gRPC Netty exception when using proxyless xDS based example with TLS

Oleg Cohen

unread,

Feb 2, 2023, 10:22:02 PM2/2/23

to grpc.io

Greetings,

I have gotten the XDS example working with Java Control Plane. When I added TLS-based creds, the example works correctly, but I observe the following execption on the gRPC xDS-based client:

java.util.NoSuchElementException: SecurityProtocolNegotiators$ClientSdsHandler#0

Below is more info on the contex where the issue occured.

In the code in SecurityProtocolNegotiators class the exception occurs in this code segment:

@Override

public void updateSslContext(SslContext sslContext) {

logger.log(

Level.FINEST,

"ClientSdsHandler.updateSslContext authority={0}, ctx.name={1}",

new Object[]{grpcHandler.getAuthority(), ctx.name()});

ChannelHandler handler =

InternalProtocolNegotiators.tls(sslContext).newHandler(grpcHandler);

// Delegate rest of handshake to TLS handler

ctx.pipeline().addAfter(ctx.name(), null, handler);

fireProtocolNegotiationEvent(ctx);

ctx.pipeline().remove(bufferReads);

}

@Override

public void onException(Throwable throwable) {

ctx.fireExceptionCaught(throwable);

}

Would appreciate any info on what causes the exception and whether it needs to be handled/ignored!

Thanks,

Oleg

A20:08:52.692 [fileWatcher-0] DEBUG io.grpc.netty.shaded.io.netty.handler.ssl.OpenSsl - Supported protocols (OpenSSL): [SSLv2Hello, TLSv1, TLSv1.1, TLSv1.2, TLSv1.3]

20:08:52.692 [fileWatcher-0] DEBUG io.grpc.netty.shaded.io.netty.handler.ssl.OpenSsl - Default cipher suites (OpenSSL): [TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA, TLS_RSA_WITH_AES_128_GCM_SHA256, TLS_RSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_AES_256_CBC_SHA, TLS_AES_128_GCM_SHA256, TLS_AES_256_GCM_SHA384, TLS_AES_128_GCM_SHA256, TLS_AES_256_GCM_SHA384, TLS_AES_128_GCM_SHA256, TLS_AES_256_GCM_SHA384, TLS_CHACHA20_POLY1305_SHA256]

[2023-02-02 20:08:52] [FINE ] Selecting OPENSSL

20:08:52.830 [fileWatcher-0] DEBUG io.grpc.netty.shaded.io.netty.util.ResourceLeakDetectorFactory - Loaded default ResourceLeakDetector: io.grpc.netty.shaded.io.netty.util.ResourceLeakDetector@7cf88c53

[2023-02-02 20:08:52] [FINEST ] ClientSdsHandler.updateSslContext authority=be-srv, ctx.name=SecurityProtocolNegotiators$ClientSdsHandler#0

[2023-02-02 20:08:52] [FINEST ] [NettyClientTransport<23>: (be.cluster.local/127.0.0.1:50051)] WaitUntilActive started

[2023-02-02 20:08:52] [FINER ] [NettyClientTransport<23>: (be.cluster.local/127.0.0.1:50051)] ClientSds completed

20:08:52.838 [grpc-nio-worker-ELG-1-7] WARN io.grpc.netty.shaded.io.netty.channel.DefaultChannelPipeline - An exceptionCaught() event was fired, and it reached at the tail of the pipeline. It usually means the last handler in the pipeline did not handle the exception.

java.util.NoSuchElementException: SecurityProtocolNegotiators$ClientSdsHandler#0

at io.grpc.netty.shaded.io.netty.channel.DefaultChannelPipeline.getContextOrDie(DefaultChannelPipeline.java:1073)

at io.grpc.netty.shaded.io.netty.channel.DefaultChannelPipeline.addAfter(DefaultChannelPipeline.java:302)

at io.grpc.netty.shaded.io.netty.channel.DefaultChannelPipeline.addAfter(DefaultChannelPipeline.java:290)

at io.grpc.xds.internal.security.SecurityProtocolNegotiators$ClientSdsHandler$2.updateSslContext(SecurityProtocolNegotiators.java:220)

at io.grpc.xds.internal.security.SslContextProviderSupplier$1.updateSslContext(SslContextProviderSupplier.java:70)

at io.grpc.xds.internal.security.SslContextProvider$1.run(SslContextProvider.java:123)

at io.grpc.netty.shaded.io.netty.util.concurrent.AbstractEventExecutor.runTask(AbstractEventExecutor.java:174)

at io.grpc.netty.shaded.io.netty.util.concurrent.AbstractEventExecutor.safeExecute(AbstractEventExecutor.java:167)

at io.grpc.netty.shaded.io.netty.util.concurrent.SingleThreadEventExecutor.runAllTasks(SingleThreadEventExecutor.java:470)

at io.grpc.netty.shaded.io.netty.channel.nio.NioEventLoop.run(NioEventLoop.java:503)

at io.grpc.netty.shaded.io.netty.util.concurrent.SingleThreadEventExecutor$4.run(SingleThreadEventExecutor.java:997)

at io.grpc.netty.shaded.io.netty.util.internal.ThreadExecutorMap$2.run(ThreadExecutorMap.java:74)

at io.grpc.netty.shaded.io.netty.util.concurrent.FastThreadLocalRunnable.run(FastThreadLocalRunnable.java:30)

at java.base/java.lang.Thread.run(Thread.java:833)

20:08:52.838 [grpc-nio-worker-ELG-1-8] WARN io.grpc.netty.shaded.io.netty.channel.DefaultChannelPipeline - An exceptionCaught() event was fired, and it reached at the tail of the pipeline. It usually means the last handler in the pipeline did not handle the exception.