I am attempting to start up Ignite with TLS mode turned on as described in Ignite’s documentation. This is working but when I try to connect a Thin Client the server reports the error below:
Handshake header check failed: 493
I have created a rootCA .pfx file that serves as the KeyStore in the Server’s SslContextFactory. The server start’s up fine and logs the expected message according to the documentation:
Security status [authentication=off, tls/ssl=on]
The problem comes in when I start a Thin Client with SSL settings. I created a pfx file for the client from the rootCA that is being used as the KeyStore for the server. I specify the path and password to the client’s pfx file in the SslStreamFactory for the client. When the client calls Ignition.StartClient() it immediately reports the error below:
Received an unexpected EOF or 0 bytes from the transport stream
At the same time the Server log reports this error:
native error: java.io.IOException: Handshake header check failed: 493
at org.apache.ignite.internal.processors.odbc.ClientMessage.readFrom(ClientMessage.java:186)
at org.apache.ignite.internal.processors.odbc.ClientListenerNioMessageParser.decode(ClientListenerNioMessageParser.java:66)
at org.apache.ignite.internal.util.nio.GridNioCodecFilter.onMessageReceived(GridNioCodecFilter.java:113)
at org.apache.ignite.internal.util.nio.GridNioFilterAdapter.proceedMessageReceived(GridNioFilterAdapter.java:109)
at org.apache.ignite.internal.util.nio.GridNioServer$HeadFilter.onMessageReceived(GridNioServer.java:3753)
at org.apache.ignite.internal.util.nio.GridNioFilterChain.onMessageReceived(GridNioFilterChain.java:175)
at org.apache.ignite.internal.util.nio.GridNioServer$DirectNioClientWorker.processRead(GridNioServer.java:1379)
at org.apache.ignite.internal.util.nio.GridNioServer$AbstractNioClientWorker.processSelectedKeysOptimized(GridNioServer.java:2527)
at org.apache.ignite.internal.util.nio.GridNioServer$AbstractNioClientWorker.bodyInternal(GridNioServer.java:2282)
at org.apache.ignite.internal.util.nio.GridNioServer$AbstractNioClientWorker.body(GridNioServer.java:1911)
at org.apache.ignite.internal.util.worker.GridWorker.run(GridWorker.java:125)
at java.base/java.lang.Thread.run(Unknown Source)
What is the cause of these errors? When I remove the SslStreamFactory from the Client’s configuration it connects without issue.