# io.netty.handler.codec.DecoderException: javax.net.ssl.SSLException: Session has no PSK
**URL:** https://discuss.elastic.co/t/io-netty-handler-codec-decoderexception-javax-net-ssl-sslexception-session-has-no-psk/233722
**Category:** Elasticsearch
**Tags:** elastic-stack-security
**Created:** [May 21, 2020, 10:40am UTC](https://discuss.elastic.co/t/io-netty-handler-codec-decoderexception-javax-net-ssl-sslexception-session-has-no-psk/233722 "2020-05-21T10:40:11Z")
**Posts on this page:** 7
**Page:** 1
### Author:  [@rahul\_s](https://discuss.elastic.co/u/rahul_s)
#### Post date: [May 21, 2020, 10:40am UTC](https://discuss.elastic.co/t/io-netty-handler-codec-decoderexception-javax-net-ssl-sslexception-session-has-no-psk/233722/1 "2020-05-21T10:40:11Z")
Using Elasticsearch 7.6.1 with SSL enabled we noticed the following error being logged in Elasticsearch logs
[WARN][o.e.h.AbstractHttpServerTransport] [host] caught exception while handling client http traffic, closing connection Netty4HttpChannel{localAddress=/hostname:9200, remoteAddress=/hostname:52619}
io.netty.handler.codec.DecoderException: javax.net.ssl.SSLException: Session has no PSK
at io.netty.handler.codec.ByteToMessageDecoder.callDecode(ByteToMessageDecoder.java:473) ~[netty-codec-4.1.43.Final.jar:4.1.43.Final]
at io.netty.handler.codec.ByteToMessageDecoder.channelRead(ByteToMessageDecoder.java:281) ~[netty-codec-4.1.43.Final.jar:4.1.43.Final]
at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:374) [netty-transport-4.1.43.Final.jar:4.1.43.Final]
at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:360) [netty-transport-4.1.43.Final.jar:4.1.43.Final]
at io.netty.channel.AbstractChannelHandlerContext.fireChannelRead(AbstractChannelHandlerContext.java:352) [netty-transport-4.1.43.Final.jar:4.1.43.Final]
at io.netty.channel.DefaultChannelPipeline$HeadContext.channelRead(DefaultChannelPipeline.java:1422) [netty-transport-4.1.43.Final.jar:4.1.43.Final]
at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:374) [netty-transport-4.1.43.Final.jar:4.1.43.Final]
at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:360) [netty-transport-4.1.43.Final.jar:4.1.43.Final]
at io.netty.channel.DefaultChannelPipeline.fireChannelRead(DefaultChannelPipeline.java:931) [netty-transport-4.1.43.Final.jar:4.1.43.Final]
at io.netty.channel.nio.AbstractNioByteChannel$NioByteUnsafe.read(AbstractNioByteChannel.java:163) [netty-transport-4.1.43.Final.jar:4.1.43.Final]
at io.netty.channel.nio.NioEventLoop.processSelectedKey(NioEventLoop.java:700) [netty-transport-4.1.43.Final.jar:4.1.43.Final]
at io.netty.channel.nio.NioEventLoop.processSelectedKeysPlain(NioEventLoop.java:600) [netty-transport-4.1.43.Final.jar:4.1.43.Final]
at io.netty.channel.nio.NioEventLoop.processSelectedKeys(NioEventLoop.java:554) [netty-transport-4.1.43.Final.jar:4.1.43.Final]
at io.netty.channel.nio.NioEventLoop.run(NioEventLoop.java:514) [netty-transport-4.1.43.Final.jar:4.1.43.Final]
and also :
'''[WARN][o.e.h.AbstractHttpServerTransport] [hostname] caught exception while handling client http traffic, closing connection Netty4HttpChannel{localAddress=/hostip:9200, remoteAddress=/hostip:57143}
io.netty.handler.codec.DecoderException: java.lang.NullPointerException
at io.netty.handler.codec.ByteToMessageDecoder.callDecode(ByteToMessageDecoder.java:473) ~[netty-codec-4.1.43.Final.jar:4.1.43.Final]
at io.netty.handler.codec.ByteToMessageDecoder.channelRead(ByteToMessageDecoder.java:281) ~[netty-codec-4.1.43.Final.jar:4.1.43.Final]
at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:374) [netty-transport-4.1.43.Final.jar:4.1.43.Final]
at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:360) [netty-transport-4.1.43.Final.jar:4.1.43.Final]
at io.netty.channel.AbstractChannelHandlerContext.fireChannelRead(AbstractChannelHandlerContext.java:352) [netty-transport-4.1.43.Final.jar:4.1.43.Final]
at io.netty.channel.DefaultChannelPipeline$HeadContext.channelRead(DefaultChannelPipeline.java:1422) [netty-transport-4.1.43.Final.jar:4.1.43.Final]
at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:374) [netty-transport-4.1.43.Final.jar:4.1.43.Final]
at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:360) [netty-transport-4.1.43.Final.jar:4.1.43.Final]
at io.netty.channel.DefaultChannelPipeline.fireChannelRead(DefaultChannelPipeline.java:931) [netty-transport-4.1.43.Final.jar:4.1.43.Final]
at io.netty.channel.nio.AbstractNioByteChannel$NioByteUnsafe.read(AbstractNioByteChannel.java:163) [netty-transport-4.1.43.Final.jar:4.1.43.Final]
at io.netty.channel.nio.NioEventLoop.processSelectedKey(NioEventLoop.java:700) [netty-transport-4.1.43.Final.jar:4.1.43.Final]
at io.netty.channel.nio.NioEventLoop.processSelectedKeysPlain(NioEventLoop.java:600) [netty-transport-4.1.43.Final.jar:4.1.43.Final]
at io.netty.channel.nio.NioEventLoop.processSelectedKeys(NioEventLoop.java:554) [netty-transport-4.1.43.Final.jar:4.1.43.Final]
at io.netty.channel.nio.NioEventLoop.run(NioEventLoop.java:514) [netty-transport-4.1.43.Final.jar:4.1.43.Final]
at io.netty.util.concurrent.SingleThreadEventExecutor$6.run(SingleThreadEventExecutor.java:1050) [netty-common-4.1.43.Final.jar:4.1.43.Final]
at io.netty.util.internal.ThreadExecutorMap$2.run(ThreadExecutorMap.java:74) [netty-common-4.1.43.Final.jar:4.1.43.Final]
at java.lang.Thread.run(Thread.java:830) [?:?]
Caused by: java.lang.NullPointerException
at sun.security.ssl.HKDF.extract(HKDF.java:93) ~[?:?]
at sun.security.ssl.HKDF.extract(HKDF.java:119) ~[?:?]
Is this an issue in Elasticsearch ,or am i missing some configuration or something else has to be done ?
---
### Author:  [@ikakavas](https://discuss.elastic.co/u/ikakavas)
#### Post date: [May 21, 2020, 10:59am UTC](https://discuss.elastic.co/t/io-netty-handler-codec-decoderexception-javax-net-ssl-sslexception-session-has-no-psk/233722/2 "2020-05-21T10:59:29Z")
This looks like [https://bugs.openjdk.java.net/browse/JDK-8241248](https://bugs.openjdk.java.net/browse/JDK-8241248). Are you running with the bundled jdk ? Can you share your transport TLS configuration and how you generated the keys/certificates you are using?
---
### Author:  [@rahul\_s](https://discuss.elastic.co/u/rahul_s)
#### Post date: [May 22, 2020, 10:08am UTC](https://discuss.elastic.co/t/io-netty-handler-codec-decoderexception-javax-net-ssl-sslexception-session-has-no-psk/233722/3 "2020-05-22T10:08:24Z")
Yes we are using the bundled JDK
/elastic/elasticsearch-7.6.1/jdk/bin/java -version
openjdk version "13.0.2" 2020-01-14
OpenJDK Runtime Environment AdoptOpenJDK (build 13.0.2+8)
OpenJDK 64-Bit Server VM AdoptOpenJDK (build 13.0.2+8, mixed mode, sharing)
And for the question on TLS configuration and how certificates were generated :
1. We generated the certicates using the elastic-certutil utility as follows:
/elasticsearch-certutil cert ca --pem --in /tmp/instances.yml --out /tmp/check/certs.zip
where instances.yml contains the node information
2. TLS configuration:
xpack.security.enabled: true
xpack.security.http.ssl.enabled: true
xpack.security.transport.ssl.enabled: true
xpack.security.http.ssl.key: certs/xxxxxxx.key
xpack.security.http.ssl.certificate: certs/xxxxxxx.crt
xpack.security.http.ssl.verification\_mode: certificate
xpack.security.transport.ssl.key: certs/xxxxxxx.key
xpack.security.transport.ssl.certificate: certs/xxxxxxx.crt
xpack.security.transport.ssl.verification\_mode: certificate
---
### Author:  [@rahul\_s](https://discuss.elastic.co/u/rahul_s)
#### Post date: [June 2, 2020, 12:08pm UTC](https://discuss.elastic.co/t/io-netty-handler-codec-decoderexception-javax-net-ssl-sslexception-session-has-no-psk/233722/4 "2020-06-02T12:08:57Z")
Any updates on this issue is appreciated
---
### Author:  [@rahul\_s](https://discuss.elastic.co/u/rahul_s)
#### Post date: [June 5, 2020, 6:55am UTC](https://discuss.elastic.co/t/io-netty-handler-codec-decoderexception-javax-net-ssl-sslexception-session-has-no-psk/233722/5 "2020-06-05T06:55:07Z")
Hi team, any suggestions on this matter would be great!
---
### Author:  [@rahul\_s](https://discuss.elastic.co/u/rahul_s)
#### Post date: [June 24, 2020, 5:22am UTC](https://discuss.elastic.co/t/io-netty-handler-codec-decoderexception-javax-net-ssl-sslexception-session-has-no-psk/233722/6 "2020-06-24T05:22:05Z")
Hi team , checking on this if any update exists on this issue
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [July 22, 2020, 5:22am UTC](https://discuss.elastic.co/t/io-netty-handler-codec-decoderexception-javax-net-ssl-sslexception-session-has-no-psk/233722/7 "2020-07-22T05:22:11Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.