Hi,

I'm getting the following error on the node when trying to connect to Cassandra 
through cqlsh with SSL enabled:


io.netty.handler.codec.DecoderException: javax.net.ssl.SSLHandshakeException: 
Client requested protocol TLSv1 not enabled or not supported

I'm running the C* code (based on trunk from July 5th 2017) in Intellij.
After having run  'ant realclean'  the issue temporarily disappeared, but now 
it's back again and 'realclean'  isn't addressing the issue anymore.

My Netty version is 4.0.44.Final, and the server/client encryption settings 
from the cassandra.yaml file are as follows:

--

server_encryption_options:
  cipher_suites: [TLS_RSA_WITH_AES_128_CBC_SHA256]
  internode_encryption: all
  require_client_auth: true
  protocol: TLSv1.2

client_encryption_options:
  enabled: true
  optional: false
  protocol: TLSv1.2
  require_client_auth: true
  cipher_suites: [TLS_RSA_WITH_AES_128_CBC_SHA256]

--

Things that haven't helped:

* Changing the TLS version to either TLSv1 or TLSv1.1.
* Using Cassandra 3.0
* Googling the issue (others have had the same error message in other contexts, 
but those solutions don't seem to apply here)
* Using other certificates
* Running Cassandra outside of Intellij (starting the /bin/cassandra script)

Any help is really appreciated. Thanks!

BR,
Fredrik

Reply via email to