issue was this.. i was sending a request to the listening IP address without sending the right SNI value. i didnt have a 'default' certificate defined so ATS 'rejected' the request. hence giving the impression no TLS session was established. i then defined a default certificate and was able to send a request to the listening IP. so pebcak error.. problem exists between chair and keyboard..
On Tue, Sep 19, 2017 at 5:55 PM, Leif Hedstrom <[email protected]> wrote: > > On Sep 19, 2017, at 2:20 PM, Jeremy Payne <[email protected]> wrote: > > I can link ATS 7.x and 8.x against openssl 1.1.0f, however, for some > reason I can't establish a SSL/TLS connection. Has anyone > successfully linked ATS against openssl 1.1.0f and successfully been > able to establish a SSL/TLS session? > In other words, is openssl 1.1.0f supported by ATS? If not, what about > an earlier version of 1.1.0(x)?? > > > > Yeh, we’re running current master with OpenSSL v1.1.0f on > docs.trafficserver.apache.org. Maybe you have some mismatch / issues between > headers (when compiling ATS) and runtime? > > Cheers, > > — Leif >
