Re: ApacheBench broken for (most) SSL sites on Bookworm?

[Jeffrey Walton <noloader@gmail.com>]

On Sat, Jan 11, 2025 at 11:17 AM cen <imbacen@gmail.com> wrote:
>
> It seems that ab encounters some kind of an SSL issue with most https sites I tried (google, cloudflare proxied sites etc).
>
> Not all, seems to work fine with a personal blog site I host on Debian/apache2 server or with https://www.debian.org/.
>
> Some kind of an SSL issue but searching around I found nothing, just a bug from 2013. It's not just my machine, I can repro this in a clean docker container.
>
>
> ab -n 1 -c 1 https://www.google.com/
> This is ApacheBench, Version 2.3 <$Revision: 1913912 $>
> Copyright 1996 Adam Twiss, Zeus Technology Ltd, http://www.zeustech.net/
> Licensed to The Apache Software Foundation, http://www.apache.org/
>
> Benchmarking www.google.com (be patient)...SSL read failed (1) - closing connection
> 80756A448C7F0000:error:0A000126:SSL routines:ssl3_read_n:unexpected eof while reading:../ssl/record/rec_layer_s3.c:322:
> ..done

To add to Michael's answer, see SSL / TLS: Is a server always required
to respond to a close_notify?
<https://security.stackexchange.com/q/82028>.

Jeff