Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

Azure Redis (with SSL) connection could not be made

See original GitHub issue

EE 5.2.3.201810261805

When trying to connect to Azure Redis, the connection fails with:

Could not get a resource from the pool
  javax.net.ssl.SSLException: Connection has been shutdown: javax.net.ssl.SSLException: java.lang.RuntimeException: Unexpected error: java.security.InvalidAlgorithmParameterException: the trustAnchors parameter must be non-empty
  javax.net.ssl.SSLException: Connection has been shutdown: javax.net.ssl.SSLException: java.lang.RuntimeException: Unexpected error: java.security.InvalidAlgorithmParameterException: the trustAnchors parameter must be non-empty
    Connection has been shutdown: javax.net.ssl.SSLException: java.lang.RuntimeException: Unexpected error: java.security.InvalidAlgorithmParameterException: the trustAnchors parameter must be non-empty
    Connection has been shutdown: javax.net.ssl.SSLException: java.lang.RuntimeException: Unexpected error: java.security.InvalidAlgorithmParameterException: the trustAnchors parameter must be non-empty
      java.lang.RuntimeException: Unexpected error: java.security.InvalidAlgorithmParameterException: the trustAnchors parameter must be non-empty
      java.lang.RuntimeException: Unexpected error: java.security.InvalidAlgorithmParameterException: the trustAnchors parameter must be non-empty
        Unexpected error: java.security.InvalidAlgorithmParameterException: the trustAnchors parameter must be non-empty
        Unexpected error: java.security.InvalidAlgorithmParameterException: the trustAnchors parameter must be non-empty
          **the trustAnchors parameter must be non-empty**
          the trustAnchors parameter must be non-empty

I’ve used https://www.htbridge.com/ssl/ to check if SSL connection could be established and server cert is without issues. It didn’t find anything wrong with it.

Issue Analytics

State:
Created 5 years ago
Reactions:1
Comments:6 (3 by maintainers)

Top GitHub Comments

1reaction

serge-ridercommented, Nov 14, 2018

It works well if you have client certificate/key:

It also works with just client SSL certificate (private key and CA certificate are optional). But it doesn’t work without certificate at all.

I’m testing with stunnel SSL proxy on server-side.

0reactions

serge-ridercommented, Oct 6, 2019

@jdvor Sorry, missed this ticket. Well, current implementation requires explicit certificate. Self-signed (aka auto-generated) certs are not secure at all (and make whole SSL model senseless). However, in some cases it is necessary (e.g. when SSL is the only way to connect and you don’t have a client certificate).

Anyway, please create a feature request for self-signed SSL certificates support for Redis.