# Error when trying to connect ODBC SSL **URL:** \ **Category:** SQL\ **Created:** [April 18, 2024, 12:43pm UTC](https://forum.opensearch.org/t/error-when-trying-to-connect-odbc-ssl/18924 "2024-04-18T12:43:09Z")\ **Posts on this page:** 14\ **Page:** 1
**Author:** ![apt](https://avatars.discourse-cdn.com/v4/letter/a/858c86/32.png) [@apt](https://forum.opensearch.org/u/apt)\ **Post date:** [April 18, 2024, 12:43pm UTC](https://forum.opensearch.org/t/error-when-trying-to-connect-odbc-ssl/18924/1 "2024-04-18T12:43:09Z")
Hi, I am using opensearch 2.3.0 When I try to configure ODBC driver with SSL I get error like on the screenshot: ![image](https://us1.discourse-cdn.com/flex019/uploads/mauve_hedgehog/original/2X/6/65abc6627b408de6cf243af5e15f4128b38c1867.png) What caught my attention is that in error message port number is reduced to 920. When I change opensearch.yml config to _plugins.security.ssl.http.enabled: false_ I can succesfully test connection without SSL. I will be grateful for any help Regards, Andrew ---
**Author:** ![Mantas](https://avatars.discourse-cdn.com/v4/letter/m/7bcc69/32.png) [@Mantas](https://forum.opensearch.org/u/Mantas)\ **Post date:** [April 19, 2024, 1:31pm UTC](https://forum.opensearch.org/t/error-when-trying-to-connect-odbc-ssl/18924/2 "2024-04-19T13:31:35Z")
> [@apt](#): > > What caught my attention is that in error message port number is reduced to 920. Hi @apt, have you tried providing the port as per below? ![image](https://us1.discourse-cdn.com/flex019/uploads/mauve_hedgehog/original/2X/9/9702540947b9bdc4af8aab5d8bda0b56dc87eab3.png) Best, mj ---
**Author:** ![apt](https://avatars.discourse-cdn.com/v4/letter/a/858c86/32.png) [@apt](https://forum.opensearch.org/u/apt)\ **Post date:** [April 22, 2024, 9:44am UTC](https://forum.opensearch.org/t/error-when-trying-to-connect-odbc-ssl/18924/3 "2024-04-22T09:44:25Z")
Hi! Thank you for your reply. I tried to remove port and HTTP from host. Unfortunately I am still not able to connect. ![image](https://us1.discourse-cdn.com/flex019/uploads/mauve_hedgehog/original/2X/2/2506c3101e9d00b567ed133125c4af5b5ca265e6.png) ---
**Author:** ![Mantas](https://avatars.discourse-cdn.com/v4/letter/m/7bcc69/32.png) [@Mantas](https://forum.opensearch.org/u/Mantas)\ **Post date:** [April 22, 2024, 11:32am UTC](https://forum.opensearch.org/t/error-when-trying-to-connect-odbc-ssl/18924/4 "2024-04-22T11:32:09Z")
What stands out, to me, is that the port in your error pop-up is 920 not 9200. ---
**Author:** ![Mantas](https://avatars.discourse-cdn.com/v4/letter/m/7bcc69/32.png) [@Mantas](https://forum.opensearch.org/u/Mantas)\ **Post date:** [April 22, 2024, 11:33am UTC](https://forum.opensearch.org/t/error-when-trying-to-connect-odbc-ssl/18924/5 "2024-04-22T11:33:36Z")
Is your OpenSearch cluster on HTTP or HTTPS? Would you mind sharing your `opensearch.yml` file? Thanks, mj ---
**Author:** ![apt](https://avatars.discourse-cdn.com/v4/letter/a/858c86/32.png) [@apt](https://forum.opensearch.org/u/apt)\ **Post date:** [April 22, 2024, 12:01pm UTC](https://forum.opensearch.org/t/error-when-trying-to-connect-odbc-ssl/18924/6 "2024-04-22T12:01:32Z")
Hi, Like I wrote before when plugins.security.ssl.http.enabled: false - there is no error and I can succesfully connect when plugins.security.ssl.http.enabled: true - the error pop-up ```auto # ======================== OpenSearch Configuration ========================= # # NOTE: OpenSearch comes with reasonable defaults for most settings. # Before you set out to tweak and tune the configuration, make sure you # understand what are you trying to accomplish and the consequences. # # The primary way of configuring a node is via this file. This template lists # the most important settings you may want to configure for a production cluster. # # Please consult the documentation for further information on configuration options: # https://www.opensearch.org # # ---------------------------------- Cluster ----------------------------------- # # Use a descriptive name for your cluster: # cluster.name: opensearch-mycluster-name # # ------------------------------------ Node ------------------------------------ # # Use a descriptive name for the node: # node.name: node-1 # # Add custom attributes to the node: # #node.attr.rack: r1 # # ----------------------------------- Paths ------------------------------------ # # Path to directory where to store the data (separate multiple locations by comma): # path.data: /mydata/opensearch # # Path to log files: # #path.logs: /path/to/logs # # ----------------------------------- Memory ----------------------------------- # # Lock the memory on startup: # #bootstrap.memory_lock: true # # Make sure that the heap size is set to about half the memory available # on the system and that the owner of the process is allowed to use this # limit. # # OpenSearch performs poorly when the system is swapping the memory. # # ---------------------------------- Network ----------------------------------- # # Set the bind address to a specific IP (IPv4 or IPv6): # network.host: host_IP_here # # Set a custom port for HTTP: # http.port: 9200 # # For more information, consult the network module documentation. # # --------------------------------- Discovery ---------------------------------- # # Pass an initial list of hosts to perform discovery when this node is started: # The default list of hosts is ["127.0.0.1", "[::1]"] # discovery.seed_hosts: ["hotsname_dns1", "hotsname_dns2", "hotsname_dns3"] # # Bootstrap the cluster using an initial set of cluster-manager-eligible nodes: # cluster.initial_cluster_manager_nodes: ["node-1"] #cluster.initial_cluster_manager_nodes: ["node-1", "node-2"] # # For more information, consult the discovery and cluster formation module documentation. # # ---------------------------------- Gateway ----------------------------------- # # Block initial recovery after a full cluster restart until N nodes are started: # #gateway.recover_after_nodes: 3 # # For more information, consult the gateway module documentation. # # ---------------------------------- Various ----------------------------------- # # Require explicit names when deleting indices: # #action.destructive_requires_name: true #plugins.security.disabled: true #http.max_content_length search.max_buckets: 100000 path.repo: ["/myapp/snap"] ######## Start OpenSearch Security Demo Configuration ######## # WARNING: revise all the lines below before you go into production #cert Transport plugins.security.ssl.transport.pemcert_filepath: SSL/Transport/node1.pem plugins.security.ssl.transport.pemkey_filepath: SSL/Transport/node1-key.pem plugins.security.ssl.transport.pemtrustedcas_filepath: SSL/Transport/root-ca.pem plugins.security.ssl.transport.enforce_hostname_verification: false plugins.security.ssl.transport.resolve_hostname: false plugins.security.ssl.http.enabled: true #cert Mycerts plugins.security.ssl.http.keystore_type: PKCS12 plugins.security.ssl.http.keystore_filepath: SSL/mycerts/opens-keystore.pfx plugins.security.ssl.http.keystore_password: PASS_WORD plugins.security.ssl.http.truststore_type: PKCS12 plugins.security.ssl.http.truststore_filepath: SSL/mycerts/opens-keystore.pfx plugins.security.ssl.http.truststore_password: PASS_WORD plugins.security.ssl.http.enabled_protocols: - "TLSv1.2" - "TLSv1.1" - "TLSv1" plugins.security.nodes_dn: - 'CN=hotsname_dns1,OU=TS,O=myORG,L=city,ST=dist,C=XX' - 'CN=hotsname_dns2,OU=TS,O=myORG,L=city,ST=dist,C=XX' - 'CN=hotsname_dns1,OU=TS,O=myORG,L=city,ST=dist,C=XX' plugins.security.allow_unsafe_democertificates: true plugins.security.allow_default_init_securityindex: true plugins.security.authcz.admin_dn: - CN=mycn,OU=myou,O=myORG,L=city,ST=dist,C=XX plugins.security.audit.type: debug plugins.security.enable_snapshot_restore_privilege: true plugins.security.check_snapshot_restore_write_privileges: true plugins.security.restapi.roles_enabled: ["all_access", "security_rest_api_access"] plugins.security.system_indices.enabled: true plugins.security.system_indices.indices: [".plugins-ml-model", ".plugins-ml-task", ".opendistro-alerting-config", ".opendistro-alerting-alert*", ".opendistro-anomaly-results*", ".opendistro-anomaly-detector*", ".opendistro-anomaly-checkpoints", ".opendistro-anomaly-detection-state", ".opendistro-reports-*", ".opensearch-notifications-*", ".opensearch-notebooks", ".opensearch-observability", ".opendistro-asynchronous-search-response*", ".replication-metadata-store"] #node.max_local_storage_nodes: 3 logger.org.elasticsearch.index.reindex: debug #plugins.security.kerberos.krb5_filepath: '/etc/krb5.conf' #plugins.security.kerberos.acceptor_keytab_filepath: 'eskeytab.tab' ######## End OpenSearch Security Demo Configuration ######## ``` ---
**Author:** ![apt](https://avatars.discourse-cdn.com/v4/letter/a/858c86/32.png) [@apt](https://forum.opensearch.org/u/apt)\ **Post date:** [April 24, 2024, 8:24am UTC](https://forum.opensearch.org/t/error-when-trying-to-connect-odbc-ssl/18924/7 "2024-04-24T08:24:53Z")
I tried installing the ODBC driver on PROD env. where the hostname is slightly shorter. It seems that the issue with missing last digit in port number in error message is misleading. Now I get the same error message with full port number. Still am not able to connect with SSL enabled. ```auto opensearch[OpenSearchCommunication::LogMsg]841: Verifying connection options. opensearch[OpenSearchCommunication::LogMsg]841: Required connection option are valid. opensearch[OpenSearchCommunication::LogMsg]841: Starting DB connection. opensearch[OpenSearchCommunication::LogMsg]841: Attempting to establish DB connection. opensearch[OpenSearchCommunication::LogMsg]841: Failed to receive response from server version query. Received no response from url: https://MYHOST.XXX.XXX:9200 opensearch[OpenSearchCommunication::LogMsg]841: Failed to receive response from server version query. Received no response from url: https://MYHOST.XXX.XXX:9200 opensearch[OpenSearchCommunication::LogMsg]841: Failed to receive response from server version query. Received no response from url: https://MYHOST.XXX.XXX:9200 opensearch[OpenSearchCommunication::LogMsg]841: Dropping DB connection. connection[CC_set_error_statements]537: entering self=0000013E939FE0C0 connection[CC_log_error]625: CONN ERROR: func=LIBOPENSEARCH_connect, desc='', errnum=202, errmsg='Connection error: [OpenSearch][SQL ODBC Driver][SQL Plugin] Connection error: Failed to receive response from server version query. Received no response from url: https://MYHOST.XXX.XXX:9200' connection[CC_log_error]628: ------------------------------------------------------------ connection[CC_log_error]631: henv=0000013E90940500, conn=0000013E939FE0C0, status=0, num_stmts=16 connection[CC_log_error]633: opensearchconn=0000000000000000, stmts=0000013E9093B9F0, lobj_type=-999 connection[CC_log_error]625: CONN ERROR: func=OPENSEARCHAPI_DriverConnect, desc='Error from CC_Connect', errnum=202, errmsg='Connection error: [OpenSearch][SQL ODBC Driver][SQL Plugin] Connection error: Failed to receive response from server version query. Received no response from url: https://MYHOST.XXX.XXX:9200' connection[CC_log_error]628: ------------------------------------------------------------ connection[CC_log_error]631: henv=0000013E90940500, conn=0000013E939FE0C0, status=0, num_stmts=16 connection[CC_log_error]633: opensearchconn=0000000000000000, stmts=0000013E9093B9F0, lobj_type=-999 odbcapi30w[SQLGetDiagRecW]181: entering opensearch[OPENSEARCHAPI_GetDiagRec]23: entering type=2 rec=1 environ.c[OPENSEARCHAPI_ConnectError]212: entering hdbc=0000013E939FE0C0 <512> connection[CC_get_error]602: entering connection[CC_get_error]614: leaving environ.c[OPENSEARCHAPI_ConnectError]229: CC_get_error: status = 202, msg = #Connection error: [OpenSearch][SQL ODBC Driver][SQL Plugin] Connection error: Failed to receive response from server version query. Received no response from url: https://MYHOST.XXX.XXX:9200# environ.c[OPENSEARCHAPI_ConnectError]316: szSqlState = '08001',len=199, szError='Connection error: [OpenSearch][SQL ODBC Driver][SQL Plugin] Connection error: Failed to receive response from server version query. Received no response from url: https://MYHOST.XXX.XXX:9200' opensearch[OPENSEARCHAPI_GetDiagRec]44: leaving 0 win_unicod[utf8_to_ucs2_lf]227: ilen=199 bufcount=512 ocount=199 odbcapi30.[SQLFreeHandle]203: entering connection[OPENSEARCHAPI_FreeConnect]191: entering...hdbc=0000013E939FE0C0 connection[CC_Destructor]298: entering self=0000013E939FE0C0 connection[CC_cleanup]397: entering self=0000013E939FE0C0 connection[CC_set_error_statements]537: entering self=0000013E939FE0C0 connection[CC_log_error]625: CONN ERROR: func=CC_cleanup, desc='', errnum=1, errmsg='Connection not open' connection[CC_log_error]628: ------------------------------------------------------------ connection[CC_log_error]631: henv=0000013E90940500, conn=0000013E939FE0C0, status=0, num_stmts=16 connection[CC_log_error]633: opensearchconn=0000000000000000, stmts=0000013E9093B9F0, lobj_type=-999 connection[CC_cleanup]412: after LIBOPENSEARCH_disconnect dlg_specif[CC_conninfo_init]445: entering opt=1 connection[CC_cleanup]478: leaving connection[CC_Destructor]305: after CC_Cleanup connection[CC_Destructor]316: after free statement holders connection[CC_Destructor]327: leaving connection[OPENSEARCHAPI_FreeConnect]209: leaving... odbcapi30.[SQLFreeHandle]203: entering environ.c[OPENSEARCHAPI_FreeEnv]53: entering env=0000013E90940500 environ.c[EN_Destructor]426: entering self=0000013E90940500 environ.c[EN_Destructor]449: clearing conns count=128 environ.c[EN_Destructor]461: leaving rv=1 environ.c[OPENSEARCHAPI_FreeEnv]56: ok ``` ---
**Author:** ![Mantas](https://avatars.discourse-cdn.com/v4/letter/m/7bcc69/32.png) [@Mantas](https://forum.opensearch.org/u/Mantas)\ **Post date:** [April 24, 2024, 12:07pm UTC](https://forum.opensearch.org/t/error-when-trying-to-connect-odbc-ssl/18924/8 "2024-04-24T12:07:03Z")
> [@apt](#): > > ` Received no response from url` Hi @apt, I had a closer look at it, and looks like you will need to configure the following driver options using a DSN or connection string: a) `UseSSL` - `boolean (0 or 1)` Default `false (0)` - you need to set it to 1 b) `HostnameVerification` - `boolean (0 or 1)` - you need to set it to 0 (for testing) please see more details here: [ODBC Driver - OpenSearch Documentation](https://opensearch.org/docs/latest/search-plugins/sql/sql/odbc/#customizing-the-odbc-driver) specifically here: [ODBC Driver - OpenSearch Documentation](https://opensearch.org/docs/latest/search-plugins/sql/sql/odbc/#advanced-options) best, mj ---
**Author:** ![apt](https://avatars.discourse-cdn.com/v4/letter/a/858c86/32.png) [@apt](https://forum.opensearch.org/u/apt)\ **Post date:** [April 24, 2024, 7:45pm UTC](https://forum.opensearch.org/t/error-when-trying-to-connect-odbc-ssl/18924/9 "2024-04-24T19:45:27Z")
Hi @Mantas, Do you mean Advanced Option tab? This is how it is configured. The Enable SSL option is set automatically when I add https:// in host name. I’ve tried various options, but nothing helps. ![image](https://us1.discourse-cdn.com/flex019/uploads/mauve_hedgehog/original/2X/c/c29a15304c9b7cd6bbbadebc855df438d058f9c0.png) ---
**Author:** ![apt](https://avatars.discourse-cdn.com/v4/letter/a/858c86/32.png) [@apt](https://forum.opensearch.org/u/apt)\ **Post date:** [April 24, 2024, 8:51pm UTC](https://forum.opensearch.org/t/error-when-trying-to-connect-odbc-ssl/18924/10 "2024-04-24T20:51:05Z")
I tried an older version of this driver (v1.4.0) and despite some issues with it described here - [[BUG] OpenSearch ODBC client will not connect to OpenSearch cluster · Issue #8 · opensearch-project/sql-odbc · GitHub](https://github.com/opensearch-project/sql-odbc/issues/8) - I was able to successfully connect. ![image](https://us1.discourse-cdn.com/flex019/uploads/mauve_hedgehog/original/2X/4/404fc51ac5d32ec7ac8a1fd16d42120a304d7c1c.png) ---
**Author:** ![apt](https://avatars.discourse-cdn.com/v4/letter/a/858c86/32.png) [@apt](https://forum.opensearch.org/u/apt)\ **Post date:** [April 24, 2024, 8:51pm UTC](https://forum.opensearch.org/t/error-when-trying-to-connect-odbc-ssl/18924/11 "2024-04-24T20:51:39Z")
I think there is still some bug in version 1.5.0 ![image](https://us1.discourse-cdn.com/flex019/uploads/mauve_hedgehog/original/2X/8/8b3b14621737a75d8741cb844df5b69d2f3f3b25.png) ---
**Author:** ![Mantas](https://avatars.discourse-cdn.com/v4/letter/m/7bcc69/32.png) [@Mantas](https://forum.opensearch.org/u/Mantas)\ **Post date:** [April 25, 2024, 9:43am UTC](https://forum.opensearch.org/t/error-when-trying-to-connect-odbc-ssl/18924/12 "2024-04-25T09:43:54Z")
@apt , thanks for sharing your findings - that is good to know. Best, mj ---
**Author:** ![apt](https://avatars.discourse-cdn.com/v4/letter/a/858c86/32.png) [@apt](https://forum.opensearch.org/u/apt)\ **Post date:** [April 26, 2024, 10:25am UTC](https://forum.opensearch.org/t/error-when-trying-to-connect-odbc-ssl/18924/13 "2024-04-26T10:25:50Z")
@Mantas, thanks for your help! Regards, Andrew ---
**Author:** ![system](https://us1.discourse-cdn.com/flex019/uploads/mauve_hedgehog/original/2X/3/33547ea01a5b12dcca2958411d3edd97ae2ea8c1.png) [@system](https://forum.opensearch.org/u/system)\ **Post date:** [June 25, 2024, 10:26am UTC](https://forum.opensearch.org/t/error-when-trying-to-connect-odbc-ssl/18924/14 "2024-06-25T10:26:17Z")
This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.