# Elascticsearch javax.net.ssl.SSLException: Tag mismatch!

**URL:** <https://discuss.elastic.co/t/elascticsearch-javax-net-ssl-sslexception-tag-mismatch/231936>\
**Category:** Elasticsearch\
**Tags:** elastic-stack-security\
**Created:** [May 11, 2020, 6:32am UTC](https://discuss.elastic.co/t/elascticsearch-javax-net-ssl-sslexception-tag-mismatch/231936 "2020-05-11T06:32:44Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![Roma\_Kruglickyi](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/roma_kruglickyi/32/46899_2.png) [@Roma\_Kruglickyi](https://discuss.elastic.co/u/Roma_Kruglickyi)\
**Post date:** [May 11, 2020, 6:32am UTC](https://discuss.elastic.co/t/elascticsearch-javax-net-ssl-sslexception-tag-mismatch/231936/1 "2020-05-11T06:32:45Z")

</div>

I have 3 identical servers with elasticsearch 7.4.2 on Centos 7. I created cluster, 2 nodes work OK, but if I add 3rd node to the cluster , it is a lot of errors in logs and cluster become unstable.

```auto
 exception caught on transport layer [Netty4TcpChannel{
io.netty.handler.codec.DecoderException: javax.net.ssl.SSLException: Tag mismatch!                                                       
        at io.netty.handler.codec.ByteToMessageDecoder.callDecode(ByteToMessageDecoder.java:475) ~[netty-codec-4.1.38.Final.jar:4.1.38.Final]
        at io.netty.handler.codec.ByteToMessageDecoder.channelRead(ByteToMessageDecoder.java:283) ~[netty-codec-4.1.38.Final.jar:4.1.38.Final]
        at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:374) [netty-transport-4.1.38.Final.jar:4.1.38.Final]
        at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:360) [netty-transport-4.1.38.Final.jar:4.1.38.Final]
        at io.netty.channel.AbstractChannelHandlerContext.fireChannelRead(AbstractChannelHandlerContext.java:352) [netty-transport-4.1.38.Final.jar:4.1.38.Final]                                                                                                                 
        at io.netty.channel.DefaultChannelPipeline$HeadContext.channelRead(DefaultChannelPipeline.java:1421) [netty-transport-4.1.38.Final.jar:4.1.38.Final]                                                                                                                      
        at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:374) [netty-transport-4.1.38.Final.jar:4.1.38.Final]
        at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:360) [netty-transport-4.1.38.Final.jar:4.1.38.Final]
        at io.netty.channel.DefaultChannelPipeline.fireChannelRead(DefaultChannelPipeline.java:930) [netty-transport-4.1.38.Final.jar:4.1.38.Final]
        at io.netty.channel.nio.AbstractNioByteChannel$NioByteUnsafe.read(AbstractNioByteChannel.java:163) [netty-transport-4.1.38.Final.jar:4.1.38.Final]         
        at io.netty.channel.nio.NioEventLoop.processSelectedKey(NioEventLoop.java:697) [netty-transport-4.1.38.Final.jar:4.1.38.Final]                                                                                                                                            
        at io.netty.channel.nio.NioEventLoop.processSelectedKeysPlain(NioEventLoop.java:597) [netty-transport-4.1.38.Final.jar:4.1.38.Final]                     
        at io.netty.channel.nio.NioEventLoop.processSelectedKeys(NioEventLoop.java:551) [netty-transport-4.1.38.Final.jar:4.1.38.Final]                                                                                                                                           
        at io.netty.channel.nio.NioEventLoop.run(NioEventLoop.java:511) [netty-transport-4.1.38.Final.jar:4.1.38.Final]                                                                                                                                                           
        at io.netty.util.concurrent.SingleThreadEventExecutor$5.run(SingleThreadEventExecutor.java:918) [netty-common-4.1.38.Final.jar:4.1.38.Final]               
        at io.netty.util.internal.ThreadExecutorMap$2.run(ThreadExecutorMap.java:74) [netty-common-4.1.38.Final.jar:4.1.38.Final]                                                                                                                                                 
        at java.lang.Thread.run(Thread.java:830) [?:?] 

```

I use ssl between nodes on tranport layer.  
SSL certs are ok, selinux off.  
Can anybody help me with this issue?

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [June 8, 2020, 6:34am UTC](https://discuss.elastic.co/t/elascticsearch-javax-net-ssl-sslexception-tag-mismatch/231936/2 "2020-06-08T06:34:10Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.