Logger: com.floragunn.searchguard.ssl.transport.SearchGuardSSLNettyTransport

Question

Debashis Das

Member since 2022

4 posts

Cognizant

Posted: 3 days 7 hours ago

Last activity: 3 days 7 hours ago

Posted: 13 Nov 2025 10:27 EST
Last activity: 13 Nov 2025 10:27 EST

Logger: com.floragunn.searchguard.ssl.transport.SearchGuardSSLNettyTransport

Report

We are receiving in our PegaRULES.log, any suggestions how to debug this issue?

{
   "instant": {
       "epochSecond": 1763025947,
       "nanoOfSecond": 73000000
   },
   "thread": "elasticsearch[TOMCAT-PEGA-SUPPORT-01][[transport_server_worker.default]][T#2]",
   "level": "ERROR",
   "loggerName": "com.floragunn.searchguard.ssl.transport.SearchGuardSSLNettyTransport",
   "marker": {
       "name": "[TOMCAT-PEGA-SUPPORT-01] "
   },
   "message": "SSL Problem Empty server certificate chain",
   "thrown": {
       "commonElementCount": 0,
       "localizedMessage": "Empty server certificate chain",
       "message": "Empty server certificate chain",
       "name": "javax.net.ssl.SSLHandshakeException",
       "extendedStackTrace": "javax.net.ssl.SSLHandshakeException: Empty server certificate chain\n\tat sun.security.ssl.Alert.createSSLException(Alert.java:131) ~[?:?]\n\tat sun.security.ssl.Alert.createSSLException(Alert.java:117) ~[?:?]\n\tat sun.security.ssl.TransportContext.fatal(TransportContext.java:365) ~[?:?]\n\tat sun.security.ssl.TransportContext.fatal(TransportContext.java:321) ~[?:?]\n\tat sun.security.ssl.TransportContext.fatal(TransportContext.java:312) ~[?:?]\n\tat sun.security.ssl.CertificateMessage$T12CertificateConsumer.onCertificate(CertificateMessage.java:390) ~[?:?]\n\tat sun.security.ssl.CertificateMessage$T12CertificateConsumer.consume(CertificateMessage.java:375) ~[?:?]\n\tat sun.security.ssl.SSLHandshake.consume(SSLHandshake.java:396) ~[?:?]\n\tat sun.security.ssl.HandshakeContext.dispatch(HandshakeContext.java:480) ~[?:?]\n\tat sun.security.ssl.SSLEngineImpl$DelegatedTask$DelegatedAction.run(SSLEngineImpl.java:1277) ~[?:?]\n\tat sun.security.ssl.SSLEngineImpl$DelegatedTask$DelegatedAction.run(SSLEngineImpl.java:1264) ~[?:?]\n\tat java.security.AccessController.doPrivileged(AccessController.java:712) ~[?:?]\n\tat sun.security.ssl.SSLEngineImpl$DelegatedTask.run(SSLEngineImpl.java:1209) ~[?:?]\n\tat io.netty.handler.ssl.SslHandler.runDelegatedTasks(SslHandler.java:1691) ~[netty-handler-4.1.118.Final.jar:?]\n\tat io.netty.handler.ssl.SslHandler.unwrap(SslHandler.java:1537) ~[netty-handler-4.1.118.Final.jar:?]\n\tat io.netty.handler.ssl.SslHandler.decodeJdkCompatible(SslHandler.java:1378) ~[netty-handler-4.1.118.Final.jar:?]\n\tat io.netty.handler.ssl.SslHandler.decode(SslHandler.java:1427) ~[netty-handler-4.1.118.Final.jar:?]\n\tat io.netty.handler.codec.ByteToMessageDecoder.decodeRemovalReentryProtection(ByteToMessageDecoder.java:530) ~[netty-codec-4.1.118.Final.jar:?]\n\tat io.netty.handler.codec.ByteToMessageDecoder.callDecode(ByteToMessageDecoder.java:469) ~[netty-codec-4.1.118.Final.jar:?]\n\tat io.netty.handler.codec.ByteToMessageDecoder.channelRead(ByteToMessageDecoder.java:290) ~[netty-codec-4.1.118.Final.jar:?]\n\tat io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:444) ~[netty-transport-4.1.118.Final.jar:?]\n\tat io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:420) ~[netty-transport-4.1.118.Final.jar:?]\n\tat io.netty.channel.AbstractChannelHandlerContext.fireChannelRead(AbstractChannelHandlerContext.java:412) ~[netty-transport-4.1.118.Final.jar:?]\n\tat io.netty.channel.DefaultChannelPipeline$HeadContext.channelRead(DefaultChannelPipeline.java:1357) ~[netty-transport-4.1.118.Final.jar:?]\n\tat io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:440) ~[netty-transport-4.1.118.Final.jar:?]\n\tat io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:420) ~[netty-transport-4.1.118.Final.jar:?]\n\tat io.netty.channel.DefaultChannelPipeline.fireChannelRead(DefaultChannelPipeline.java:868) ~[netty-transport-4.1.118.Final.jar:?]\n\tat io.netty.channel.nio.AbstractNioByteChannel$NioByteUnsafe.read(AbstractNioByteChannel.java:166) ~[netty-transport-4.1.118.Final.jar:?]\n\tat io.netty.channel.nio.NioEventLoop.processSelectedKey(NioEventLoop.java:796) ~[netty-transport-4.1.118.Final.jar:?]\n\tat io.netty.channel.nio.NioEventLoop.processSelectedKeysOptimized(NioEventLoop.java:732) ~[netty-transport-4.1.118.Final.jar:?]\n\tat io.netty.channel.nio.NioEventLoop.processSelectedKeys(NioEventLoop.java:658) ~[netty-transport-4.1.118.Final.jar:?]\n\tat io.netty.channel.nio.NioEventLoop.run(NioEventLoop.java:562) ~[netty-transport-4.1.118.Final.jar:?]\n\tat io.netty.util.concurrent.SingleThreadEventExecutor$4.run(SingleThreadEventExecutor.java:998) ~[netty-common-4.1.118.Final.jar:?]\n\tat io.netty.util.internal.ThreadExecutorMap$2.run(ThreadExecutorMap.java:74) ~[netty-common-4.1.118.Final.jar:?]\n\tat java.lang.Thread.run(Thread.java:840) [?:?]\n"
   },
   "endOfBatch": true,
   "loggerFqcn": "org.apache.logging.log4j.spi.AbstractLogger",
   "contextMap": {
       "dt.entity.host": "************",
       "dt.entity.host_group": "************",
       "dt.entity.process_group": "************",
       "dt.entity.process_group_instance": "************",
       "dt.host_group.id": "************"
   },
   "threadId": 29,
   "threadPriority": 5,
   "@timestamp": "2025-11-13T09:25:47.073+0000"
}
{
   "instant":
   {
       "epochSecond": 1763025947,
       "nanoOfSecond": 102000000
   },
   "thread": "elasticsearch[TOMCAT-PEGA-SUPPORT-01][[transport_server_worker.default]][T#1]",
   "level": "ERROR",
   "loggerName": "com.floragunn.searchguard.ssl.transport.SearchGuardSSLNettyTransport",
   "marker":
   {
       "name": "[TOMCAT-PEGA-SUPPORT-01] "
   },
   "message": "SSL Problem Received fatal alert: unknown_ca",
   "thrown":
   {
       "commonElementCount": 0,
       "localizedMessage": "Received fatal alert: unknown_ca",
       "message": "Received fatal alert: unknown_ca",
       "name": "javax.net.ssl.SSLHandshakeException",
       "extendedStackTrace": "javax.net.ssl.SSLHandshakeException: Received fatal alert: unknown_ca\n\tat sun.security.ssl.Alert.createSSLException(Alert.java:131) ~[?:?]\n\tat sun.security.ssl.Alert.createSSLException(Alert.java:117) ~[?:?]\n\tat sun.security.ssl.TransportContext.fatal(TransportContext.java:365) ~[?:?]\n\tat sun.security.ssl.Alert$AlertConsumer.consume(Alert.java:293) ~[?:?]\n\tat sun.security.ssl.TransportContext.dispatch(TransportContext.java:204) ~[?:?]\n\tat sun.security.ssl.SSLTransport.decode(SSLTransport.java:172) ~[?:?]\n\tat sun.security.ssl.SSLEngineImpl.decode(SSLEngineImpl.java:736) ~[?:?]\n\tat sun.security.ssl.SSLEngineImpl.readRecord(SSLEngineImpl.java:691) ~[?:?]\n\tat sun.security.ssl.SSLEngineImpl.unwrap(SSLEngineImpl.java:506) ~[?:?]\n\tat sun.security.ssl.SSLEngineImpl.unwrap(SSLEngineImpl.java:482) ~[?:?]\n\tat javax.net.ssl.SSLEngine.unwrap(SSLEngine.java:679) ~[?:?]\n\tat io.netty.handler.ssl.SslHandler$SslEngineType$3.unwrap(SslHandler.java:309) ~[netty-handler-4.1.118.Final.jar:?]\n\tat io.netty.handler.ssl.SslHandler.unwrap(SslHandler.java:1485) ~[netty-handler-4.1.118.Final.jar:?]\n\tat io.netty.handler.ssl.SslHandler.decodeJdkCompatible(SslHandler.java:1378) ~[netty-handler-4.1.118.Final.jar:?]\n\tat io.netty.handler.ssl.SslHandler.decode(SslHandler.java:1427) ~[netty-handler-4.1.118.Final.jar:?]\n\tat io.netty.handler.codec.ByteToMessageDecoder.decodeRemovalReentryProtection(ByteToMessageDecoder.java:530) ~[netty-codec-4.1.118.Final.jar:?]\n\tat io.netty.handler.codec.ByteToMessageDecoder.callDecode(ByteToMessageDecoder.java:469) ~[netty-codec-4.1.118.Final.jar:?]\n\tat io.netty.handler.codec.ByteToMessageDecoder.channelRead(ByteToMessageDecoder.java:290) ~[netty-codec-4.1.118.Final.jar:?]\n\tat io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:444) ~[netty-transport-4.1.118.Final.jar:?]\n\tat io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:420) ~[netty-transport-4.1.118.Final.jar:?]\n\tat io.netty.channel.AbstractChannelHandlerContext.fireChannelRead(AbstractChannelHandlerContext.java:412) ~[netty-transport-4.1.118.Final.jar:?]\n\tat io.netty.channel.DefaultChannelPipeline$HeadContext.channelRead(DefaultChannelPipeline.java:1357) ~[netty-transport-4.1.118.Final.jar:?]\n\tat io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:440) ~[netty-transport-4.1.118.Final.jar:?]\n\tat io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:420) ~[netty-transport-4.1.118.Final.jar:?]\n\tat io.netty.channel.DefaultChannelPipeline.fireChannelRead(DefaultChannelPipeline.java:868) ~[netty-transport-4.1.118.Final.jar:?]\n\tat io.netty.channel.nio.AbstractNioByteChannel$NioByteUnsafe.read(AbstractNioByteChannel.java:166) ~[netty-transport-4.1.118.Final.jar:?]\n\tat io.netty.channel.nio.NioEventLoop.processSelectedKey(NioEventLoop.java:796) ~[netty-transport-4.1.118.Final.jar:?]\n\tat io.netty.channel.nio.NioEventLoop.processSelectedKeysOptimized(NioEventLoop.java:732) ~[netty-transport-4.1.118.Final.jar:?]\n\tat io.netty.channel.nio.NioEventLoop.processSelectedKeys(NioEventLoop.java:658) ~[netty-transport-4.1.118.Final.jar:?]\n\tat io.netty.channel.nio.NioEventLoop.run(NioEventLoop.java:562) ~[netty-transport-4.1.118.Final.jar:?]\n\tat io.netty.util.concurrent.SingleThreadEventExecutor$4.run(SingleThreadEventExecutor.java:998) ~[netty-common-4.1.118.Final.jar:?]\n\tat io.netty.util.internal.ThreadExecutorMap$2.run(ThreadExecutorMap.java:74) ~[netty-common-4.1.118.Final.jar:?]\n\tat java.lang.Thread.run(Thread.java:840) [?:?]\n"
   },
   "endOfBatch": true,
   "loggerFqcn": "org.apache.logging.log4j.spi.AbstractLogger",
   "contextMap":
   {
       "dt.entity.host": "************",
       "dt.entity.host_group": "************",
       "dt.entity.process_group": "************",
       "dt.entity.process_group_instance": "************",
       "dt.host_group.id": "************"
   },
   "threadId": 29,
   "threadPriority": 5,
   "@timestamp": "2025-11-13T09:25:47.102+0000"
}

Question

Logger: com.floragunn.searchguard.ssl.transport.SearchGuardSSLNettyTransport

Need help or want to help others?

Experience the benefits of Support Center when you log in.

Question

Logger: com.floragunn.searchguard.ssl.transport.SearchGuardSSLNettyTransport

Related content:

Need help or want to help others?

Experience the benefits of Support Center when you log in.

We'd prefer it if you saw us at our best.