BTW, TLS renegotiation has security problems, and was removed entirely from TLS1.3. https://security.stackexchange.com/questions/24554/should-i-use-ssl-tls-renegotiation
I suggest you get the target server updated. If you cannot, then you may need to put a proxy in between prometheus and that server - and the proxy must be configured to allow renegotiation, at least on the outbound session. On Friday, 22 September 2023 at 13:14:52 UTC+1 Brian Candler wrote: > Googling for that error: > > https://stackoverflow.com/questions/57420833/tls-no-renegotiation-error-on-http-request > > However, as far as I can see, Prometheus doesn't have this option: > > https://prometheus.io/docs/prometheus/latest/configuration/configuration/#tls_config > > You could try playing with min_version/max_version (see if you can tell > which TLS version was used by curl) > > On Friday, 22 September 2023 at 11:59:24 UTC+1 Pragya Singh wrote: > >> I got a new error when I added enable_http2: false >> local error : tls: no renegotiation >> On Thursday, 14 September 2023 at 20:29:58 UTC+5:30 Brian Candler wrote: >> >>> Try this: >>> >>> enable_http2: false >>> On Thursday, 14 September 2023 at 14:22:18 UTC+1 Pragya Singh wrote: >>> >>>> We are getting this error in prometheus while connecting to an endpoint >>>> Get "https://10.14.0.42:443/health <https://10.14.0.42/health>": >>>> stream error: stream ID 7; HTTP_1_1_REQUIRED; received from peer >>>> >>>> When checked manually: curl https://10.14.0.42:443/health >>>> <https://10.14.0.42/health> -k -v --http1.1 >>>> This works fine and provides list of metrics >>>> >>>> I added scheme: http but that didn't work and I am getting the same >>>> error. Something like this >>>> scrape_configs: >>>> - job_name: 'example' >>>> scheme: http >>>> >>>> Any recommendations on what else I can try here? >>>> >>>> >>>> Regards, >>>> Pragya >>>> >>> -- You received this message because you are subscribed to the Google Groups "Prometheus Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to prometheus-users+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/prometheus-users/349f8397-dff7-4652-a10a-aa3a00b54940n%40googlegroups.com.
