[jira] (IGNITE-24906) .NET: Client Node Discovery fails with HTTPS enabled

Pavel Tupitsyn (Jira) Tue, 02 Dec 2025 23:57:25 -0800


    [ https://issues.apache.org/jira/browse/IGNITE-24906 ]



    Pavel Tupitsyn deleted comment on IGNITE-24906:
    -----------------------------------------

was (Author: ignitetcbot):
{panel:title=Branch: [pull/12549/head] Base: [master] : Possible Blockers 
(112)|borderStyle=dashed|borderColor=#ccc|titleBGColor=#F7D6C1}
{color:#d04437}[Check Code Style Ducktests]{color} [[tests 0 Exit Code 
|https://ci.ignite.apache.org/viewLog.html?buildId=9735629]]

{color:#d04437}Platform C++ CMake (Win x64 / Release){color} [[tests 0 
CANCELLED|https://ci.ignite.apache.org/viewLog.html?buildId=9735667]]

{color:#d04437}Cache 6{color} [[tests 0 
CANCELLED|https://ci.ignite.apache.org/viewLog.html?buildId=9735612]]

{color:#d04437}Cache 7{color} [[tests 0 
CANCELLED|https://ci.ignite.apache.org/viewLog.html?buildId=9735613]]

{color:#d04437}Disk Page Compressions 1{color} [[tests 0 
CANCELLED|https://ci.ignite.apache.org/viewLog.html?buildId=9735700]]

{color:#d04437}Disk Page Compressions 2{color} [[tests 0 
CANCELLED|https://ci.ignite.apache.org/viewLog.html?buildId=9735701]]

{color:#d04437}Cache 12{color} [[tests 0 
CANCELLED|https://ci.ignite.apache.org/viewLog.html?buildId=9735606]]

{color:#d04437}Cache 2{color} [[tests 0 
CANCELLED|https://ci.ignite.apache.org/viewLog.html?buildId=9735608]]

{color:#d04437}Control Utility 1{color} [[tests 0 
CANCELLED|https://ci.ignite.apache.org/viewLog.html?buildId=9735638]]

{color:#d04437}Client Nodes{color} [[tests 0 
CANCELLED|https://ci.ignite.apache.org/viewLog.html?buildId=9735630]]

{color:#d04437}PDS (Indexing){color} [[tests 0 
CANCELLED|https://ci.ignite.apache.org/viewLog.html?buildId=9735665]]

{color:#d04437}Calcite SQL{color} [[tests 0 
CANCELLED|https://ci.ignite.apache.org/viewLog.html?buildId=9735628]]

{color:#d04437}Queries 2 (lazy=true){color} [[tests 0 
CANCELLED|https://ci.ignite.apache.org/viewLog.html?buildId=9735675]]

{color:#d04437}JDBC Driver{color} [[tests 0 
CANCELLED|https://ci.ignite.apache.org/viewLog.html?buildId=9735650]]

{color:#d04437}PDS 4{color} [[tests 0 
CANCELLED|https://ci.ignite.apache.org/viewLog.html?buildId=9735659]]

{color:#d04437}PDS 8{color} [[tests 0 
CANCELLED|https://ci.ignite.apache.org/viewLog.html?buildId=9735663]]

{color:#d04437}Cache 8{color} [[tests 0 
CANCELLED|https://ci.ignite.apache.org/viewLog.html?buildId=9735614]]

{color:#d04437}PDS 2{color} [[tests 0 
CANCELLED|https://ci.ignite.apache.org/viewLog.html?buildId=9735657]]

{color:#d04437}PDS 5{color} [[tests 0 
CANCELLED|https://ci.ignite.apache.org/viewLog.html?buildId=9735660]]

{color:#d04437}Queries 3 (lazy=true){color} [[tests 0 
CANCELLED|https://ci.ignite.apache.org/viewLog.html?buildId=9735677]]

{color:#d04437}PDS 6{color} [[tests 0 
CANCELLED|https://ci.ignite.apache.org/viewLog.html?buildId=9735661]]

{color:#d04437}Continuous Query 4{color} [[tests 0 
CANCELLED|https://ci.ignite.apache.org/viewLog.html?buildId=9735637]]

{color:#d04437}ZooKeeper (Discovery) 4{color} [[tests 0 
CANCELLED|https://ci.ignite.apache.org/viewLog.html?buildId=9735698]]

{color:#d04437}Queries 4 (lazy=true){color} [[tests 0 
CANCELLED|https://ci.ignite.apache.org/viewLog.html?buildId=9735679]]

{color:#d04437}Snapshots 2{color} [[tests 0 
CANCELLED|https://ci.ignite.apache.org/viewLog.html?buildId=9735703]]

{color:#d04437}Snapshots 1{color} [[tests 0 
CANCELLED|https://ci.ignite.apache.org/viewLog.html?buildId=9735683]]

{color:#d04437}Cache 5{color} [[tests 0 
CANCELLED|https://ci.ignite.apache.org/viewLog.html?buildId=9735611]]

{color:#d04437}Queries 2{color} [[tests 0 
CANCELLED|https://ci.ignite.apache.org/viewLog.html?buildId=9735674]]

{color:#d04437}Basic 4{color} [[tests 0 
CANCELLED|https://ci.ignite.apache.org/viewLog.html?buildId=9735601]]

{color:#d04437}Platform C++ CMake (Linux Clang){color} [[tests 0 
CANCELLED|https://ci.ignite.apache.org/viewLog.html?buildId=9735669]]

{color:#d04437}PDS 1{color} [[tests 0 
CANCELLED|https://ci.ignite.apache.org/viewLog.html?buildId=9735656]]

{color:#d04437}Snapshots 3{color} [[tests 0 
CANCELLED|https://ci.ignite.apache.org/viewLog.html?buildId=9735704]]

{color:#d04437}SPI (Discovery){color} [[tests 0 
CANCELLED|https://ci.ignite.apache.org/viewLog.html?buildId=9735686]]

{color:#d04437}ZooKeeper (Discovery) 3{color} [[tests 0 
CANCELLED|https://ci.ignite.apache.org/viewLog.html?buildId=9735697]]

{color:#d04437}Basic 1{color} [[tests 0 
CANCELLED|https://ci.ignite.apache.org/viewLog.html?buildId=9735598]]

{color:#d04437}[Inspections] Core{color} [[tests 0 Exit Code 
|https://ci.ignite.apache.org/viewLog.html?buildId=9735645]]

{color:#d04437}Platform C++ CMake (Linux){color} [[tests 0 
CANCELLED|https://ci.ignite.apache.org/viewLog.html?buildId=9735668]]

{color:#d04437}Activate / Deactivate Cluster{color} [[tests 0 
CANCELLED|https://ci.ignite.apache.org/viewLog.html?buildId=9735597]]

{color:#d04437}Cache 11{color} [[tests 0 
CANCELLED|https://ci.ignite.apache.org/viewLog.html?buildId=9735605]]

{color:#d04437}Control Utility (Zookeeper){color} [[tests 0 
CANCELLED|https://ci.ignite.apache.org/viewLog.html?buildId=9735639]]

{color:#d04437}Cache 3{color} [[tests 0 
CANCELLED|https://ci.ignite.apache.org/viewLog.html?buildId=9735609]]

{color:#d04437}Control Utility 2{color} [[tests 0 
CANCELLED|https://ci.ignite.apache.org/viewLog.html?buildId=9735699]]

{color:#d04437}Queries 1{color} [[tests 0 
CANCELLED|https://ci.ignite.apache.org/viewLog.html?buildId=9735672]]

{color:#d04437}Cache 14{color} [[tests 0 
CANCELLED|https://ci.ignite.apache.org/viewLog.html?buildId=9735706]]

{color:#d04437}Cache (Failover) 1{color} [[tests 0 
CANCELLED|https://ci.ignite.apache.org/viewLog.html?buildId=9735618]]

{color:#d04437}Cache 4{color} [[tests 0 
CANCELLED|https://ci.ignite.apache.org/viewLog.html?buildId=9735610]]

{color:#d04437}Cache 9{color} [[tests 0 
CANCELLED|https://ci.ignite.apache.org/viewLog.html?buildId=9735615]]

{color:#d04437}Continuous Query 1{color} [[tests 0 
CANCELLED|https://ci.ignite.apache.org/viewLog.html?buildId=9735634]]

{color:#d04437}Basic 3{color} [[tests 0 
CANCELLED|https://ci.ignite.apache.org/viewLog.html?buildId=9735600]]

{color:#d04437}Cache (Full API Multi JVM) 2{color} [[tests 0 
CANCELLED|https://ci.ignite.apache.org/viewLog.html?buildId=9735624]]

{color:#d04437}Queries 1 (lazy=true){color} [[tests 0 
CANCELLED|https://ci.ignite.apache.org/viewLog.html?buildId=9735673]]

{color:#d04437}Queries 3{color} [[tests 0 
CANCELLED|https://ci.ignite.apache.org/viewLog.html?buildId=9735676]]

{color:#d04437}Compute (Grid){color} [[tests 0 
CANCELLED|https://ci.ignite.apache.org/viewLog.html?buildId=9735632]]

{color:#d04437}Service Grid{color} [[tests 0 
CANCELLED|https://ci.ignite.apache.org/viewLog.html?buildId=9735682]]

{color:#d04437}Continuous Query 2{color} [[tests 0 
CANCELLED|https://ci.ignite.apache.org/viewLog.html?buildId=9735635]]

{color:#d04437}Continuous Query 3{color} [[tests 0 
CANCELLED|https://ci.ignite.apache.org/viewLog.html?buildId=9735636]]

{color:#d04437}Compute (Affinity Run){color} [[tests 0 
CANCELLED|https://ci.ignite.apache.org/viewLog.html?buildId=9735631]]

{color:#d04437}Spring{color} [[tests 0 
CANCELLED|https://ci.ignite.apache.org/viewLog.html?buildId=9735688]]

{color:#d04437}Cache 13{color} [[tests 0 
CANCELLED|https://ci.ignite.apache.org/viewLog.html?buildId=9735607]]

{color:#d04437}Queries 4{color} [[tests 0 
CANCELLED|https://ci.ignite.apache.org/viewLog.html?buildId=9735678]]

{color:#d04437}Cache (Failover) 2{color} [[tests 0 
CANCELLED|https://ci.ignite.apache.org/viewLog.html?buildId=9735619]]

{color:#d04437}Snapshots With Indexes{color} [[tests 0 
CANCELLED|https://ci.ignite.apache.org/viewLog.html?buildId=9735684]]

{color:#d04437}Java Client{color} [[tests 0 
CANCELLED|https://ci.ignite.apache.org/viewLog.html?buildId=9735649]]

{color:#d04437}PDS 3{color} [[tests 0 
CANCELLED|https://ci.ignite.apache.org/viewLog.html?buildId=9735658]]

{color:#d04437}Cache 1{color} [[tests 0 
CANCELLED|https://ci.ignite.apache.org/viewLog.html?buildId=9735603]]

{color:#d04437}Consistency{color} [[tests 0 
CANCELLED|https://ci.ignite.apache.org/viewLog.html?buildId=9735633]]

{color:#d04437}PDS (Compatibility){color} [[tests 0 
CANCELLED|https://ci.ignite.apache.org/viewLog.html?buildId=9735664]]

{color:#d04437}Thin Client: Java{color} [[tests 0 
CANCELLED|https://ci.ignite.apache.org/viewLog.html?buildId=9735690]]

{color:#d04437}Index Query API{color} [[tests 0 
CANCELLED|https://ci.ignite.apache.org/viewLog.html?buildId=9735644]]

{color:#d04437}Cache (Failover) 3{color} [[tests 0 
CANCELLED|https://ci.ignite.apache.org/viewLog.html?buildId=9735620]]

{color:#d04437}Cache (Restarts) 2{color} [[tests 0 
CANCELLED|https://ci.ignite.apache.org/viewLog.html?buildId=9735626]]

{color:#d04437}Cache (Full API Multi JVM) 1{color} [[tests 0 
CANCELLED|https://ci.ignite.apache.org/viewLog.html?buildId=9735623]]

{color:#d04437}ZooKeeper (Discovery) 1{color} [[tests 0 
CANCELLED|https://ci.ignite.apache.org/viewLog.html?buildId=9735695]]

{color:#d04437}SPI{color} [[tests 0 
CANCELLED|https://ci.ignite.apache.org/viewLog.html?buildId=9735685]]

{color:#d04437}Data Structures{color} [[tests 0 
CANCELLED|https://ci.ignite.apache.org/viewLog.html?buildId=9735640]]

{color:#d04437}Cache Objects Compression{color} [[tests 0 
CANCELLED|https://ci.ignite.apache.org/viewLog.html?buildId=9735702]]

{color:#d04437}Cache (Restarts) 1{color} [[tests 0 
CANCELLED|https://ci.ignite.apache.org/viewLog.html?buildId=9735625]]

{color:#d04437}Cache (Deadlock Detection){color} [[tests 0 
CANCELLED|https://ci.ignite.apache.org/viewLog.html?buildId=9735616]]

{color:#d04437}Cache 10{color} [[tests 0 
CANCELLED|https://ci.ignite.apache.org/viewLog.html?buildId=9735604]]

{color:#d04437}ZooKeeper (Discovery) 2{color} [[tests 0 
CANCELLED|https://ci.ignite.apache.org/viewLog.html?buildId=9735696]]

{color:#d04437}Binary Objects{color} [[tests 0 
CANCELLED|https://ci.ignite.apache.org/viewLog.html?buildId=9735602]]

{color:#d04437}&gt; Build{color} [[tests 0 Exit Code 
|https://ci.ignite.apache.org/viewLog.html?buildId=9735596]]

{color:#d04437}Cache (Failover SSL){color} [[tests 0 
CANCELLED|https://ci.ignite.apache.org/viewLog.html?buildId=9735621]]

{color:#d04437}Cache (Expiry Policy){color} [[tests 0 
CANCELLED|https://ci.ignite.apache.org/viewLog.html?buildId=9735617]]

{color:#d04437}Cache (Tx Recovery){color} [[tests 0 
CANCELLED|https://ci.ignite.apache.org/viewLog.html?buildId=9735627]]

{color:#d04437}Web Sessions{color} [[tests 0 
CANCELLED|https://ci.ignite.apache.org/viewLog.html?buildId=9735693]]

{color:#d04437}PDS 7{color} [[tests 0 
CANCELLED|https://ci.ignite.apache.org/viewLog.html?buildId=9735662]]

{color:#d04437}Examples{color} [[tests 0 
CANCELLED|https://ci.ignite.apache.org/viewLog.html?buildId=9735642]]

{color:#d04437}Security{color} [[tests 0 
CANCELLED|https://ci.ignite.apache.org/viewLog.html?buildId=9735681]]

{color:#d04437}Interceptor Cache (Full API Config Variations / Peer Class 
Loading){color} [[tests 0 
CANCELLED|https://ci.ignite.apache.org/viewLog.html?buildId=9735647]]

{color:#d04437}Interceptor Cache (Full API Config Variations / Basic){color} 
[[tests 0 CANCELLED|https://ci.ignite.apache.org/viewLog.html?buildId=9735646]]

{color:#d04437}Cache (Full API){color} [[tests 0 
CANCELLED|https://ci.ignite.apache.org/viewLog.html?buildId=9735622]]

{color:#d04437}NUMA Allocator{color} [[tests 0 
CANCELLED|https://ci.ignite.apache.org/viewLog.html?buildId=9735654]]

{color:#d04437}Open Census{color} [[tests 0 
CANCELLED|https://ci.ignite.apache.org/viewLog.html?buildId=9735655]]

{color:#d04437}Kubernetes{color} [[tests 0 
CANCELLED|https://ci.ignite.apache.org/viewLog.html?buildId=9735652]]

{color:#d04437}Basic (Log4J){color} [[tests 0 
CANCELLED|https://ci.ignite.apache.org/viewLog.html?buildId=9735709]]

{color:#d04437}SPI (URI Deploy){color} [[tests 0 
CANCELLED|https://ci.ignite.apache.org/viewLog.html?buildId=9735687]]

{color:#d04437}Queries (Config Variations){color} [[tests 0 
CANCELLED|https://ci.ignite.apache.org/viewLog.html?buildId=9735680]]

{color:#d04437}Examples (LGPL){color} [[tests 0 
CANCELLED|https://ci.ignite.apache.org/viewLog.html?buildId=9735643]]

{color:#d04437}Java Rest Client{color} [[tests 0 
CANCELLED|https://ci.ignite.apache.org/viewLog.html?buildId=9735705]]

{color:#d04437}Basic 2{color} [[tests 0 
CANCELLED|https://ci.ignite.apache.org/viewLog.html?buildId=9735599]]

{color:#d04437}Basic 5{color} [[tests 0 
CANCELLED|https://ci.ignite.apache.org/viewLog.html?buildId=9735712]]

{color:#d04437}Logging{color} [[tests 0 
CANCELLED|https://ci.ignite.apache.org/viewLog.html?buildId=9735653]]

{color:#d04437}JTA{color} [[tests 0 
CANCELLED|https://ci.ignite.apache.org/viewLog.html?buildId=9735651]]

{color:#d04437}Dev Utils{color} [[tests 0 
CANCELLED|https://ci.ignite.apache.org/viewLog.html?buildId=9735641]]

{color:#d04437}Cache 15{color} [[tests 0 
CANCELLED|https://ci.ignite.apache.org/viewLog.html?buildId=9735707]]

{color:#d04437}Basic (Scheduler){color} [[tests 0 
CANCELLED|https://ci.ignite.apache.org/viewLog.html?buildId=9735710]]

{color:#d04437}Basic (Slf4J){color} [[tests 0 
CANCELLED|https://ci.ignite.apache.org/viewLog.html?buildId=9735711]]

{color:#d04437}Basic (JCL){color} [[tests 0 
CANCELLED|https://ci.ignite.apache.org/viewLog.html?buildId=9735708]]

{color:#d04437}Streamers{color} [[tests 0 
CANCELLED|https://ci.ignite.apache.org/viewLog.html?buildId=9735689]]

{color:#d04437}PDS (Unit Tests){color} [[tests 0 
CANCELLED|https://ci.ignite.apache.org/viewLog.html?buildId=9735666]]

{color:#d04437}JCache TCK 1.1{color} [[tests 0 
CANCELLED|https://ci.ignite.apache.org/viewLog.html?buildId=9735648]]

{panel}
[TeamCity *--&gt; Run :: All* 
Results|https://ci.ignite.apache.org/viewLog.html?buildId=9735713&amp;buildTypeId=IgniteTests24Java8_RunAll]

> .NET: Client Node Discovery fails with HTTPS enabled
> ----------------------------------------------------
>
>                 Key: IGNITE-24906
>                 URL: https://issues.apache.org/jira/browse/IGNITE-24906
>             Project: Ignite
>          Issue Type: Bug
>          Components: platforms, thin client
>    Affects Versions: 2.15, 2.16, 2.17
>            Reporter: Pavel Tupitsyn
>            Assignee: Pavel Tupitsyn
>            Priority: Major
>              Labels: .NET
>             Fix For: 2.18
>
>          Time Spent: 50m
>  Remaining Estimate: 0h
>
> Automatic Node Discovery fails in .NET Thin Client with HTTPS enabled due to 
> certificate validation issues.
> *Steps to Reproduce:*
> * Set up a cluster where each node has HTTPS enabled and a trusted 
> certificate with both the hostname and DNS alias in the SAN list.
> * Connect to the cluster using the .NET Thin Client.
> * Enable Automatic Server Node Discovery 
> (IgniteClientConfiguration.EnableClusterDiscovery).
> * Observe that the discovery process fails with a 
> *RemoteCertificateNameMismatch* error.
> *Observed Behavior:*
> * The error occurs because discovery requests target IP addresses instead of 
> hostnames.
> * Since the IP addresses are not included in the certificate's SAN list, 
> certificate validation fails.
> * The error is logged in the background, but the client is still able to 
> connect.
> *Expected Behavior:*
> * Automatic Server Node Discovery should not fail when each host has a valid, 
> trusted certificate.
> * Discovery requests should use hostnames instead of IP addresses for HTTPS 
> connections.
> *Log output:*
> {code}
> [11:16:49] [Error] [ClientFailoverSocket] Failed to update topology 
> information (exception: 
> System.Security.Authentication.AuthenticationException: The remote 
> certificate was rejected by the provided RemoteCertificateValidationCallback.
>    at 
> System.Net.Security.SslStream.CompleteHandshake(SslAuthenticationOptions 
> sslAuthenticationOptions)
>    at 
> System.Net.Security.SslStream.ForceAuthenticationAsync[TIOAdapter](Boolean 
> receiveFirst, Byte[] reAuthenticationData, CancellationToken 
> cancellationToken)
>    at 
> System.Net.Security.SslStream.ProcessAuthenticationWithTelemetryAsync(Boolean 
> isAsync, CancellationToken cancellationToken)
>    at 
> System.Net.Security.SslStream.AuthenticateAsClient(SslClientAuthenticationOptions
>  sslClientAuthenticationOptions)
>    at Apache.Ignite.Core.Client.SslStreamFactory.Create(Stream stream, String 
> targetHost)
>    at Apache.Ignite.Core.Impl.Client.ClientSocket.GetSocketStream(Socket 
> socket, IgniteClientConfiguration cfg, String host)
>    at 
> Apache.Ignite.Core.Impl.Client.ClientSocket..ctor(IgniteClientConfiguration 
> clientConfiguration, EndPoint endPoint, String host, Nullable`1 version, 
> Action`1 topVerCallback, Marshaller marshaller)
>    at 
> Apache.Ignite.Core.Impl.Client.ClientFailoverSocket.TryConnect(ClientDiscoveryNode
>  node)
>    at Apache.Ignite.Core.Impl.Client.ClientFailoverSocket.InitSocketMap()
>    at 
> Apache.Ignite.Core.Impl.Client.ClientFailoverSocket.<OnAffinityTopologyVersionChange>b__40_0(Object
>  _))
> {code}
> Potential cause: *ClientFailoverSocket* in the .NET client uses IP endpoints 
> instead of hostnames.
> Reference: 
> [ClientFailoverSocket.cs#L948|https://github.com/apache/ignite/blob/be1f4bc6378c0ceb75a16c286a1a6ee00875d624/modules/platforms/dotnet/Apache.Ignite.Core/Impl/Client/ClientFailoverSocket.cs#L133]



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

[jira] (IGNITE-24906) .NET: Client Node Discovery fails with HTTPS enabled

Reply via email to