Uploaded image for project: 'Flink'
  1. Flink
  2. FLINK-21414

javax.net.ssl.SSLHandshakeException: Received fatal alert: certificate_unknown

    XMLWordPrintableJSON

Details

    • Bug
    • Status: Closed
    • Critical
    • Resolution: Won't Fix
    • 1.12.0
    • 1.12.0
    • None
    • flink@flink-jobmanager-5d9594b76c-t6cc8:~$ cat /etc/os-release
      PRETTY_NAME="Debian GNU/Linux 10 (buster)"
      NAME="Debian GNU/Linux"
      VERSION_ID="10"
      VERSION="10 (buster)"
      VERSION_CODENAME=buster
      ID=debian

    • Important

    Description

      Enabled High availability for FLink with kubernetes API with Leader election and retirieval mechanism,After configuring HA parameters with Leader election and Leader retrival ..I started getting this error in job manager logs.

      error logs in job manager logs:

      at org.apache.flink.shaded.netty4.io.netty.handler.ssl.SslHandler$SslEngineType$3.unwrap(SslHandler.java:282) ~[flink-dist_2.11-1.12.0.jar:1.12.0]
      at org.apache.flink.shaded.netty4.io.netty.handler.ssl.SslHandler.unwrap(SslHandler.java:1372) ~[flink-dist_2.11-1.12.0.jar:1.12.0]
      at org.apache.flink.shaded.netty4.io.netty.handler.ssl.SslHandler.decodeJdkCompatible(SslHandler.java:1267) ~[flink-dist_2.11-1.12.0.jar:1.12.0]
      at org.apache.flink.shaded.netty4.io.netty.handler.ssl.SslHandler.decode(SslHandler.java:1314) ~[flink-dist_2.11-1.12.0.jar:1.12.0]
      at org.apache.flink.shaded.netty4.io.netty.handler.codec.ByteToMessageDecoder.decodeRemovalReentryProtection(ByteToMessageDecoder.java:501) ~[flink-dist_2.11-1.12.0.jar:1.12.0]
      at org.apache.flink.shaded.netty4.io.netty.handler.codec.ByteToMessageDecoder.callDecode(ByteToMessageDecoder.java:440) ~[flink-dist_2.11-1.12.0.jar:1.12.0]
      ... 16 more
      2021-02-19 06:11:04,358 WARN org.apache.flink.runtime.dispatcher.DispatcherRestEndpoint [] - Unhandled exception
      org.apache.flink.shaded.netty4.io.netty.handler.codec.DecoderException: javax.net.ssl.SSLHandshakeException: Received fatal alert: certificate_unknown
      at org.apache.flink.shaded.netty4.io.netty.handler.codec.ByteToMessageDecoder.callDecode(ByteToMessageDecoder.java:471) ~[flink-dist_2.11-1.12.0.jar:1.12.0]
      at org.apache.flink.shaded.netty4.io.netty.handler.codec.ByteToMessageDecoder.channelRead(ByteToMessageDecoder.java:276) ~[flink-dist_2.11-1.12.0.jar:1.12.0]
      at org

       

      UI is throwing error:

      {"errors":["Service temporarily unavailable due to an ongoing leader election. Please refresh."]}

      [link title|http://example.com|http://example.com]/]

      Attachments

        Issue Links

          Activity

            People

              Unassigned Unassigned
              bhagi__R Bhagi
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: