Open SSL not available (this is not an error, we simply fallback to built-in JDK SSL)

261 views
Skip to first unread message

江榕

unread,
Oct 21, 2016, 12:02:34 PM10/21/16
to Search Guard
Hi folks:
I have installed elasticsearch-2.3.5 in CentOS6
The searchguard and searchguardssl version is also 2.3.5.
Because of the performance, I want to encrypt transport data between by utilizing openssl.
I config the searchguardssl by following steps on the document https://github.com/floragunncom/search-guard-ssl-docs/blob/master/openssl.md
I downloaded http://repo1.maven.org/maven2/io/netty/netty-tcnative/1.1.33.Fork17/netty-tcnative-1.1.33.Fork17-linux-x86_64-fedora.jar, placed in plugins/search-guard-ssl/ directory, install openssl 1.0.1u and apr1.5.2, config elasticsearch.yml
However the following error still occurs:
[2016-10-21 23:48:18,491][INFO ][com.floragunn.searchguard.ssl.SearchGuardKeyStore] Open SSL not available (this is not an error, we simply fallback to built-in JDK SSL) because of java.lang.IllegalArgumentException: Failed to load any of the given libraries: [netty-tcnative-linux-x86_64, netty-tcnative-linux-x86_64-fedora, netty-tcnative]

Please notice that the version netty-tcnative is according to the Dockerfile of searchguardssl 2.3.5.

Could someone help me to fix the problem?

best regards
leozkl

郭旭

unread,
Oct 22, 2016, 6:43:06 AM10/22/16
to search...@googlegroups.com
I think where same problem  with your install .I use es 2.3.3 and search guard 2.3.3 too  .

--
You received this message because you are subscribed to the Google Groups "Search Guard" group.
To unsubscribe from this group and stop receiving emails from it, send an email to search-guard+unsubscribe@googlegroups.com.
To post to this group, send email to search...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/search-guard/02dd6fc5-1661-432f-ba31-738476627284%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

江榕

unread,
Oct 26, 2016, 1:39:52 AM10/26/16
to Search Guard
Have you solved this problem?

在 2016年10月22日星期六 UTC+8下午6:43:06,郭旭写道:
I think where same problem  with your install .I use es 2.3.3 and search guard 2.3.3 too  .
2016-10-22 0:02 GMT+08:00 江榕 <leorji...@gmail.com>:
Hi folks:
I have installed elasticsearch-2.3.5 in CentOS6
The searchguard and searchguardssl version is also 2.3.5.
Because of the performance, I want to encrypt transport data between by utilizing openssl.
I config the searchguardssl by following steps on the document https://github.com/floragunncom/search-guard-ssl-docs/blob/master/openssl.md
I downloaded http://repo1.maven.org/maven2/io/netty/netty-tcnative/1.1.33.Fork17/netty-tcnative-1.1.33.Fork17-linux-x86_64-fedora.jar, placed in plugins/search-guard-ssl/ directory, install openssl 1.0.1u and apr1.5.2, config elasticsearch.yml
However the following error still occurs:
[2016-10-21 23:48:18,491][INFO ][com.floragunn.searchguard.ssl.SearchGuardKeyStore] Open SSL not available (this is not an error, we simply fallback to built-in JDK SSL) because of java.lang.IllegalArgumentException: Failed to load any of the given libraries: [netty-tcnative-linux-x86_64, netty-tcnative-linux-x86_64-fedora, netty-tcnative]

Please notice that the version netty-tcnative is according to the Dockerfile of searchguardssl 2.3.5.

Could someone help me to fix the problem?

best regards
leozkl

--
You received this message because you are subscribed to the Google Groups "Search Guard" group.
To unsubscribe from this group and stop receiving emails from it, send an email to search-guard...@googlegroups.com.

in...@search-guard.com

unread,
Oct 26, 2016, 2:22:57 PM10/26/16
to Search Guard
Whats your JDK version and vendor?
Did you install netty-tcnative-1.1.33.Fork17-linux-x86_64-fedora.jar on every node?
Can you trnetty-tcnative-1.1.33.Fork17-linux-x86_64.jar?

江榕

unread,
Oct 26, 2016, 10:05:33 PM10/26/16
to Search Guard
java version "1.8.0_92"
I have tried netty-tcnative-1.1.33.Fork17-linux-x86_64-fedora.jar and netty-tcnative-1.1.33.Fork17-linux-x86_64.jar, they all don't work.
Is there statically linked package for searchguardssl2.3.5?

在 2016年10月27日星期四 UTC+8上午2:22:57,in...@search-guard.com写道:

郭旭

unread,
Oct 28, 2016, 3:13:36 AM10/28/16
to search...@googlegroups.com
ye, I rewrite some search guard code........

To unsubscribe from this group and stop receiving emails from it, send an email to search-guard+unsubscribe@googlegroups.com.

To post to this group, send email to search...@googlegroups.com.

7758...@qq.com

unread,
Jun 25, 2018, 3:41:07 AM6/25/18
to Search Guard Community Forum
您好,请问是怎么修改的呀??

在 2016年10月28日星期五 UTC+8下午3:13:36,郭旭写道:

7758...@qq.com

unread,
Jun 25, 2018, 4:11:12 AM6/25/18
to Search Guard Community Forum
how to install netty-tcnative-1.1.33.Fork17-linux-x86_64-fedora.jar on every node?

在 2016年10月27日星期四 UTC+8上午2:22:57,Search Guard写道:
Reply all
Reply to author
Forward
0 new messages