?

I think so, I cannot reproduce this easily but a double check would be for sure a good thing

[JonasAlfredsson]

Please open a new issue and reference this.
We can probably make something out of this check: https://stackoverflow.com/a/9964890

[JonasAlfredsson]

But do you have a stat information about the file that cause trouble. That way we can verify it actually has a size of zero when it happens.

[robertsLando]

I temporary changed to another nginx-certbot version btw I'm sure it was size 0. Issue opened #185