# Node failed join the cluster

**URL:** <https://forum.search-guard.com/t/node-failed-join-the-cluster/196>\
**Category:** Search Guard\
**Created:** [June 15, 2016, 11:33am UTC](https://forum.search-guard.com/t/node-failed-join-the-cluster/196 "2016-06-15T11:33:03Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![fzuhongwei](https://avatars.discourse-cdn.com/v4/letter/f/ee59a6/32.png) [@fzuhongwei](https://forum.search-guard.com/u/fzuhongwei)\
**Post date:** [June 15, 2016, 11:33am UTC](https://forum.search-guard.com/t/node-failed-join-the-cluster/196/1 "2016-06-15T11:33:03Z")

</div>

Hi. everybody. I met a problem with the search guard.

My version:

elasticserach-2.3.3

search-guard-2-2.3.3.0-beta3

search-guard-ssl-2.3.3.10

There are 3 node in my cluster.

I have start one node successfully. But when i start another node, there are some error in the first node :

[2016-06-15 19:14:43,432][ERROR][com.floragunn.searchguard.ssl.transport.SearchGuardSSLNettyTransport] [es1] SSL Problem error:14082174:SSL routines:SSL3\_CHECK\_CERT\_AND\_ALGORITHM:dh key too small

javax.net.ssl.SSLHandshakeException: error:14082174:SSL routines:SSL3\_CHECK\_CERT\_AND\_ALGORITHM:dh key too small

```
at io.netty.handler.ssl.OpenSslEngine.sslReadErrorResult(OpenSslEngine.java:774)

at io.netty.handler.ssl.OpenSslEngine.unwrap(OpenSslEngine.java:733)

at io.netty.handler.ssl.OpenSslEngine.unwrap(OpenSslEngine.java:810)

at io.netty.handler.ssl.OpenSslEngine.unwrap(OpenSslEngine.java:853)

at org.jboss.netty.handler.ssl.SslHandler.unwrap(SslHandler.java:1218)

at org.jboss.netty.handler.ssl.SslHandler.decode(SslHandler.java:852)

at org.jboss.netty.handler.codec.frame.FrameDecoder.callDecode(FrameDecoder.java:425)

at org.jboss.netty.handler.codec.frame.FrameDecoder.messageReceived(FrameDecoder.java:310)

at org.jboss.netty.channel.SimpleChannelUpstreamHandler.handleUpstream(SimpleChannelUpstreamHandler.java:70)

at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:564)

at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:559)

at org.jboss.netty.channel.Channels.fireMessageReceived(Channels.java:268)

at org.jboss.netty.channel.Channels.fireMessageReceived(Channels.java:255)

at org.jboss.netty.channel.socket.nio.NioWorker.read(NioWorker.java:88)

at org.jboss.netty.channel.socket.nio.AbstractNioWorker.process(AbstractNioWorker.java:108)

at org.jboss.netty.channel.socket.nio.AbstractNioSelector.run(AbstractNioSelector.java:337)

at org.jboss.netty.channel.socket.nio.AbstractNioWorker.run(AbstractNioWorker.java:89)

at org.jboss.netty.channel.socket.nio.NioWorker.run(NioWorker.java:178)

at org.jboss.netty.util.ThreadRenamingRunnable.run(ThreadRenamingRunnable.java:108)

at org.jboss.netty.util.internal.DeadLockProofWorker$1.run(DeadLockProofWorker.java:42)

at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142)

at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617)

at java.lang.Thread.run(Thread.java:745)

```

[2016-06-15 19:14:43,433][WARN][discovery.zen] [es1] failed to validate incoming join request from node [{es2}{fmvSsmXRQAexQ18k3Eu3eQ}{195.25.97.129}{195.25.97.129:9300}]

in this node, there are some errors:

[2016-06-15 19:14:43,659][INFO][discovery.zen] [es2] failed to send join request to master [{es1}{Ob7nkg6FQjizlguoF5Vw5Q}{195.25.97.128}{195.25.97.128:9300}], reason [RemoteTransportException[[es1][192.25.97.128:9300][internal:discovery/zen/join]]; nested: IllegalStateException[failure when sending a validation request to node]; nested: NodeDisconnectedException[[es2][195.25.97.129:9300][internal:discovery/zen/join/validate] disconnected]; ]

[2016-06-15 19:14:43,656][ERROR][com.floragunn.searchguard.ssl.transport.SearchGuardSSLNettyTransport] [es2] SSL Problem Received fatal alert: handshake\_failure

javax.net.ssl.SSLException: Received fatal alert: handshake\_failure

```
at sun.security.ssl.Alerts.getSSLException(Alerts.java:208)

at sun.security.ssl.SSLEngineImpl.fatal(SSLEngineImpl.java:1630)

at sun.security.ssl.SSLEngineImpl.fatal(SSLEngineImpl.java:1598)

at sun.security.ssl.SSLEngineImpl.recvAlert(SSLEngineImpl.java:1767)

at sun.security.ssl.SSLEngineImpl.readRecord(SSLEngineImpl.java:1063)

at sun.security.ssl.SSLEngineImpl.readNetRecord(SSLEngineImpl.java:887)

at sun.security.ssl.SSLEngineImpl.unwrap(SSLEngineImpl.java:761)

at javax.net.ssl.SSLEngine.unwrap(SSLEngine.java:624)

at org.jboss.netty.handler.ssl.SslHandler.unwrap(SslHandler.java:1218)

at org.jboss.netty.handler.ssl.SslHandler.decode(SslHandler.java:852)

at org.jboss.netty.handler.codec.frame.FrameDecoder.callDecode(FrameDecoder.java:425)

at org.jboss.netty.handler.codec.frame.FrameDecoder.messageReceived(FrameDecoder.java:303)

at org.jboss.netty.channel.SimpleChannelUpstreamHandler.handleUpstream(SimpleChannelUpstreamHandler.java:70)

at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:564)

at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:559)

at org.jboss.netty.channel.Channels.fireMessageReceived(Channels.java:268)

at org.jboss.netty.channel.Channels.fireMessageReceived(Channels.java:255)

at org.jboss.netty.channel.socket.nio.NioWorker.read(NioWorker.java:88)

at org.jboss.netty.channel.socket.nio.AbstractNioWorker.process(AbstractNioWorker.java:108)

at org.jboss.netty.channel.socket.nio.AbstractNioSelector.run(AbstractNioSelector.java:337)

at org.jboss.netty.channel.socket.nio.AbstractNioWorker.run(AbstractNioWorker.java:89)

at org.jboss.netty.channel.socket.nio.NioWorker.run(NioWorker.java:178)

at org.jboss.netty.util.ThreadRenamingRunnable.run(ThreadRenamingRunnable.java:108)

at org.jboss.netty.util.internal.DeadLockProofWorker$1.run(DeadLockProofWorker.java:42)

at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1145)

at java.util.concurrent.ThreadPoolExecutor$Work

```

Can you tell me where i have made mistakes? Thanks!

---

<div class="post-metadata">

**Author:** ![searchguard\_google\_group](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.search-guard.com/searchguard_google_group/32/462_2.png) [@searchguard\_google\_group](https://forum.search-guard.com/u/searchguard_google_group)\
**Post date:** [June 15, 2016, 4:55pm UTC](https://forum.search-guard.com/t/node-failed-join-the-cluster/196/2 "2016-06-15T16:55:19Z")

</div>

[https://github.com/floragunncom/search-guard-ssl/issues/20](https://github.com/floragunncom/search-guard-ssl/issues/20)

> **···**
>
> > Am 15.06.2016 um 13:33 schrieb fzuhongwei@gmail.com:
> > 
> > Hi. everybody. I met a problem with the search guard.  
> > My version:  
> > elasticserach-2.3.3  
> > search-guard-2-2.3.3.0-beta3  
> > search-guard-ssl-2.3.3.10
> > 
> > There are 3 node in my cluster.  
> > I have start one node successfully. But when i start another node, there are some error in the first node :
> > 
> > [2016-06-15 19:14:43,432][ERROR][com.floragunn.searchguard.ssl.transport.SearchGuardSSLNettyTransport] [es1] SSL Problem error:14082174:SSL routines:SSL3\_CHECK\_CERT\_AND\_ALGORITHM:dh key too small  
> > javax.net.ssl.SSLHandshakeException: error:14082174:SSL routines:SSL3\_CHECK\_CERT\_AND\_ALGORITHM:dh key too small  
> > &nbsp;&nbsp;at io.netty.handler.ssl.OpenSslEngine.sslReadErrorResult(OpenSslEngine.java:774)  
> > &nbsp;&nbsp;at io.netty.handler.ssl.OpenSslEngine.unwrap(OpenSslEngine.java:733)  
> > &nbsp;&nbsp;at io.netty.handler.ssl.OpenSslEngine.unwrap(OpenSslEngine.java:810)  
> > &nbsp;&nbsp;at io.netty.handler.ssl.OpenSslEngine.unwrap(OpenSslEngine.java:853)  
> > &nbsp;&nbsp;at org.jboss.netty.handler.ssl.SslHandler.unwrap(SslHandler.java:1218)  
> > &nbsp;&nbsp;at org.jboss.netty.handler.ssl.SslHandler.decode(SslHandler.java:852)  
> > &nbsp;&nbsp;at org.jboss.netty.handler.codec.frame.FrameDecoder.callDecode(FrameDecoder.java:425)  
> > &nbsp;&nbsp;at org.jboss.netty.handler.codec.frame.FrameDecoder.messageReceived(FrameDecoder.java:310)  
> > &nbsp;&nbsp;at org.jboss.netty.channel.SimpleChannelUpstreamHandler.handleUpstream(SimpleChannelUpstreamHandler.java:70)  
> > &nbsp;&nbsp;at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:564)  
> > &nbsp;&nbsp;at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:559)  
> > &nbsp;&nbsp;at org.jboss.netty.channel.Channels.fireMessageReceived(Channels.java:268)  
> > &nbsp;&nbsp;at org.jboss.netty.channel.Channels.fireMessageReceived(Channels.java:255)  
> > &nbsp;&nbsp;at org.jboss.netty.channel.socket.nio.NioWorker.read(NioWorker.java:88)  
> > &nbsp;&nbsp;at org.jboss.netty.channel.socket.nio.AbstractNioWorker.process(AbstractNioWorker.java:108)  
> > &nbsp;&nbsp;at org.jboss.netty.channel.socket.nio.AbstractNioSelector.run(AbstractNioSelector.java:337)  
> > &nbsp;&nbsp;at org.jboss.netty.channel.socket.nio.AbstractNioWorker.run(AbstractNioWorker.java:89)  
> > &nbsp;&nbsp;at org.jboss.netty.channel.socket.nio.NioWorker.run(NioWorker.java:178)  
> > &nbsp;&nbsp;at org.jboss.netty.util.ThreadRenamingRunnable.run(ThreadRenamingRunnable.java:108)  
> > &nbsp;&nbsp;at org.jboss.netty.util.internal.DeadLockProofWorker$1.run(DeadLockProofWorker.java:42)  
> > &nbsp;&nbsp;at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142)  
> > &nbsp;&nbsp;at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617)  
> > &nbsp;&nbsp;at java.lang.Thread.run(Thread.java:745)  
> > [2016-06-15 19:14:43,433][WARN][discovery.zen] [es1] failed to validate incoming join request from node [{es2}{fmvSsmXRQAexQ18k3Eu3eQ}{195.25.97.129}{195.25.97.129:9300}]
> > 
> > in this node, there are some errors:  
> > [2016-06-15 19:14:43,659][INFO][discovery.zen] [es2] failed to send join request to master [{es1}{Ob7nkg6FQjizlguoF5Vw5Q}{195.25.97.128}{195.25.97.128:9300}], reason [RemoteTransportException[[es1][192.25.97.128:9300][internal:discovery/zen/join]]; nested: IllegalStateException[failure when sending a validation request to node]; nested: NodeDisconnectedException[[es2][195.25.97.129:9300][internal:discovery/zen/join/validate] disconnected]; ]  
> > [2016-06-15 19:14:43,656][ERROR][com.floragunn.searchguard.ssl.transport.SearchGuardSSLNettyTransport] [es2] SSL Problem Received fatal alert: handshake\_failure  
> > javax.net.ssl.SSLException: Received fatal alert: handshake\_failure  
> > &nbsp;&nbsp;at sun.security.ssl.Alerts.getSSLException(Alerts.java:208)  
> > &nbsp;&nbsp;at sun.security.ssl.SSLEngineImpl.fatal(SSLEngineImpl.java:1630)  
> > &nbsp;&nbsp;at sun.security.ssl.SSLEngineImpl.fatal(SSLEngineImpl.java:1598)  
> > &nbsp;&nbsp;at sun.security.ssl.SSLEngineImpl.recvAlert(SSLEngineImpl.java:1767)  
> > &nbsp;&nbsp;at sun.security.ssl.SSLEngineImpl.readRecord(SSLEngineImpl.java:1063)  
> > &nbsp;&nbsp;at sun.security.ssl.SSLEngineImpl.readNetRecord(SSLEngineImpl.java:887)  
> > &nbsp;&nbsp;at sun.security.ssl.SSLEngineImpl.unwrap(SSLEngineImpl.java:761)  
> > &nbsp;&nbsp;at javax.net.ssl.SSLEngine.unwrap(SSLEngine.java:624)  
> > &nbsp;&nbsp;at org.jboss.netty.handler.ssl.SslHandler.unwrap(SslHandler.java:1218)  
> > &nbsp;&nbsp;at org.jboss.netty.handler.ssl.SslHandler.decode(SslHandler.java:852)  
> > &nbsp;&nbsp;at org.jboss.netty.handler.codec.frame.FrameDecoder.callDecode(FrameDecoder.java:425)  
> > &nbsp;&nbsp;at org.jboss.netty.handler.codec.frame.FrameDecoder.messageReceived(FrameDecoder.java:303)  
> > &nbsp;&nbsp;at org.jboss.netty.channel.SimpleChannelUpstreamHandler.handleUpstream(SimpleChannelUpstreamHandler.java:70)  
> > &nbsp;&nbsp;at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:564)  
> > &nbsp;&nbsp;at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:559)  
> > &nbsp;&nbsp;at org.jboss.netty.channel.Channels.fireMessageReceived(Channels.java:268)  
> > &nbsp;&nbsp;at org.jboss.netty.channel.Channels.fireMessageReceived(Channels.java:255)  
> > &nbsp;&nbsp;at org.jboss.netty.channel.socket.nio.NioWorker.read(NioWorker.java:88)  
> > &nbsp;&nbsp;at org.jboss.netty.channel.socket.nio.AbstractNioWorker.process(AbstractNioWorker.java:108)  
> > &nbsp;&nbsp;at org.jboss.netty.channel.socket.nio.AbstractNioSelector.run(AbstractNioSelector.java:337)  
> > &nbsp;&nbsp;at org.jboss.netty.channel.socket.nio.AbstractNioWorker.run(AbstractNioWorker.java:89)  
> > &nbsp;&nbsp;at org.jboss.netty.channel.socket.nio.NioWorker.run(NioWorker.java:178)  
> > &nbsp;&nbsp;at org.jboss.netty.util.ThreadRenamingRunnable.run(ThreadRenamingRunnable.java:108)  
> > &nbsp;&nbsp;at org.jboss.netty.util.internal.DeadLockProofWorker$1.run(DeadLockProofWorker.java:42)  
> > &nbsp;&nbsp;at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1145)  
> > &nbsp;&nbsp;at java.util.concurrent.ThreadPoolExecutor$Work
> > 
> > Can you tell me where i have made mistakes? Thanks!
> > 
> > --  
> > You received this message because you are subscribed to the Google Groups "Search Guard" group.  
> > To unsubscribe from this group and stop receiving emails from it, send an email to search-guard+unsubscribe@googlegroups.com.  
> > To post to this group, send email to search-guard@googlegroups.com.  
> > To view this discussion on the web visit [https://groups.google.com/d/msgid/search-guard/58b88103-0edb-4635-8bec-a6c7112be958%40googlegroups.com\](https://groups.google.com/d/msgid/search-guard/58b88103-0edb-4635-8bec-a6c7112be958%40googlegroups.com%5C).  
> > For more options, visit [https://groups.google.com/d/optout\](https://groups.google.com/d/optout%5C).
