TCP session is finished before the end of TLS session

Products

• SG-S400

Issue/Introduction

The reverse proxy deployment. User uploading file from the outside network server to the internal server through the proxy. The uploading is successfully done, but the issue is TCP connection termination from the proxy before the TLS closure and customer get the below error

"* schannel: server closed abruptly (missing close_notify)

Closing connection 0
schannel: shutting down SSL/TLS connection with 10.134.247.211 port 443
curl: (56) Failure when receiving data from the peer"

 

 

==============

curl.exe -k -v -u user:Pass  -H "Host: www.example.com" https://10.134.247.211/repository/helm-private/ --upload-file cc-tester-backend-1.0.1-SNAPSHOT.tgz

  Trying 10.134.247.211:443...
Connected to 10.134.247.211 (10.134.247.211) port 443 (#0)
schannel: disabled automatic use of client certificate
schannel: using IP address, SNI is not supported by OS.
ALPN: offers http/1.1
ALPN: server did not agree on a protocol. Uses default.
Server auth using Basic with user '####'
> PUT /repository/helm-private/cc-tester-backend-1.0.1-SNAPSHOT.tgz HTTP/1.1

> Host: www.example.com

> Authorization: Basic YTAwMjgydzE6NUtoLTYxRmFx

> User-Agent: curl/7.83.1

> Accept: /

> Content-Length: 2618

> Expect: 100-continue

> 

Mark bundle as not supporting multiuse
< HTTP/1.1 100 Continue

We are completely uploaded and fine
Mark bundle as not supporting multiuse
< HTTP/1.1 200 OK

< Date: Tue, 20 Sep 2022 14:23:54 GMT

< Strict-Transport-Security: max-age=7776000

< Server: Nexus/3.34.0-01 (PRO)

< X-Content-Type-Options: nosniff

< Content-Security-Policy: sandbox allow-forms allow-modals allow-popups allow-presentation allow-scripts allow-top-navigation

< X-XSS-Protection: 1; mode=block

< Cache-Control: proxy-revalidate

< SNET-RPS: wind-sgpoolint01

< Connection: close

< 

schannel: server closed abruptly (missing close_notify)
Closing connection 0
schannel: shutting down SSL/TLS connection with 10.134.247.211 port 443
curl: (56) Failure when receiving data from the peer

            

Environment

Release : 6.7.5.12

Resolution

Fixed in version 7.3.13