Node failed join the cluster

266 views

Skip to first unread message

fzuho...@gmail.com

unread,

Jun 15, 2016, 7:33:04 AM6/15/16

to Search Guard

Hi. everybody. I met a problem with the search guard.

My version:

elasticserach-2.3.3

search-guard-2-2.3.3.0-beta3

search-guard-ssl-2.3.3.10

There are 3 node in my cluster.

I have start one node successfully. But when i start another node, there are some error in the first node :

[2016-06-15 19:14:43,432][ERROR][com.floragunn.searchguard.ssl.transport.SearchGuardSSLNettyTransport] [es1] SSL Problem error:14082174:SSL routines:SSL3_CHECK_CERT_AND_ALGORITHM:dh key too small

javax.net.ssl.SSLHandshakeException: error:14082174:SSL routines:SSL3_CHECK_CERT_AND_ALGORITHM:dh key too small

at io.netty.handler.ssl.OpenSslEngine.sslReadErrorResult(OpenSslEngine.java:774)

at io.netty.handler.ssl.OpenSslEngine.unwrap(OpenSslEngine.java:733)

at io.netty.handler.ssl.OpenSslEngine.unwrap(OpenSslEngine.java:810)

at io.netty.handler.ssl.OpenSslEngine.unwrap(OpenSslEngine.java:853)

at org.jboss.netty.handler.ssl.SslHandler.unwrap(SslHandler.java:1218)

at org.jboss.netty.handler.ssl.SslHandler.decode(SslHandler.java:852)

at org.jboss.netty.handler.codec.frame.FrameDecoder.callDecode(FrameDecoder.java:425)

at org.jboss.netty.handler.codec.frame.FrameDecoder.messageReceived(FrameDecoder.java:310)

at org.jboss.netty.channel.SimpleChannelUpstreamHandler.handleUpstream(SimpleChannelUpstreamHandler.java:70)

at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:564)

at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:559)

at org.jboss.netty.channel.Channels.fireMessageReceived(Channels.java:268)

at org.jboss.netty.channel.Channels.fireMessageReceived(Channels.java:255)

at org.jboss.netty.channel.socket.nio.NioWorker.read(NioWorker.java:88)

at org.jboss.netty.channel.socket.nio.AbstractNioWorker.process(AbstractNioWorker.java:108)

at org.jboss.netty.channel.socket.nio.AbstractNioSelector.run(AbstractNioSelector.java:337)

at org.jboss.netty.channel.socket.nio.AbstractNioWorker.run(AbstractNioWorker.java:89)

at org.jboss.netty.channel.socket.nio.NioWorker.run(NioWorker.java:178)

at org.jboss.netty.util.ThreadRenamingRunnable.run(ThreadRenamingRunnable.java:108)

at org.jboss.netty.util.internal.DeadLockProofWorker$1.run(DeadLockProofWorker.java:42)

at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142)

at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617)

at java.lang.Thread.run(Thread.java:745)

[2016-06-15 19:14:43,433][WARN ][discovery.zen ] [es1] failed to validate incoming join request from node [{es2}{fmvSsmXRQAexQ18k3Eu3eQ}{195.25.97.129}{195.25.97.129:9300}]

in this node, there are some errors:

[2016-06-15 19:14:43,659][INFO ][discovery.zen ] [es2] failed to send join request to master [{es1}{Ob7nkg6FQjizlguoF5Vw5Q}{195.25.97.128}{195.25.97.128:9300}], reason [RemoteTransportException[[es1][192.25.97.128:9300][internal:discovery/zen/join]]; nested: IllegalStateException[failure when sending a validation request to node]; nested: NodeDisconnectedException[[es2][195.25.97.129:9300][internal:discovery/zen/join/validate] disconnected]; ]

[2016-06-15 19:14:43,656][ERROR][com.floragunn.searchguard.ssl.transport.SearchGuardSSLNettyTransport] [es2] SSL Problem Received fatal alert: handshake_failure

javax.net.ssl.SSLException: Received fatal alert: handshake_failure

at sun.security.ssl.Alerts.getSSLException(Alerts.java:208)

at sun.security.ssl.SSLEngineImpl.fatal(SSLEngineImpl.java:1630)

at sun.security.ssl.SSLEngineImpl.fatal(SSLEngineImpl.java:1598)

at sun.security.ssl.SSLEngineImpl.recvAlert(SSLEngineImpl.java:1767)

at sun.security.ssl.SSLEngineImpl.readRecord(SSLEngineImpl.java:1063)

at sun.security.ssl.SSLEngineImpl.readNetRecord(SSLEngineImpl.java:887)

at sun.security.ssl.SSLEngineImpl.unwrap(SSLEngineImpl.java:761)

at javax.net.ssl.SSLEngine.unwrap(SSLEngine.java:624)

at org.jboss.netty.handler.ssl.SslHandler.unwrap(SslHandler.java:1218)

at org.jboss.netty.handler.ssl.SslHandler.decode(SslHandler.java:852)

at org.jboss.netty.handler.codec.frame.FrameDecoder.callDecode(FrameDecoder.java:425)

at org.jboss.netty.handler.codec.frame.FrameDecoder.messageReceived(FrameDecoder.java:303)