question

adampaul avatar image
adampaul asked Erick Ramirez answered

SSLHandshakeException: no cipher suites in common

Getting this exception during startup

ERROR [ACCEPT-/node1.example.com] 2020-09-04 07:48:43,605 MessagingService.java:1082 - SSL handshake error for inbound connection from 30a0f730[SSL_NULL_WITH_NULL_NULL: Socket[addr=/node1.example.com,port=45726,localport=7001]]
javax.net.ssl.SSLHandshakeException: no cipher suites in common
encryption
10 |1000

Up to 8 attachments (including images) can be used with a maximum of 1.0 MiB each and 10.0 MiB total.

Cedrick Lunven avatar image
Cedrick Lunven answered Cedrick Lunven edited

Hi,

This error can be raised for multiple reasons (JVM, Keystore, configuration, certificates). Could you please provide more information about the environment you are using:

  • Which version of DSE
  • And most importantly which JVM/JDK.


Also you can restart the application and enable the flag `-Djavax.net.debug=SSL,handshake,` for us to get more logs.

Thank you

Share
10 |1000

Up to 8 attachments (including images) can be used with a maximum of 1.0 MiB each and 10.0 MiB total.

Erick Ramirez avatar image
Erick Ramirez answered

To add to Cédric's response, we recommend that you use Oracle or OpenJDK 8 with at least update 161 since it includes the unlimited policy files required for use with the Java Cryptography Extension (JCE).

It is also important that you follow all the steps in the relevant procedures when configuring SSL for DSE. If you miss just one step or make one mistake, the whole setup will not work. This isn't an issue with DSE but is inherent in SSL and encryption frameworks.

If you still require assistance, please log a ticket with DataStax Support so one of our engineers can assist you directly. Cheers!

Share
10 |1000

Up to 8 attachments (including images) can be used with a maximum of 1.0 MiB each and 10.0 MiB total.