Search Guard 2.3.1 use OpenSSL error?

[xiaoyong xu]

hi,everyone

When I use Search Guard 2.3.1 on my ubuntu 14.04 x64 ,using the default configuration of JDK is no problem.

When I use OpenSSL instead of JDK, Search Guard SSl Available to work:

{

  "principal" : null,

  "peer_certificates" : "0",

  "ssl_protocol" : null,

  "ssl_cipher" : null,

  "ssl_openssl_available" : true,

  "ssl_openssl_version" : 268439663,

  "ssl_openssl_version_string" : "OpenSSL 1.0.1f 6 Jan 2014",

  "ssl_openssl_non_available_cause" : "",

  "ssl_provider_http" : null,

  "ssl_provider_transport_server" : "OPENSSL",

  "ssl_provider_transport_client" : "OPENSSL"

}

but,I get the following error in using sgadmin:

yong@yong-XPS-13-9343:/opt/elasticsearch-2.3.1$ plugins/search-guard-2/tools/sgadmin.sh -cd plugins/search-guard-2/sgconfig/ -ks config/kirk-keystore.jks -ts config/truststore.jks  -nhnv

Connect to localhost:9300

[15:27:36,704][WARN ] org.elasticsearch.com.floragunn.searchguard.ssl.transport.SearchGuardSSLNettyTransport - [Mountjoy] exception caught on transport layer [[id: 0xd058d27c, /127.0.0.1:53112 => localhost/127.0.0.1:9300]], closing connection

java.lang.AbstractMethodError

at org.apache.tomcat.jni.SSL.readFromSSL(Native Method)

at io.netty.handler.ssl.OpenSslEngine.readPlaintextData(OpenSslEngine.java:371)

at io.netty.handler.ssl.OpenSslEngine.unwrap(OpenSslEngine.java:704)

at io.netty.handler.ssl.OpenSslEngine.unwrap(OpenSslEngine.java:810)

at io.netty.handler.ssl.OpenSslEngine.unwrap(OpenSslEngine.java:853)

at org.jboss.netty.handler.ssl.SslHandler.unwrap(SslHandler.java:1218)

at org.jboss.netty.handler.ssl.SslHandler.decode(SslHandler.java:852)

at org.jboss.netty.handler.codec.frame.FrameDecoder.callDecode(FrameDecoder.java:425)

at org.jboss.netty.handler.codec.frame.FrameDecoder.messageReceived(FrameDecoder.java:303)

at org.jboss.netty.channel.SimpleChannelUpstreamHandler.handleUpstream(SimpleChannelUpstreamHandler.java:70)

at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:564)

at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:559)

at org.jboss.netty.channel.Channels.fireMessageReceived(Channels.java:268)

at org.jboss.netty.channel.Channels.fireMessageReceived(Channels.java:255)

at org.jboss.netty.channel.socket.nio.NioWorker.read(NioWorker.java:88)

at org.jboss.netty.channel.socket.nio.AbstractNioWorker.process(AbstractNioWorker.java:108)

at org.jboss.netty.channel.socket.nio.AbstractNioSelector.run(AbstractNioSelector.java:337)

at org.jboss.netty.channel.socket.nio.AbstractNioWorker.run(AbstractNioWorker.java:89)

at org.jboss.netty.channel.socket.nio.NioWorker.run(NioWorker.java:178)

at org.jboss.netty.util.ThreadRenamingRunnable.run(ThreadRenamingRunnable.java:108)

at org.jboss.netty.util.internal.DeadLockProofWorker$1.run(DeadLockProofWorker.java:42)

at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142)

at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617)

at java.lang.Thread.run(Thread.java:745)

Exception in thread "main" NoNodeAvailableException[None of the configured nodes are available: [{#transport#-1}{127.0.0.1}{localhost/127.0.0.1:9300}]]

at org.elasticsearch.client.transport.TransportClientNodesService.ensureNodesAreAvailable(TransportClientNodesService.java:290)

at org.elasticsearch.client.transport.TransportClientNodesService.execute(TransportClientNodesService.java:207)

at org.elasticsearch.client.transport.support.TransportProxyClient.execute(TransportProxyClient.java:55)

at org.elasticsearch.client.transport.TransportClient.doExecute(TransportClient.java:288)

at org.elasticsearch.client.support.AbstractClient.execute(AbstractClient.java:359)

at org.elasticsearch.client.support.AbstractClient.execute(AbstractClient.java:348)

at org.elasticsearch.client.support.AbstractClient$ClusterAdmin.execute(AbstractClient.java:848)

at org.elasticsearch.client.support.AbstractClient$ClusterAdmin.health(AbstractClient.java:868)

at com.floragunn.searchguard.tools.SearchGuardAdmin.main(SearchGuardAdmin.java:137)

i using netty-tcnative-1.1.33.Fork13-linux-x86_64.jar, jdk 1.8.0_60

Please help me,thanks!

[SG]

can you pls. try netty-tcnative-1.1.33.Fork15-linux-x86_64.jar

> --
> You received this message because you are subscribed to the Google Groups "Search Guard" group.
> To unsubscribe from this group and stop receiving emails from it, send an email to search-guard...@googlegroups.com.
> To post to this group, send email to search...@googlegroups.com.
> To view this discussion on the web visit https://groups.google.com/d/msgid/search-guard/9516a49f-64ac-4626-baf7-a317b7a9ea00%40googlegroups.com.
> For more options, visit https://groups.google.com/d/optout.

[xiaoyong xu]

thanks ,netty-tcnative-1.1.33.Fork15-linux-x86_64.jar  can  work.

在 2016年4月12日星期二 UTC+8下午4:28:18，SG写道：