[IGNITE-4147] SSL misconfiguration is not handled properly

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 1.7
• Fix Version/s: 2.0
• Component/s: general
• Assignee: Dmitry Karachentsev
• Reporter: Valentin Kulichenko
• Created: 27/Oct/16 23:28
• Updated: 03/Dec/21 10:19
• Resolved: 17/Feb/17 09:36

Description

Currently, if one tries to start a node with incorrect SSL configuration (i.e. node with SSL disabled tries to connect to secured cluster or other way around), this new node does not show any exceptions or warnings. Instead user may end up having two topologies - one secured and another non-secured.

This is counterintuitive. We should try to detect this and throw an exception in this case.

Here are possible scenarios that we should consider:

• Unsecured server tries to join secured cluster.
• Secured server tries to join unsecured cluster.
• Unsecured client tries to join secured cluster.
• Secured client tries to join unsecured cluster.

Issue Links

• causes: IGNITE-16054 Skipped attempt to connect to other TcpDiscovery nodes if SSL is enabled and first node from list is down.
• links to: IGNT-CR-59