BTW, TLS renegotiation has security problems, and was removed entirely from TLS1.3. https://security.stackexchange.com/questions/24554/should-i-use-ssl-tls-renegotiation
I suggest you get the target server updated. If you cannot, then you may need to put a proxy in between prometheus and that server - and the proxy must be configured to allow renegotiation, at least on the outbound session. On Friday, 22 September 2023 at 13:14:52 UTC+1 Brian Candler wrote: > Googling for that error: > > https://stackoverflow.com/questions/57420833/tls-no-renegotiation-error-on-http-request > > However, as far as I can see, Prometheus doesn't have this option: > > https://prometheus.io/docs/prometheus/latest/configuration/configuration/#tls_config > > You could try playing with min_version/max_version (see if you can tell > which TLS version was used by curl) > > On Friday, 22 September 2023 at 11:59:24 UTC+1 Pragya Singh wrote: > >> I got a new error when I added enable_http2: false >> local error : tls: no renegotiation >> On Thursday, 14 September 2023 at 20:29:58 UTC+5:30 Brian Candler wrote: >> >>> Try this: >>> >>> enable_http2: false >>> On Thursday, 14 September 2023 at 14:22:18 UTC+1 Pragya Singh wrote: >>> >>>> We are getting this error in prometheus while connecting to an endpoint >>>> Get "https://10.14.0.42:443/health <https://10.14.0.42/health>": >>>> stream error: stream ID 7; HTTP_1_1_REQUIRED; received from peer >>>> >>>> When checked manually: curl https://10.14.0.42:443/health >>>> <https://10.14.0.42/health> -k -v --http1.1 >>>> This works fine and provides list of metrics >>>> >>>> I added scheme: http but that didn't work and I am getting the same >>>> error. Something like this >>>> scrape_configs: >>>> - job_name: 'example' >>>> scheme: http >>>> >>>> Any recommendations on what else I can try here? >>>> >>>> >>>> Regards, >>>> Pragya >>>> >>> -- You received this message because you are subscribed to the Google Groups "Prometheus Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/prometheus-users/349f8397-dff7-4652-a10a-aa3a00b54940n%40googlegroups.com.
