{"action":"created","issue":{"url":"https://api.github.com/repos/redisson/redisson/issues/1334","repository_url":"https://api.github.com/repos/redisson/redisson","labels_url":"https://api.github.com/repos/redisson/redisson/issues/1334/labels{/name}","comments_url":"https://api.github.com/repos/redisson/redisson/issues/1334/comments","events_url":"https://api.github.com/repos/redisson/redisson/issues/1334/events","html_url":"https://github.com/redisson/redisson/issues/1334","id":303947435,"number":1334,"title":"Unable to connect AWS elastic Cahce over SSL in Cluster mode","user":{"login":"jayarampradhan","id":2883420,"avatar_url":"https://avatars1.githubusercontent.com/u/2883420?v=4","gravatar_id":"","url":"https://api.github.com/users/jayarampradhan","html_url":"https://github.com/jayarampradhan","followers_url":"https://api.github.com/users/jayarampradhan/followers","following_url":"https://api.github.com/users/jayarampradhan/following{/other_user}","gists_url":"https://api.github.com/users/jayarampradhan/gists{/gist_id}","starred_url":"https://api.github.com/users/jayarampradhan/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jayarampradhan/subscriptions","organizations_url":"https://api.github.com/users/jayarampradhan/orgs","repos_url":"https://api.github.com/users/jayarampradhan/repos","events_url":"https://api.github.com/users/jayarampradhan/events{/privacy}","received_events_url":"https://api.github.com/users/jayarampradhan/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":2,"created_at":"2018-03-09T19:06:23Z","updated_at":"2018-03-10T10:55:16Z","closed_at":null,"author_association":"NONE","body":"I am using lib version: 3.6.2\r\nWhen trying to connect AWS Elastic cache(i.e `rediss://clustercfg.xxx-test-sample.ttt.usw2.cache.amazonaws.com:6379`) over `ssl` in `cluster` mode getting below exception:\r\n```\r\nio.netty.handler.codec.DecoderException: javax.net.ssl.SSLHandshakeException: General SSLEngine problem\r\n                at io.netty.handler.codec.ByteToMessageDecoder.callDecode(ByteToMessageDecoder.java:459)\r\n                at io.netty.handler.codec.ByteToMessageDecoder.channelRead(ByteToMessageDecoder.java:265)\r\n                at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:362)\r\n                at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:348)\r\n                at io.netty.channel.AbstractChannelHandlerContext.fireChannelRead(AbstractChannelHandlerContext.java:340)\r\n                at io.netty.channel.DefaultChannelPipeline$HeadContext.channelRead(DefaultChannelPipeline.java:1414)\r\n                at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:362)\r\n                at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:348)\r\n                at io.netty.channel.DefaultChannelPipeline.fireChannelRead(DefaultChannelPipeline.java:945)\r\n                at io.netty.channel.nio.AbstractNioByteChannel$NioByteUnsafe.read(AbstractNioByteChannel.java:146)\r\n                at io.netty.channel.nio.NioEventLoop.processSelectedKey(NioEventLoop.java:645)\r\n                at io.netty.channel.nio.NioEventLoop.processSelectedKeysOptimized(NioEventLoop.java:580)\r\n                at io.netty.channel.nio.NioEventLoop.processSelectedKeys(NioEventLoop.java:497)\r\n                at io.netty.channel.nio.NioEventLoop.run(NioEventLoop.java:459)\r\n                at io.netty.util.concurrent.SingleThreadEventExecutor$5.run(SingleThreadEventExecutor.java:886)\r\n                at io.netty.util.concurrent.FastThreadLocalRunnable.run(FastThreadLocalRunnable.java:30)\r\n                at java.lang.Thread.run(Thread.java:748)\r\nCaused by: javax.net.ssl.SSLHandshakeException: General SSLEngine problem\r\n                at sun.security.ssl.Handshaker.checkThrown(Handshaker.java:1529)\r\n                at sun.security.ssl.SSLEngineImpl.checkTaskThrown(SSLEngineImpl.java:535)\r\n                at sun.security.ssl.SSLEngineImpl.readNetRecord(SSLEngineImpl.java:813)\r\n                at sun.security.ssl.SSLEngineImpl.unwrap(SSLEngineImpl.java:781)\r\n                at javax.net.ssl.SSLEngine.unwrap(SSLEngine.java:624)\r\n                at io.netty.handler.ssl.SslHandler$SslEngineType$3.unwrap(SslHandler.java:292)\r\n                at io.netty.handler.ssl.SslHandler.unwrap(SslHandler.java:1257)\r\n                at io.netty.handler.ssl.SslHandler.decodeJdkCompatible(SslHandler.java:1159)\r\n                at io.netty.handler.ssl.SslHandler.decode(SslHandler.java:1203)\r\n                at io.netty.handler.codec.ByteToMessageDecoder.decodeRemovalReentryProtection(ByteToMessageDecoder.java:489)\r\n                at io.netty.handler.codec.ByteToMessageDecoder.callDecode(ByteToMessageDecoder.java:428)\r\n                ... 16 common frames omitted\r\nCaused by: javax.net.ssl.SSLHandshakeException: General SSLEngine problem\r\n                at sun.security.ssl.Alerts.getSSLException(Alerts.java:192)\r\n                at sun.security.ssl.SSLEngineImpl.fatal(SSLEngineImpl.java:1728)\r\n                at sun.security.ssl.Handshaker.fatalSE(Handshaker.java:330)\r\n                at sun.security.ssl.Handshaker.fatalSE(Handshaker.java:322)\r\n                at sun.security.ssl.ClientHandshaker.serverCertificate(ClientHandshaker.java:1614)\r\n                at sun.security.ssl.ClientHandshaker.processMessage(ClientHandshaker.java:216)\r\n                at sun.security.ssl.Handshaker.processLoop(Handshaker.java:1052)\r\n                at sun.security.ssl.Handshaker$1.run(Handshaker.java:992)\r\n                at sun.security.ssl.Handshaker$1.run(Handshaker.java:989)\r\n                at java.security.AccessController.doPrivileged(Native Method)\r\n                at sun.security.ssl.Handshaker$DelegatedTask.run(Handshaker.java:1467)\r\n                at io.netty.handler.ssl.SslHandler.runDelegatedTasks(SslHandler.java:1417)\r\n                at io.netty.handler.ssl.SslHandler.unwrap(SslHandler.java:1325)\r\n                ... 20 common frames omitted\r\nCaused by: java.security.cert.CertificateException: No subject alternative names matching IP address 10.82.141.245 found\r\n                at sun.security.util.HostnameChecker.matchIP(HostnameChecker.java:168)\r\n                at sun.security.util.HostnameChecker.match(HostnameChecker.java:94)\r\n                at sun.security.ssl.X509TrustManagerImpl.checkIdentity(X509TrustManagerImpl.java:455)\r\n                at sun.security.ssl.X509TrustManagerImpl.checkIdentity(X509TrustManagerImpl.java:436)\r\n                at sun.security.ssl.X509TrustManagerImpl.checkTrusted(X509TrustManagerImpl.java:252)\r\n                at sun.security.ssl.X509TrustManagerImpl.checkServerTrusted(X509TrustManagerImpl.java:136)\r\n                at sun.security.ssl.ClientHandshaker.serverCertificate(ClientHandshaker.java:1601)\r\n```\r\n\r\nNot sure whats going wrong here, as per documents AWS manages the SSL certs so ideally this exception shouldn't have arrises.\r\nI see this was closed as part of the issue #1135 . How ever single server mode with SSL is working fine. Could you please help me on this?"},"comment":{"url":"https://api.github.com/repos/redisson/redisson/issues/comments/372021139","html_url":"https://github.com/redisson/redisson/issues/1334#issuecomment-372021139","issue_url":"https://api.github.com/repos/redisson/redisson/issues/1334","id":372021139,"user":{"login":"mrniko","id":1104661,"avatar_url":"https://avatars0.githubusercontent.com/u/1104661?v=4","gravatar_id":"","url":"https://api.github.com/users/mrniko","html_url":"https://github.com/mrniko","followers_url":"https://api.github.com/users/mrniko/followers","following_url":"https://api.github.com/users/mrniko/following{/other_user}","gists_url":"https://api.github.com/users/mrniko/gists{/gist_id}","starred_url":"https://api.github.com/users/mrniko/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mrniko/subscriptions","organizations_url":"https://api.github.com/users/mrniko/orgs","repos_url":"https://api.github.com/users/mrniko/repos","events_url":"https://api.github.com/users/mrniko/events{/privacy}","received_events_url":"https://api.github.com/users/mrniko/received_events","type":"User","site_admin":false},"created_at":"2018-03-10T10:55:16Z","updated_at":"2018-03-10T10:55:16Z","author_association":"OWNER","body":"It seems related to this one https://github.com/redisson/redisson/issues/1296"}}
{"actor":{"display_login":"mrniko"}}