Search Guard 2.3.1 use OpenSSL error?

hi,everyone

When I use Search Guard 2.3.1 on my ubuntu 14.04 x64 ,using the default configuration of JDK is no problem.

When I use OpenSSL instead of JDK, Search Guard SSl Available to work:

{

“principal” : null,

“peer_certificates” : “0”,

“ssl_protocol” : null,

“ssl_cipher” : null,

“ssl_openssl_available” : true,

“ssl_openssl_version” : 268439663,

“ssl_openssl_version_string” : “OpenSSL 1.0.1f 6 Jan 2014”,

“ssl_openssl_non_available_cause” : “”,

“ssl_provider_http” : null,

“ssl_provider_transport_server” : “OPENSSL”,

“ssl_provider_transport_client” : “OPENSSL”

}

but,I get the following error in using sgadmin:

yong@yong-XPS-13-9343:/opt/elasticsearch-2.3.1$ plugins/search-guard-2/tools/sgadmin.sh -cd plugins/search-guard-2/sgconfig/ -ks config/kirk-keystore.jks -ts config/truststore.jks -nhnv

Connect to localhost:9300

[15:27:36,704][WARN ] org.elasticsearch.com.floragunn.searchguard.ssl.transport.SearchGuardSSLNettyTransport - [Mountjoy] exception caught on transport layer [[id: 0xd058d27c, /127.0.0.1:53112 => localhost/127.0.0.1:9300]], closing connection

java.lang.AbstractMethodError

at org.apache.tomcat.jni.SSL.readFromSSL(Native Method)

at io.netty.handler.ssl.OpenSslEngine.readPlaintextData(OpenSslEngine.java:371)

at io.netty.handler.ssl.OpenSslEngine.unwrap(OpenSslEngine.java:704)

at io.netty.handler.ssl.OpenSslEngine.unwrap(OpenSslEngine.java:810)

at io.netty.handler.ssl.OpenSslEngine.unwrap(OpenSslEngine.java:853)

at org.jboss.netty.handler.ssl.SslHandler.unwrap(SslHandler.java:1218)

at org.jboss.netty.handler.ssl.SslHandler.decode(SslHandler.java:852)

at org.jboss.netty.handler.codec.frame.FrameDecoder.callDecode(FrameDecoder.java:425)

at org.jboss.netty.handler.codec.frame.FrameDecoder.messageReceived(FrameDecoder.java:303)

at org.jboss.netty.channel.SimpleChannelUpstreamHandler.handleUpstream(SimpleChannelUpstreamHandler.java:70)

at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:564)

at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:559)

at org.jboss.netty.channel.Channels.fireMessageReceived(Channels.java:268)

at org.jboss.netty.channel.Channels.fireMessageReceived(Channels.java:255)

at org.jboss.netty.channel.socket.nio.NioWorker.read(NioWorker.java:88)

at org.jboss.netty.channel.socket.nio.AbstractNioWorker.process(AbstractNioWorker.java:108)

at org.jboss.netty.channel.socket.nio.AbstractNioSelector.run(AbstractNioSelector.java:337)

at org.jboss.netty.channel.socket.nio.AbstractNioWorker.run(AbstractNioWorker.java:89)

at org.jboss.netty.channel.socket.nio.NioWorker.run(NioWorker.java:178)

at org.jboss.netty.util.ThreadRenamingRunnable.run(ThreadRenamingRunnable.java:108)

at org.jboss.netty.util.internal.DeadLockProofWorker$1.run(DeadLockProofWorker.java:42)

at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142)

at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617)

at java.lang.Thread.run(Thread.java:745)

Exception in thread “main” NoNodeAvailableException[None of the configured nodes are available: [{#transport#-1}{127.0.0.1}{localhost/127.0.0.1:9300}]]

at org.elasticsearch.client.transport.TransportClientNodesService.ensureNodesAreAvailable(TransportClientNodesService.java:290)

at org.elasticsearch.client.transport.TransportClientNodesService.execute(TransportClientNodesService.java:207)

at org.elasticsearch.client.transport.support.TransportProxyClient.execute(TransportProxyClient.java:55)

at org.elasticsearch.client.transport.TransportClient.doExecute(TransportClient.java:288)

at org.elasticsearch.client.support.AbstractClient.execute(AbstractClient.java:359)

at org.elasticsearch.client.support.AbstractClient.execute(AbstractClient.java:348)

at org.elasticsearch.client.support.AbstractClient$ClusterAdmin.execute(AbstractClient.java:848)

at org.elasticsearch.client.support.AbstractClient$ClusterAdmin.health(AbstractClient.java:868)

at com.floragunn.searchguard.tools.SearchGuardAdmin.main(SearchGuardAdmin.java:137)

i using netty-tcnative-1.1.33.Fork13-linux-x86_64.jar, jdk 1.8.0_60

Please help me,thanks!

can you pls. try netty-tcnative-1.1.33.Fork15-linux-x86_64.jar

···

Am 12.04.2016 um 09:49 schrieb xiaoyong xu <xiaoyongxxy@gmail.com>:

hi,everyone
When I use Search Guard 2.3.1 on my ubuntu 14.04 x64 ,using the default configuration of JDK is no problem.
When I use OpenSSL instead of JDK, Search Guard SSl Available to work:
{
"principal" : null,
"peer_certificates" : "0",
"ssl_protocol" : null,
"ssl_cipher" : null,
"ssl_openssl_available" : true,
"ssl_openssl_version" : 268439663,
"ssl_openssl_version_string" : "OpenSSL 1.0.1f 6 Jan 2014",
"ssl_openssl_non_available_cause" : "",
"ssl_provider_http" : null,
"ssl_provider_transport_server" : "OPENSSL",
"ssl_provider_transport_client" : "OPENSSL"
}

but,I get the following error in using sgadmin:
yong@yong-XPS-13-9343:/opt/elasticsearch-2.3.1$ plugins/search-guard-2/tools/sgadmin.sh -cd plugins/search-guard-2/sgconfig/ -ks config/kirk-keystore.jks -ts config/truststore.jks -nhnv
Connect to localhost:9300
[15:27:36,704][WARN ] org.elasticsearch.com.floragunn.searchguard.ssl.transport.SearchGuardSSLNettyTransport - [Mountjoy] exception caught on transport layer [[id: 0xd058d27c, /127.0.0.1:53112 => localhost/127.0.0.1:9300]], closing connection
java.lang.AbstractMethodError
  at org.apache.tomcat.jni.SSL.readFromSSL(Native Method)
  at io.netty.handler.ssl.OpenSslEngine.readPlaintextData(OpenSslEngine.java:371)
  at io.netty.handler.ssl.OpenSslEngine.unwrap(OpenSslEngine.java:704)
  at io.netty.handler.ssl.OpenSslEngine.unwrap(OpenSslEngine.java:810)
  at io.netty.handler.ssl.OpenSslEngine.unwrap(OpenSslEngine.java:853)
  at org.jboss.netty.handler.ssl.SslHandler.unwrap(SslHandler.java:1218)
  at org.jboss.netty.handler.ssl.SslHandler.decode(SslHandler.java:852)
  at org.jboss.netty.handler.codec.frame.FrameDecoder.callDecode(FrameDecoder.java:425)
  at org.jboss.netty.handler.codec.frame.FrameDecoder.messageReceived(FrameDecoder.java:303)
  at org.jboss.netty.channel.SimpleChannelUpstreamHandler.handleUpstream(SimpleChannelUpstreamHandler.java:70)
  at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:564)
  at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:559)
  at org.jboss.netty.channel.Channels.fireMessageReceived(Channels.java:268)
  at org.jboss.netty.channel.Channels.fireMessageReceived(Channels.java:255)
  at org.jboss.netty.channel.socket.nio.NioWorker.read(NioWorker.java:88)
  at org.jboss.netty.channel.socket.nio.AbstractNioWorker.process(AbstractNioWorker.java:108)
  at org.jboss.netty.channel.socket.nio.AbstractNioSelector.run(AbstractNioSelector.java:337)
  at org.jboss.netty.channel.socket.nio.AbstractNioWorker.run(AbstractNioWorker.java:89)
  at org.jboss.netty.channel.socket.nio.NioWorker.run(NioWorker.java:178)
  at org.jboss.netty.util.ThreadRenamingRunnable.run(ThreadRenamingRunnable.java:108)
  at org.jboss.netty.util.internal.DeadLockProofWorker$1.run(DeadLockProofWorker.java:42)
  at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142)
  at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617)
  at java.lang.Thread.run(Thread.java:745)
Exception in thread "main" NoNodeAvailableException[None of the configured nodes are available: [{#transport#-1}{127.0.0.1}{localhost/127.0.0.1:9300}]]
  at org.elasticsearch.client.transport.TransportClientNodesService.ensureNodesAreAvailable(TransportClientNodesService.java:290)
  at org.elasticsearch.client.transport.TransportClientNodesService.execute(TransportClientNodesService.java:207)
  at org.elasticsearch.client.transport.support.TransportProxyClient.execute(TransportProxyClient.java:55)
  at org.elasticsearch.client.transport.TransportClient.doExecute(TransportClient.java:288)
  at org.elasticsearch.client.support.AbstractClient.execute(AbstractClient.java:359)
  at org.elasticsearch.client.support.AbstractClient.execute(AbstractClient.java:348)
  at org.elasticsearch.client.support.AbstractClient$ClusterAdmin.execute(AbstractClient.java:848)
  at org.elasticsearch.client.support.AbstractClient$ClusterAdmin.health(AbstractClient.java:868)
  at com.floragunn.searchguard.tools.SearchGuardAdmin.main(SearchGuardAdmin.java:137)

i using netty-tcnative-1.1.33.Fork13-linux-x86_64.jar, jdk 1.8.0_60
Please help me,thanks!

--
You received this message because you are subscribed to the Google Groups "Search Guard" group.
To unsubscribe from this group and stop receiving emails from it, send an email to search-guard+unsubscribe@googlegroups.com.
To post to this group, send email to search-guard@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/search-guard/9516a49f-64ac-4626-baf7-a317b7a9ea00%40googlegroups.com\.
For more options, visit https://groups.google.com/d/optout\.

can you pls. try netty-tcnative-1.1.33.Fork15-linux-x86_64.jar

hi,everyone

When I use Search Guard 2.3.1 on my ubuntu 14.04 x64 ,using the default configuration of JDK is no problem.

When I use OpenSSL instead of JDK, Search Guard SSl Available to work:

{

“principal” : null,

“peer_certificates” : “0”,

“ssl_protocol” : null,

“ssl_cipher” : null,

“ssl_openssl_available” : true,

“ssl_openssl_version” : 268439663,

“ssl_openssl_version_string” : “OpenSSL 1.0.1f 6 Jan 2014”,

“ssl_openssl_non_available_cause” : “”,

“ssl_provider_http” : null,

“ssl_provider_transport_server” : “OPENSSL”,

“ssl_provider_transport_client” : “OPENSSL”

}

but,I get the following error in using sgadmin:

yong@yong-XPS-13-9343:/opt/elasticsearch-2.3.1$ plugins/search-guard-2/tools/sgadmin.sh -cd plugins/search-guard-2/sgconfig/ -ks config/kirk-keystore.jks -ts config/truststore.jks -nhnv

Connect to localhost:9300

[15:27:36,704][WARN ] org.elasticsearch.com.floragunn.searchguard.ssl.transport.SearchGuardSSLNettyTransport - [Mountjoy] exception caught on transport layer [[id: 0xd058d27c, /127.0.0.1:53112 => localhost/127.0.0.1:9300]], closing connection

java.lang.AbstractMethodError

    at org.apache.tomcat.jni.SSL.readFromSSL(Native Method)
    at io.netty.handler.ssl.OpenSslEngine.readPlaintextData(OpenSslEngine.java:371)
    at io.netty.handler.ssl.OpenSslEngine.unwrap(OpenSslEngine.java:704)
    at io.netty.handler.ssl.OpenSslEngine.unwrap(OpenSslEngine.java:810)
    at io.netty.handler.ssl.OpenSslEngine.unwrap(OpenSslEngine.java:853)
    at org.jboss.netty.handler.ssl.SslHandler.unwrap(SslHandler.java:1218)
    at org.jboss.netty.handler.ssl.SslHandler.decode(SslHandler.java:852)
    at org.jboss.netty.handler.codec.frame.FrameDecoder.callDecode(FrameDecoder.java:425)
    at org.jboss.netty.handler.codec.frame.FrameDecoder.messageReceived(FrameDecoder.java:303)
    at org.jboss.netty.channel.SimpleChannelUpstreamHandler.handleUpstream(SimpleChannelUpstreamHandler.java:70)
    at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:564)
    at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:559)
    at org.jboss.netty.channel.Channels.fireMessageReceived(Channels.java:268)
    at org.jboss.netty.channel.Channels.fireMessageReceived(Channels.java:255)
    at org.jboss.netty.channel.socket.nio.NioWorker.read(NioWorker.java:88)
    at org.jboss.netty.channel.socket.nio.AbstractNioWorker.process(AbstractNioWorker.java:108)
    at org.jboss.netty.channel.socket.nio.AbstractNioSelector.run(AbstractNioSelector.java:337)
    at org.jboss.netty.channel.socket.nio.AbstractNioWorker.run(AbstractNioWorker.java:89)
    at org.jboss.netty.channel.socket.nio.NioWorker.run(NioWorker.java:178)
    at org.jboss.netty.util.ThreadRenamingRunnable.run(ThreadRenamingRunnable.java:108)
    at org.jboss.netty.util.internal.DeadLockProofWorker$1.run(DeadLockProofWorker.java:42)
    at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142)
    at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617)
    at java.lang.Thread.run(Thread.java:745)

Exception in thread “main” NoNodeAvailableException[None of the configured nodes are available: [{#transport#-1}{127.0.0.1}{localhost/127.0.0.1:9300}]]

    at org.elasticsearch.client.transport.TransportClientNodesService.ensureNodesAreAvailable(TransportClientNodesService.java:290)
    at org.elasticsearch.client.transport.TransportClientNodesService.execute(TransportClientNodesService.java:207)
    at org.elasticsearch.client.transport.support.TransportProxyClient.execute(TransportProxyClient.java:55)
    at org.elasticsearch.client.transport.TransportClient.doExecute(TransportClient.java:288)
    at org.elasticsearch.client.support.AbstractClient.execute(AbstractClient.java:359)
    at org.elasticsearch.client.support.AbstractClient.execute(AbstractClient.java:348)
    at org.elasticsearch.client.support.AbstractClient$ClusterAdmin.execute(AbstractClient.java:848)
    at org.elasticsearch.client.support.AbstractClient$ClusterAdmin.health(AbstractClient.java:868)
    at com.floragunn.searchguard.tools.SearchGuardAdmin.main(SearchGuardAdmin.java:137)

i using netty-tcnative-1.1.33.Fork13-linux-x86_64.jar, jdk 1.8.0_60

Please help me,thanks!


You received this message because you are subscribed to the Google Groups “Search Guard” group.

To unsubscribe from this group and stop receiving emails from it, send an email to search-guard...@googlegroups.com.

To post to this group, send email to search...@googlegroups.com.

To view this discussion on the web visit https://groups.google.com/d/msgid/search-guard/9516a49f-64ac-4626-baf7-a317b7a9ea00%40googlegroups.com.

For more options, visit https://groups.google.com/d/optout.

thanks ,netty-tcnative-1.1.33.Fork15-linux-x86_64.jar can work.

在 2016年4月12日星期二 UTC+8下午4:28:18,SG写道:

···

Am 12.04.2016 um 09:49 schrieb xiaoyong xu xiaoy...@gmail.com: