TYK v4.3.4 giving SSL errors on a streaming API

[Olu]

@Mohit_Kumar

Can anyone please check if we are missing any configuration in v4.3.4 as in v2.5.1 same API works normally.

Are there any changes or difference in the gateway config and API definition? Is it exactly the same? Can you share the config and definition files?

@Mohit_Kumar

But on hitting the API it is giving below error in client response:
Error in the HTTP2 framing layer

I have only seen the first error once Error HTTP/2 stream 0 was not closed cleanly: - #4 by zaid and it doesn’t appear a resolution was reached.

You mentioned the issue was on hitting the API. This would mean its not occurring at random or after a number of requests?

@Mohit_Kumar

We also tried to lower down the HTTP2 to HTTP1.1 (using enable_http2: false) version, but then error changed to below:
curl: (56) OpenSSL SSL_read: error:1408F119:SSL routines:ssl3_get_record:decryption failed or bad record mac, errno 0

What is the flow of the request? I assume hitting the upstream works as expected.

Also how are the certs generated? Maybe this link could help point in the right direction

Part of the error message “bad record mac” indicates that the SSL/TLS connection is failing due to a decryption error or a bad record message authentication code (MAC).