[FLINK-21414] javax.net.ssl.SSLHandshakeException: Received fatal alert: certificate_unknown

• Type: Bug
• Status: Closed
• Priority: Critical
• Resolution: Won't Fix
• Affects Version/s: 1.12.0
• Fix Version/s: 1.12.0
• Component/s: Deployment / Kubernetes

Environment

flink@flink-jobmanager-5d9594b76c-t6cc8:~$ cat /etc/os-release
PRETTY_NAME="Debian GNU/Linux 10 (buster)"
NAME="Debian GNU/Linux"
VERSION_ID="10"
VERSION="10 (buster)"
VERSION_CODENAME=buster
ID=debian

• Flags: Important
• Assignee: Unassigned
• Reporter: Bhagi
• Created: 19/Feb/21 06:58
• Updated: 16/Mar/21 12:15
• Resolved: 16/Mar/21 12:15

Description

Enabled High availability for FLink with kubernetes API with Leader election and retirieval mechanism,After configuring HA parameters with Leader election and Leader retrival ..I started getting this error in job manager logs.

error logs in job manager logs:

at org.apache.flink.shaded.netty4.io.netty.handler.ssl.SslHandler$SslEngineType$3.unwrap(SslHandler.java:282) ~[flink-dist_2.11-1.12.0.jar:1.12.0]
at org.apache.flink.shaded.netty4.io.netty.handler.ssl.SslHandler.unwrap(SslHandler.java:1372) ~[flink-dist_2.11-1.12.0.jar:1.12.0]
at org.apache.flink.shaded.netty4.io.netty.handler.ssl.SslHandler.decodeJdkCompatible(SslHandler.java:1267) ~[flink-dist_2.11-1.12.0.jar:1.12.0]
at org.apache.flink.shaded.netty4.io.netty.handler.ssl.SslHandler.decode(SslHandler.java:1314) ~[flink-dist_2.11-1.12.0.jar:1.12.0]
at org.apache.flink.shaded.netty4.io.netty.handler.codec.ByteToMessageDecoder.decodeRemovalReentryProtection(ByteToMessageDecoder.java:501) ~[flink-dist_2.11-1.12.0.jar:1.12.0]
at org.apache.flink.shaded.netty4.io.netty.handler.codec.ByteToMessageDecoder.callDecode(ByteToMessageDecoder.java:440) ~[flink-dist_2.11-1.12.0.jar:1.12.0]
... 16 more
2021-02-19 06:11:04,358 WARN org.apache.flink.runtime.dispatcher.DispatcherRestEndpoint [] - Unhandled exception
org.apache.flink.shaded.netty4.io.netty.handler.codec.DecoderException: javax.net.ssl.SSLHandshakeException: Received fatal alert: certificate_unknown
at org.apache.flink.shaded.netty4.io.netty.handler.codec.ByteToMessageDecoder.callDecode(ByteToMessageDecoder.java:471) ~[flink-dist_2.11-1.12.0.jar:1.12.0]
at org.apache.flink.shaded.netty4.io.netty.handler.codec.ByteToMessageDecoder.channelRead(ByteToMessageDecoder.java:276) ~[flink-dist_2.11-1.12.0.jar:1.12.0]
at org

 

UI is throwing error:

{"errors":["Service temporarily unavailable due to an ongoing leader election. Please refresh."]}

[link title|http://example.com|http://example.com]/]

Issue Links

• is related to: FLINK-21432 Web UI -- Error - {"errors":["Service temporarily unavailable due to an ongoing leader election. Please refresh."]}