start-iap-tunnel fails with "[unknown error (_ssl.c:3098)]."

Google Cloud Compute Infrastructure
1

Hi!

Today, some of my colleagues got this error when using “gcloud compute start-iap-tunnel”:

“ERROR: (gcloud.compute.start-iap-tunnel) Error while connecting [unknown error (_ssl.c:3098)].”

All of them used google-cloud-cli-478.0.0-1.x86_64.
When they downgrade it to google-cloud-cli-477.0.0-1.x86_64, the error disappears. OS is Fedora40.

If you have any advice, please tell me.

7 Likes
2

PS. My VM has 2 network interfaces. IAP is connected to secondary nic, but --verbosity=debug output from gcloud compute start-iap-tunnel contains somewhat strange output:


INFO: [0] Connecting with URL ['wss://tunnel.cloudproxy.app/v4/connect?project=XXX&port=22&newWebsocket=True&zone=asia-northeast1-b&instance=XXXXXX&interface=nic0']

Probably start-iap-tunnel should allow passing --interface=nic1

5 Likes
3

Thanks,

Same problem for me. I was on google-cloud-cli-479, also Fedora 40

Downgrading to 477 works.

4 Likes
4

I have created this issue, in case you want to vote so they give it more priority → https://issuetracker.google.com/issues/346608850

9 Likes
5

I have the same issue.
I’m using fedora 40 on wsl version 2.

1 Like