mav8rickOriginal post
Rank 2: Process
In an earlier post, I figured how to turn off TLS 1.0 and 1.1 in Traefik. The security consultant wants us to only support certain cipher suites so I modified my traefik config to the following:
tls:
options:
default:
minVersion: VersionTLS12
cipherSuites:
- "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256"
- "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384"
- "TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305"
- "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256"
- "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384"
- "TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305"
mintls13:
minVersion: VersionTLS13
certificates:
- certFile: /storage/certificates/abc.def.com/fullchain.pem
keyFile: /storage/certificates/abc.def.com/privkey.pem
Reference I was using for the cipherSuites options: https://www.spad.uk/posts/practical-configuration-of-traefik-as-a-reverse-proxy-for-docker-updated-for-2023/
Now, I'm hitting into this:
HTTP 400 Bad Request
(Powered by Swoole)
I checked logs of appwrite-traefik and appwrite - no errors at all.
Summary
Developers experiencing HTTP 400 error after setting cipher suites in Traefik. Reverting config changes didn't resolve the issue. Check appwrite container logs, troubleshoot with `docker-compose logs`, and ensure correct container names are used. The error could be due to Swoole. No direct solution provided in the thread.