# SSL connection error

**URL:** <https://forum.opensearch.org/t/ssl-connection-error/15225>\
**Category:** OpenSearch\
**Created:** [July 24, 2023, 7:39am UTC](https://forum.opensearch.org/t/ssl-connection-error/15225 "2023-07-24T07:39:25Z")\
**Posts on this page:** 11\
**Page:** 1

<div class="post-metadata">

**Author:** ![Kruzerson](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.opensearch.org/kruzerson/32/5937_2.png) [@Kruzerson](https://forum.opensearch.org/u/Kruzerson)\
**Post date:** [July 24, 2023, 7:39am UTC](https://forum.opensearch.org/t/ssl-connection-error/15225/1 "2023-07-24T07:39:25Z")

</div>

**Versions** (relevant - OpenSearch/Dashboard/Server OS/Browser):

2.8.0

**Describe the issue** :

Hello. I noticed that there are a lot of such errors on the cluster masters, but everything works fine. Please help me figure out what the problem might be.

```auto
Exception during establishing a SSL connection: java.net.SocketException: Connection reset
java.net.SocketException: Connection reset
	at sun.nio.ch.SocketChannelImpl.throwConnectionReset(SocketChannelImpl.java:394) ~[?:?]
	at sun.nio.ch.SocketChannelImpl.read(SocketChannelImpl.java:426) ~[?:?]
	at org.opensearch.transport.CopyBytesSocketChannel.readFromSocketChannel(CopyBytesSocketChannel.java:155) ~[transport-netty4-client-2.8.0.jar:2.8.0]
	at org.opensearch.transport.CopyBytesSocketChannel.doReadBytes(CopyBytesSocketChannel.java:140) ~[transport-netty4-client-2.8.0.jar:2.8.0]
	at io.netty.channel.nio.AbstractNioByteChannel$NioByteUnsafe.read(AbstractNioByteChannel.java:151) [netty-transport-4.1.91.Final.jar:4.1.91.Final]
	at io.netty.channel.nio.NioEventLoop.processSelectedKey(NioEventLoop.java:788) [netty-transport-4.1.91.Final.jar:4.1.91.Final]
	at io.netty.channel.nio.NioEventLoop.processSelectedKeysPlain(NioEventLoop.java:689) [netty-transport-4.1.91.Final.jar:4.1.91.Final]
	at io.netty.channel.nio.NioEventLoop.processSelectedKeys(NioEventLoop.java:652) [netty-transport-4.1.91.Final.jar:4.1.91.Final]
	at io.netty.channel.nio.NioEventLoop.run(NioEventLoop.java:562) [netty-transport-4.1.91.Final.jar:4.1.91.Final]
	at io.netty.util.concurrent.SingleThreadEventExecutor$4.run(SingleThreadEventExecutor.java:997) [netty-common-4.1.91.Final.jar:4.1.91.Final]
	at io.netty.util.internal.ThreadExecutorMap$2.run(ThreadExecutorMap.java:74) [netty-common-4.1.91.Final.jar:4.1.91.Final]
	at java.lang.Thread.run(Thread.java:833) [?:?]

```

**Configuration** :

**Relevant Logs or Screenshots** :

---

<div class="post-metadata">

**Author:** ![Eugene7](https://avatars.discourse-cdn.com/v4/letter/e/bbce88/32.png) [@Eugene7](https://forum.opensearch.org/u/Eugene7)\
**Post date:** [July 24, 2023, 3:20pm UTC](https://forum.opensearch.org/t/ssl-connection-error/15225/2 "2023-07-24T15:20:00Z")

</div>

Hi @Kruzerson

Can you share your `opensearch.yml` ?

---

<div class="post-metadata">

**Author:** ![Eugene7](https://avatars.discourse-cdn.com/v4/letter/e/bbce88/32.png) [@Eugene7](https://forum.opensearch.org/u/Eugene7)\
**Post date:** [July 24, 2023, 4:48pm UTC](https://forum.opensearch.org/t/ssl-connection-error/15225/3 "2023-07-24T16:48:42Z")

</div>

Could you please also share the output of the following commands:  
`GET _cat/nodes`  
`GET _cluster/health`

---

<div class="post-metadata">

**Author:** ![Kruzerson](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.opensearch.org/kruzerson/32/5937_2.png) [@Kruzerson](https://forum.opensearch.org/u/Kruzerson)\
**Post date:** [July 27, 2023, 1:01pm UTC](https://forum.opensearch.org/t/ssl-connection-error/15225/4 "2023-07-27T13:01:52Z")

</div>

Hello @Eugene7 . We have found a problem. It’s a combination of network and root certificate issues. Thank you anyway. But maybe you can help with ISM?

---

<div class="post-metadata">

**Author:** ![Eugene7](https://avatars.discourse-cdn.com/v4/letter/e/bbce88/32.png) [@Eugene7](https://forum.opensearch.org/u/Eugene7)\
**Post date:** [July 27, 2023, 2:37pm UTC](https://forum.opensearch.org/t/ssl-connection-error/15225/5 "2023-07-27T14:37:22Z")

</div>

Hi @Kruzerson

You can create a new topic with your issue. I will try to help you.

---

<div class="post-metadata">

**Author:** ![Kruzerson](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.opensearch.org/kruzerson/32/5937_2.png) [@Kruzerson](https://forum.opensearch.org/u/Kruzerson)\
**Post date:** [July 28, 2023, 6:42am UTC](https://forum.opensearch.org/t/ssl-connection-error/15225/6 "2023-07-28T06:42:47Z")

</div>

@Eugene7, thanks)

> [@ISM shrink issue](https://forum.opensearch.org/t/ism-shrink-issue/15310):
>
> Versions (relevant - OpenSearch/Dashboard/Server OS/Browser): 2.8.0 Describe the issue: Hello, everyone. I’m having trouble understanding how ISM works. I have the following configuration with which there are misunderstandings. If I understand correctly, when Shrink occurs, a new index is created and the old one is deleted. Accordingly, subsequent policy actions will not be applied to the new index. That is, the Force merge and move to cold actions will not occur. Also, I don’t understand how…

---

<div class="post-metadata">

**Author:** ![LHozzan](https://avatars.discourse-cdn.com/v4/letter/l/41988e/32.png) [@LHozzan](https://forum.opensearch.org/u/LHozzan)\
**Post date:** [January 12, 2024, 1:09pm UTC](https://forum.opensearch.org/t/ssl-connection-error/15225/7 "2024-01-12T13:09:45Z")

</div>

Hi @Kruzerson .  
We are facing with the same problem. I would like to kindly ask you to explain root cause, or what was the problem on your side? Maybe we have same problem as well. Hopefully, with the same root cause.  
Thank you!

---

<div class="post-metadata">

**Author:** ![rathankalluri](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.opensearch.org/rathankalluri/32/6977_2.png) [@rathankalluri](https://forum.opensearch.org/u/rathankalluri)\
**Post date:** [February 12, 2024, 10:39am UTC](https://forum.opensearch.org/t/ssl-connection-error/15225/8 "2024-02-12T10:39:48Z")

</div>

Hello @dhrubo Can you help me with this as well.  
Exception during establishing a SSL connection: java.net.SocketException: Connection reset  
java.net.SocketException: Connection reset

My Opensearch dashboard gets disconnected automatically and I see this on the opensearch server. I am not able to see what could be the reason.

---

<div class="post-metadata">

**Author:** ![ythell](https://avatars.discourse-cdn.com/v4/letter/y/a6a055/32.png) [@ythell](https://forum.opensearch.org/u/ythell)\
**Post date:** [August 12, 2024, 8:08am UTC](https://forum.opensearch.org/t/ssl-connection-error/15225/9 "2024-08-12T08:08:48Z")

</div>

Hi @Kruzerson,  
after upgrade from 2.12.0 to 2.15.0 we are facing same problem.

Currently, we have two instances with same configuration, one on 2.12.0 - without ssl error and second one on 2.15.0 where error occurs

---

<div class="post-metadata">

**Author:** ![pablo](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.opensearch.org/pablo/32/10363_2.png) [@pablo](https://forum.opensearch.org/u/pablo)\
**Post date:** [August 13, 2024, 2:04am UTC](https://forum.opensearch.org/t/ssl-connection-error/15225/10 "2024-08-13T02:04:13Z")

</div>

@ythell Please report your issue in a new thread and share the following files.

- opensearch.yml
- opensearch\_dashboards.yml
- config.yml
- output of the following command

```auto
GET _plugins/_security/api/securityconfig

```

---

<div class="post-metadata">

**Author:** ![taltsafrir](https://avatars.discourse-cdn.com/v4/letter/t/a698b9/32.png) [@taltsafrir](https://forum.opensearch.org/u/taltsafrir)\
**Post date:** [August 19, 2024, 12:30pm UTC](https://forum.opensearch.org/t/ssl-connection-error/15225/11 "2024-08-19T12:30:00Z")

</div>

I’m also facing this problem with version 2.16
