SSL: routines:OPENSSL_internal:WRONG_VERSION_NUMBER


(Yashwant Shettigar) #1

I just restarted elasticsearch service and everything has stopped working.

Below is the output that I get for : curl -XGET 'http://localhost:9200/filebeat-*/_search?pretty'

Connection refused

Connection refused


Description: Connection refused

And this output I'm getting in logstash plain log :

[2018-11-23T09:32:42,476][INFO ][org.logstash.beats.BeatsHandler] [local: 0.0.0.0:5044, remote: 10.193.151.30:63155] Handling exception: javax.net.ssl.SSLHandshakeException: error:100000f7:SSL routines:OPENSSL_internal:WRONG_VERSION_NUMBER
[2018-11-23T09:32:42,476][WARN ][io.netty.channel.DefaultChannelPipeline] An exceptionCaught() event was fired, and it reached at the tail of the pipeline. It usually means the last handler in the pipeline did not handle the exception.
io.netty.handler.codec.DecoderException: javax.net.ssl.SSLHandshakeException: error:100000f7:SSL routines:OPENSSL_internal:WRONG_VERSION_NUMBER


(Tim Vernum) #2

Those 2 errors look like they problaby have different causes.

It seems that your elasticsearch node isn't actually running.
Check the logs.

This seems to be a problem with Beats connecting to Logstash.
It seems that Beats and Logstash cannot agree on a SSL/TLS version to use. Did something get upgraded recently, or was a config changed?


(Yashwant Shettigar) #3

Hi Tim,

The only thing that I did, restarted elasticsearch service and this happened. Now, all of sudden this URL gives me positive output : curl -XGET 'http://localhost:9200/filebeat-*/_search?pretty'

But, I'm still getting " SSL: routines:OPENSSL_internal:WRONG_VERSION_NUMBER " this error.

Also, there is one more issue where I need your help. Somehow I'm only able to send logs from one client machine. As soon as I add the setup for second client, the first client would stop sending the logs, but second client would send the data.