This message tells you the root cause: Caused by: java.security.cert.CertificateException: No subject alternative names present
Your server certificate needs to have a SAN (subject alternative name) - or CN - that matches the server identity (either hostname or IP). You can read up more here https://www.rfc-editor.org/rfc/rfc6125#section-6.4 On Thu, Aug 4, 2022 at 4:49 AM VALENTINA FERRO <valentina.ferr...@gmail.com> wrote: > My tentatives to resolve this issue has not been well. > > Can you help me to identification of possible issue? > > Il giorno mar 2 ago 2022 alle ore 12:02 VALENTINA FERRO < > valentina.ferr...@gmail.com> ha scritto: > >> The problem was in configuration Server Python, I resolved this issue. >> But now I have a new issue. >> >> Caused by: javax.net.ssl.SSLHandshakeException: General OpenSslEngine >> problem >> at >> io.grpc.netty.shaded.io.netty.handler.ssl.ReferenceCountedOpenSslEngine.handshakeException(ReferenceCountedOpenSslEngine.java:1898) >> at >> io.grpc.netty.shaded.io.netty.handler.ssl.ReferenceCountedOpenSslEngine.wrap(ReferenceCountedOpenSslEngine.java:822) >> at java.base/javax.net.ssl.SSLEngine.wrap(SSLEngine.java:564) >> at >> io.grpc.netty.shaded.io.netty.handler.ssl.SslHandler.wrap(SslHandler.java:1039) >> at >> io.grpc.netty.shaded.io.netty.handler.ssl.SslHandler.wrapNonAppData(SslHandler.java:925) >> at >> io.grpc.netty.shaded.io.netty.handler.ssl.SslHandler.unwrap(SslHandler.java:1407) >> at >> io.grpc.netty.shaded.io.netty.handler.ssl.SslHandler.unwrapNonAppData(SslHandler.java:1325) >> at >> io.grpc.netty.shaded.io.netty.handler.ssl.SslHandler.access$1800(SslHandler.java:168) >> at >> io.grpc.netty.shaded.io.netty.handler.ssl.SslHandler$SslTasksRunner.resumeOnEventExecutor(SslHandler.java:1716) >> at >> io.grpc.netty.shaded.io.netty.handler.ssl.SslHandler$SslTasksRunner.access$2000(SslHandler.java:1607) >> at >> io.grpc.netty.shaded.io.netty.handler.ssl.SslHandler$SslTasksRunner$2.run(SslHandler.java:1768) >> at >> io.grpc.netty.shaded.io.netty.util.concurrent.AbstractEventExecutor.safeExecute(AbstractEventExecutor.java:164) >> at >> io.grpc.netty.shaded.io.netty.util.concurrent.SingleThreadEventExecutor.runAllTasks(SingleThreadEventExecutor.java:469) >> at >> io.grpc.netty.shaded.io.netty.channel.nio.NioEventLoop.run(NioEventLoop.java:503) >> at >> io.grpc.netty.shaded.io.netty.util.concurrent.SingleThreadEventExecutor$4.run(SingleThreadEventExecutor.java:986) >> at >> io.grpc.netty.shaded.io.netty.util.internal.ThreadExecutorMap$2.run(ThreadExecutorMap.java:74) >> at >> io.grpc.netty.shaded.io.netty.util.concurrent.FastThreadLocalRunnable.run(FastThreadLocalRunnable.java:30) >> at java.base/java.lang.Thread.run(Thread.java:833) >> Caused by: java.security.cert.CertificateException: No subject >> alternative names present >> at >> java.base/sun.security.util.HostnameChecker.matchIP(HostnameChecker.java:142) >> at >> java.base/sun.security.util.HostnameChecker.match(HostnameChecker.java:101) >> at >> java.base/sun.security.ssl.X509TrustManagerImpl.checkIdentity(X509TrustManagerImpl.java:452) >> at >> java.base/sun.security.ssl.X509TrustManagerImpl.checkIdentity(X509TrustManagerImpl.java:426) >> at >> java.base/sun.security.ssl.X509TrustManagerImpl.checkTrusted(X509TrustManagerImpl.java:292) >> at >> java.base/sun.security.ssl.X509TrustManagerImpl.checkServerTrusted(X509TrustManagerImpl.java:144) >> at >> io.grpc.netty.shaded.io.netty.handler.ssl.ReferenceCountedOpenSslClientContext$ExtendedTrustManagerVerifyCallback.verify(ReferenceCountedOpenSslClientContext.java:234) >> at >> io.grpc.netty.shaded.io.netty.handler.ssl.ReferenceCountedOpenSslContext$AbstractCertificateVerifier.verify(ReferenceCountedOpenSslContext.java:748) >> at >> io.grpc.netty.shaded.io.netty.internal.tcnative.CertificateVerifierTask.runTask(CertificateVerifierTask.java:36) >> at >> io.grpc.netty.shaded.io.netty.internal.tcnative.SSLTask.run(SSLTask.java:48) >> at >> io.grpc.netty.shaded.io.netty.internal.tcnative.SSLTask.run(SSLTask.java:42) >> at >> io.grpc.netty.shaded.io.netty.handler.ssl.ReferenceCountedOpenSslEngine$TaskDecorator.run(ReferenceCountedOpenSslEngine.java:1465) >> at >> io.grpc.netty.shaded.io.netty.handler.ssl.SslHandler$SslTasksRunner.run(SslHandler.java:1785) >> at >> java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1136) >> at >> java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:635) >> ... 1 more >> >> I think that is a problem with keys-certificate of SSL/TLS >> >> Il giorno lun 1 ago 2022 alle ore 19:13 'sanjay...@google.com' via >> grpc.io <grpc-io@googlegroups.com> ha scritto: >> >>> Are you using the same Python server instance for plaintext and SSL/TLS? >>> Don't you also have to configure the Python server to use TLS? >>> >>> On Monday, August 1, 2022 at 3:13:51 AM UTC-7 valentin...@gmail.com >>> wrote: >>> >>>> Hi, >>>> >>>> I have a Client-Java and Server python, this is my problem: >>>> Whitout autenthication is ok, but SSL/TLS throw this from blockingStub >>>> >>>> Exception in thread "main" io.grpc.StatusRuntimeException: UNAVAILABLE: >>>> io exception >>>> Channel Pipeline: [SslHandler#0, >>>> ProtocolNegotiators$ClientTlsHandler#0, >>>> WriteBufferingAndExceptionHandler#0, DefaultChannelPipeline$TailContext#0] >>>> at >>>> io.grpc.stub.ClientCalls.toStatusRuntimeException(ClientCalls.java:271) >>>> at io.grpc.stub.ClientCalls.getUnchecked(ClientCalls.java:252) >>>> at io.grpc.stub.ClientCalls.blockingUnaryCall(ClientCalls.java:165) >>>> at >>>> grpcProtos.ServiceGrpc$ServiceBlockingStub.login(ServiceGrpc.java:316) >>>> at clientGrpc.ClientGrpc.main(ClientGrpc.java:41) >>>> Caused by: >>>> io.grpc.netty.shaded.io.netty.handler.ssl.SslHandshakeTimeoutException: >>>> handshake timed out after 10000ms >>>> at >>>> io.grpc.netty.shaded.io.netty.handler.ssl.SslHandler$7.run(SslHandler.java:2112) >>>> at >>>> io.grpc.netty.shaded.io.netty.util.concurrent.PromiseTask.runTask(PromiseTask.java:98) >>>> at >>>> io.grpc.netty.shaded.io.netty.util.concurrent.ScheduledFutureTask.run(ScheduledFutureTask.java:170) >>>> at >>>> io.grpc.netty.shaded.io.netty.util.concurrent.AbstractEventExecutor.safeExecute(AbstractEventExecutor.java:164) >>>> at >>>> io.grpc.netty.shaded.io.netty.util.concurrent.SingleThreadEventExecutor.runAllTasks(SingleThreadEventExecutor.java:469) >>>> at >>>> io.grpc.netty.shaded.io.netty.channel.nio.NioEventLoop.run(NioEventLoop.java:503) >>>> at >>>> io.grpc.netty.shaded.io.netty.util.concurrent.SingleThreadEventExecutor$4.run(SingleThreadEventExecutor.java:986) >>>> at >>>> io.grpc.netty.shaded.io.netty.util.internal.ThreadExecutorMap$2.run(ThreadExecutorMap.java:74) >>>> at >>>> io.grpc.netty.shaded.io.netty.util.concurrent.FastThreadLocalRunnable.run(FastThreadLocalRunnable.java:30) >>>> at java.base/java.lang.Thread.run(Thread.java:833) >>>> >>>> What is the problem? >>>> >>> -- >>> You received this message because you are subscribed to a topic in the >>> Google Groups "grpc.io" group. >>> To unsubscribe from this topic, visit >>> https://groups.google.com/d/topic/grpc-io/DBfuVBNCtY4/unsubscribe. >>> To unsubscribe from this group and all its topics, send an email to >>> grpc-io+unsubscr...@googlegroups.com. >>> To view this discussion on the web visit >>> https://groups.google.com/d/msgid/grpc-io/e1315e12-5620-4fc2-b90d-b65ff7c251e0n%40googlegroups.com >>> <https://groups.google.com/d/msgid/grpc-io/e1315e12-5620-4fc2-b90d-b65ff7c251e0n%40googlegroups.com?utm_medium=email&utm_source=footer> >>> . >>> >> -- You received this message because you are subscribed to the Google Groups "grpc.io" group. To unsubscribe from this group and stop receiving emails from it, send an email to grpc-io+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/grpc-io/CA%2BPad6j%2BEk2Fnf5qV%2B3a5-93%3DScdKcVz3eXawoKoUNR_%3DgL9Vw%40mail.gmail.com.
