Occurs 'NotSslRecordException' when connecting using the 'High Level Rest Client'

Security
1

Attempt to communicate with ODE using ‘High Level Rest Client’ in a Spring Boot Project. However, NotSslRecordException occurs.

Open Distro Java High Level REST Client · Issue #64 · opendistro-for-elasticsearch/sample-code · GitHub The code was written in reference to the document.

            System.setProperty("javax.net.ssl.trustStore", odeKeyStorePath);
            builder = RestClient.builder(new HttpHost(host, port, "https"))
                    .setHttpClientConfigCallback(new HttpClientConfigCallback() {
                        @Override
                        public HttpAsyncClientBuilder customizeHttpClient(HttpAsyncClientBuilder httpClientBuilder) {
                            return httpClientBuilder.setDefaultCredentialsProvider(credentialsProvider);
                        }
                    });

There was no ‘trust store’ among the certificates given to me when applying TLS to ODE and ODK before.

I only had the ‘pfx’ file. Therefore, TLS settings for ODE and ODK were completed by extracting crt and keys from the ‘pfx’ file.

openssl pkcs12 -in my.pfx -clcerts -nokeys -out my.crt.pem
openssl pkcs12 -in my.pfx -nocerts -nodes -out my.key.pem

In order to communicate using the 'High Level Rest Client', the jks file was created with the previously extracted crt file. 
keytool -importcert -file my.crt.pem -keystore keystore.jks -alias "test"

To communicate using the “High Level Rest Client” for harm, the jks file was created as a crt file extracted previously. This jks file is the file that the code ‘odeKeyStorePath’ refers to.


Finally, an attempt was made to connect with the ODE, but ‘NotSslRecordException’ occurred.

[2021-04-06T07:19:14,290][ERROR][c.a.o.s.s.h.n.OpenDistroSecuritySSLNettyHttpServerTransport] [6c904659d955] Exception during establishing a SSL connection: io.netty.handler.ssl.NotSslRecordException: not an SSL/TLS record: 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
io.netty.handler.ssl.NotSslRecordException: not an SSL/TLS record: 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
        at io.netty.handler.ssl.SslHandler.decodeJdkCompatible(SslHandler.java:1246) ~[netty-handler-4.1.49.Final.jar:4.1.49.Final]
        at io.netty.handler.ssl.SslHandler.decode(SslHandler.java:1314) ~[netty-handler-4.1.49.Final.jar:4.1.49.Final]
        at io.netty.handler.codec.ByteToMessageDecoder.decodeRemovalReentryProtection(ByteToMessageDecoder.java:501) ~[netty-codec-4.1.49.Final.jar:4.1.49.Final]
        at io.netty.handler.codec.ByteToMessageDecoder.callDecode(ByteToMessageDecoder.java:440) ~[netty-codec-4.1.49.Final.jar:4.1.49.Final]
        at io.netty.handler.codec.ByteToMessageDecoder.channelRead(ByteToMessageDecoder.java:276) ~[netty-codec-4.1.49.Final.jar:4.1.49.Final]
        at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:379) [netty-transport-4.1.49.Final.jar:4.1.49.Final]
        at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:365) [netty-transport-4.1.49.Final.jar:4.1.49.Final]
        at io.netty.channel.AbstractChannelHandlerContext.fireChannelRead(AbstractChannelHandlerContext.java:357) [netty-transport-4.1.49.Final.jar:4.1.49.Final]
        at io.netty.channel.DefaultChannelPipeline$HeadContext.channelRead(DefaultChannelPipeline.java:1410) [netty-transport-4.1.49.Final.jar:4.1.49.Final]
        at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:379) [netty-transport-4.1.49.Final.jar:4.1.49.Final]
        at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:365) [netty-transport-4.1.49.Final.jar:4.1.49.Final]
        at io.netty.channel.DefaultChannelPipeline.fireChannelRead(DefaultChannelPipeline.java:919) [netty-transport-4.1.49.Final.jar:4.1.49.Final]
        at io.netty.channel.nio.AbstractNioByteChannel$NioByteUnsafe.read(AbstractNioByteChannel.java:163) [netty-transport-4.1.49.Final.jar:4.1.49.Final]
        at io.netty.channel.nio.NioEventLoop.processSelectedKey(NioEventLoop.java:714) [netty-transport-4.1.49.Final.jar:4.1.49.Final]
        at io.netty.channel.nio.NioEventLoop.processSelectedKeysPlain(NioEventLoop.java:615) [netty-transport-4.1.49.Final.jar:4.1.49.Final]
        at io.netty.channel.nio.NioEventLoop.processSelectedKeys(NioEventLoop.java:578) [netty-transport-4.1.49.Final.jar:4.1.49.Final]
        at io.netty.channel.nio.NioEventLoop.run(NioEventLoop.java:493) [netty-transport-4.1.49.Final.jar:4.1.49.Final]
        at io.netty.util.concurrent.SingleThreadEventExecutor$4.run(SingleThreadEventExecutor.java:989) [netty-common-4.1.49.Final.jar:4.1.49.Final]
        at io.netty.util.internal.ThreadExecutorMap$2.run(ThreadExecutorMap.java:74) [netty-common-4.1.49.Final.jar:4.1.49.Final]
        at java.lang.Thread.run(Thread.java:832) [?:?]
[2021-04-06T07:19:14,295][WARN ][o.e.h.AbstractHttpServerTransport] [6c904659d955] caught exception while handling client http traffic, closing connection Netty4HttpChannel{localAddress=/, remoteAddress=/}
io.netty.handler.codec.DecoderException: io.netty.handler.ssl.NotSslRecordException: not an SSL/TLS record: 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
        at io.netty.handler.codec.ByteToMessageDecoder.callDecode(ByteToMessageDecoder.java:471) ~[netty-codec-4.1.49.Final.jar:4.1.49.Final]
        at io.netty.handler.codec.ByteToMessageDecoder.channelRead(ByteToMessageDecoder.java:276) ~[netty-codec-4.1.49.Final.jar:4.1.49.Final]
        at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:379) [netty-transport-4.1.49.Final.jar:4.1.49.Final]
        at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:365) [netty-transport-4.1.49.Final.jar:4.1.49.Final]
        at io.netty.channel.AbstractChannelHandlerContext.fireChannelRead(AbstractChannelHandlerContext.java:357) [netty-transport-4.1.49.Final.jar:4.1.49.Final]
        at io.netty.channel.DefaultChannelPipeline$HeadContext.channelRead(DefaultChannelPipeline.java:1410) [netty-transport-4.1.49.Final.jar:4.1.49.Final]
        at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:379) [netty-transport-4.1.49.Final.jar:4.1.49.Final]
        at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:365) [netty-transport-4.1.49.Final.jar:4.1.49.Final]
        at io.netty.channel.DefaultChannelPipeline.fireChannelRead(DefaultChannelPipeline.java:919) [netty-transport-4.1.49.Final.jar:4.1.49.Final]
        at io.netty.channel.nio.AbstractNioByteChannel$NioByteUnsafe.read(AbstractNioByteChannel.java:163) [netty-transport-4.1.49.Final.jar:4.1.49.Final]
        at io.netty.channel.nio.NioEventLoop.processSelectedKey(NioEventLoop.java:714) [netty-transport-4.1.49.Final.jar:4.1.49.Final]
        at io.netty.channel.nio.NioEventLoop.processSelectedKeysPlain(NioEventLoop.java:615) [netty-transport-4.1.49.Final.jar:4.1.49.Final]
        at io.netty.channel.nio.NioEventLoop.processSelectedKeys(NioEventLoop.java:578) [netty-transport-4.1.49.Final.jar:4.1.49.Final]
        at io.netty.channel.nio.NioEventLoop.run(NioEventLoop.java:493) [netty-transport-4.1.49.Final.jar:4.1.49.Final]
        at io.netty.util.concurrent.SingleThreadEventExecutor$4.run(SingleThreadEventExecutor.java:989) [netty-common-4.1.49.Final.jar:4.1.49.Final]
        at io.netty.util.internal.ThreadExecutorMap$2.run(ThreadExecutorMap.java:74) [netty-common-4.1.49.Final.jar:4.1.49.Final]
        at java.lang.Thread.run(Thread.java:832) [?:?]
Caused by: io.netty.handler.ssl.NotSslRecordException: not an SSL/TLS record: 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
        at io.netty.handler.ssl.SslHandler.decodeJdkCompatible(SslHandler.java:1246) ~[netty-handler-4.1.49.Final.jar:4.1.49.Final]
        at io.netty.handler.ssl.SslHandler.decode(SslHandler.java:1314) ~[netty-handler-4.1.49.Final.jar:4.1.49.Final]
        at io.netty.handler.codec.ByteToMessageDecoder.decodeRemovalReentryProtection(ByteToMessageDecoder.java:501) ~[netty-codec-4.1.49.Final.jar:4.1.49.Final]
        at io.netty.handler.codec.ByteToMessageDecoder.callDecode(ByteToMessageDecoder.java:440) ~[netty-codec-4.1.49.Final.jar:4.1.49.Final]
        ... 16 more
2

In my experience the NotanSSLRecordException is a benign error. One way we were able to resolve it was re-generate all the certificates. Not sure if it helps in your case, but thats been my experience with the error.

3

@dhhan is your ODFE runs with HTTPS or HTTP? Can you connect with openssl to confirm that ODFE is responding on HTTPS?

4

@sreekanth As your advice, I successfully created the certificate again and accessed it. But I’m not sure if this was a problem with certificate generation or if it was a difference in options added during testing. Thank you for helping me.

1 Like
5

@pablo The HTTPS connection between ODFE and ODFK was verified until a problem occurred. Both servers were fully HTTPS-connected.

I think the problem has been solved by regenerating the certificate, but I don’t know if it’s the exact cause yet.

1 Like