# Logstash 6.0 beta-1 can't work with IBM JRE 8 due to old JRuby OpenSSL

**URL:** <https://discuss.elastic.co/t/logstash-6-0-beta-1-cant-work-with-ibm-jre-8-due-to-old-jruby-openssl/98547>\
**Category:** Logstash\
**Created:** [August 28, 2017, 10:54am UTC](https://discuss.elastic.co/t/logstash-6-0-beta-1-cant-work-with-ibm-jre-8-due-to-old-jruby-openssl/98547 "2017-08-28T10:54:37Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![AllenShi](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/allenshi/32/21565_2.png) [@AllenShi](https://discuss.elastic.co/u/AllenShi)\
**Post date:** [August 28, 2017, 10:54am UTC](https://discuss.elastic.co/t/logstash-6-0-beta-1-cant-work-with-ibm-jre-8-due-to-old-jruby-openssl/98547/1 "2017-08-28T10:54:38Z")

</div>

I installed Logstash 5.5.1, 5.5.2 and even 6.0-beta1 bundled with another third party plugin to work with IBM JRE 8. The error "no cipher match" is thrown into logstash-plain.log. Per some deep investigation, this issue is relevant to JRuby-OpenSSL lib packaged with JRuby shipped with Logstash. Luckily, that issue ([https://github.com/jruby/jruby/issues/4679](https://github.com/jruby/jruby/issues/4679)) has been fixed in JRuby-OpenSSL 0.9.21, but Logstash was still delivered with old JRuby with old JRuby-OpenSSL version lower than 0.9.21. I checked Logstash 6.0-beta1, it includes Ruby-OpenSSL 0.9.20 gem.

For Logstash 6.0-beta1, the log stack trace is here.

All hosts unavailable, sleeping {:hosts=\>["xx.xx.xx.xx"], :e=\>#\<OpenSSL::SSL::SSLError: no cipher match\>, :backtrace=\>["org/jruby/ext/openssl/SSLContext.java:506:in `ciphers='", "org/jruby/ext/openssl/SSLContext.java:560:in`set\_params'", "/usr/share/logstash/logstash-core/lib/logstash/patches/stronger\_openssl\_defaults.rb:18:in `new'", "/usr/share/logstash/vendor/local_gems/dee1aeb2/logstash-output-mtlumberjack/lib/mtlumberjack/client.rb:215:in`block in connect'", "org/jruby/ext/thread/Mutex.java:148:in `synchronize'", "/usr/share/logstash/vendor/local_gems/dee1aeb2/logstash-output-mtlumberjack/lib/mtlumberjack/client.rb:154:in`connect'", "/usr/share/logstash/vendor/local\_gems/dee1aeb2/logstash-output-mtlumberjack/lib/mtlumberjack/client.rb:125:in `initialize'", "/usr/share/logstash/vendor/local_gems/dee1aeb2/logstash-output-mtlumberjack/lib/mtlumberjack/client.rb:76:in`connect'", "/usr/share/logstash/vendor/local\_gems/dee1aeb2/logstash-output-mtlumberjack/lib/mtlumberjack/client.rb:67:in `initialize'", "/usr/share/logstash/vendor/local_gems/dee1aeb2/logstash-output-mtlumberjack/lib/logstash/outputs/mtlumberjack.rb:143:in`connect'", "/usr/share/logstash/vendor/local\_gems/dee1aeb2/logstash-output-mtlumberjack/lib/logstash/outputs/mtlumberjack.rb:72:in `block in register'", "org/jruby/RubyRange.java:485:in`each'", "/usr/share/logstash/vendor/local\_gems/dee1aeb2/logstash-output-mtlumberjack/lib/logstash/outputs/mtlumberjack.rb:71:in `register'", "org/jruby/RubyArray.java:1734:in`each'", "/usr/share/logstash/logstash-core/lib/logstash/output\_delegator\_strategies/legacy.rb:17:in `register'", "/usr/share/logstash/logstash-core/lib/logstash/output_delegator.rb:41:in`register'", "/usr/share/logstash/logstash-core/lib/logstash/pipeline.rb:376:in `register_plugin'", "/usr/share/logstash/logstash-core/lib/logstash/pipeline.rb:387:in`block in register\_plugins'", "org/jruby/RubyArray.java:1734:in `each'", "/usr/share/logstash/logstash-core/lib/logstash/pipeline.rb:387:in`register\_plugins'", "/usr/share/logstash/logstash-core/lib/logstash/pipeline.rb:396:in `start_workers'", "/usr/share/logstash/logstash-core/lib/logstash/pipeline.rb:321:in`run'", "/usr/share/logstash/logstash-core/lib/logstash/pipeline.rb:281:in `block in start'"]}

Is it possible for you to upgrade JRuby with 0.9.21 JRuby-OpenSSL inside Logstash 6.0?

---

<div class="post-metadata">

**Author:** ![theuntergeek](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/theuntergeek/32/44961_2.png) [@theuntergeek](https://discuss.elastic.co/u/theuntergeek)\
**Post date:** [September 6, 2017, 8:57pm UTC](https://discuss.elastic.co/t/logstash-6-0-beta-1-cant-work-with-ibm-jre-8-due-to-old-jruby-openssl/98547/2 "2017-09-06T20:57:31Z")

</div>

[This change](https://github.com/jruby/jruby/pull/4726) you are requesting made it into [JRuby 9.1.13.0](http://jruby.org/2017/09/06/jruby-9-1-13-0.html), which should be incorporated into Logstash soon, as we need this version to address [JRuby 9000 instabilities](https://github.com/jruby/jruby/issues/4739) we [encountered during testing](https://github.com/elastic/logstash/issues/8006).

Whether or not it makes it into the Logstash 6 release is still a matter of continued testing. It is certain, though, that we cannot use 9.1.12.0. We're still trying to determine whether we'll be able to move forward with 9.1.13.0.

---

<div class="post-metadata">

**Author:** ![AllenShi](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/allenshi/32/21565_2.png) [@AllenShi](https://discuss.elastic.co/u/AllenShi)\
**Post date:** [September 7, 2017, 2:20am UTC](https://discuss.elastic.co/t/logstash-6-0-beta-1-cant-work-with-ibm-jre-8-due-to-old-jruby-openssl/98547/3 "2017-09-07T02:20:43Z")

</div>

Aaron,

Thanks for your response. Looking forwarding to your support!

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [October 5, 2017, 2:21am UTC](https://discuss.elastic.co/t/logstash-6-0-beta-1-cant-work-with-ibm-jre-8-due-to-old-jruby-openssl/98547/4 "2017-10-05T02:21:03Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
