1. Describe your incident:
I’ve got 3 VM.
-
graylog-server + mongod
-
graylog-datanode : datanode-1
-
graylog-datanode : datanode-2
When i connect the second node i’ve got this issue :
2. Describe your environment:
-
OS Information: Debian 12 + graylog
-
graylog-datanode 6.2.1-1
-
graylog-server 6.1.10-1
-
mongodb-org 7.0.20
-
Service logs, configurations, and environment variables:
graylog-server : server.conf
is_leader = true
node_id_file = /etc/graylog/server/node-id
password_secret = 3sCyBEmyLNNwR.........38tZ2dl
root_password_sha2 = 2cb4b1431b84ec15d35ed8........9cc4b25c8d879ae23e18
bin_dir = /usr/share/graylog-server/bin
data_dir = /var/lib/graylog-server
plugin_dir = /usr/share/graylog-server/plugin
stream_aware_field_types=false
disabled_retention_strategies = none,close
allow_leading_wildcard_searches = false
allow_highlighting = false
field_value_suggestion_mode = on
output_batch_size = 500
output_flush_interval = 1
output_fault_count_threshold = 5
output_fault_penalty_seconds = 30
processor_wait_strategy = blocking
ring_size = 65536
inputbuffer_ring_size = 65536
inputbuffer_wait_strategy = blocking
message_journal_enabled = true
message_journal_dir = /var/lib/graylog-server/journal
lb_recognition_period_seconds = 3
mongodb_uri = mongodb://localhost/graylog
mongodb_max_connections = 1000
integrations_scripts_dir = /usr/share/graylog-server/scripts
http_bind_address = 0.0.0.0:9000
message_journal_max_age = 12h
message_journal_max_size = 3gb
graylog-datanode-1 / 2 : datanode.conf
[sudo] Mot de passe de user :
node_id_file = /etc/graylog/datanode/node-id
config_location = /etc/graylog/datanode
password_secret = 3sCyBEmyLNNwRDp1WaDGU0rWKDF9uIgWRHA7Id6PmonEmC3SjkMqv1JZ8TlMHfLODLIgn7xkOfSvMsu3GJWI5y5A938tZ2dl
root_password_sha2 =
mongodb_uri = mongodb://172.28.128.150:27017/graylog
opensearch_location = /usr/share/graylog-datanode/dist
opensearch_config_location = /var/lib/graylog-datanode/opensearch/config
opensearch_data_location = /var/lib/graylog-datanode/opensearch/data
opensearch_logs_location = /var/log/graylog-datanode/opensearch
logs datanode-2
14:48:05.718 [opensearch[datanode-2][transport_worker][T#1]] ERROR org.opensearch.transport.netty4.ssl.SecureNetty4Transport - Exception during establishing a SSL connection: javax.net.ssl.SSLHandshakeException: No subject alternative DNS name matching datanode-1 found.
javax.net.ssl.SSLHandshakeException: No subject alternative DNS name matching datanode-1 found.
at java.base/sun.security.ssl.Alert.createSSLException(Alert.java:130) ~[?:?]
at java.base/sun.security.ssl.TransportContext.fatal(TransportContext.java:378) ~[?:?]
at java.base/sun.security.ssl.TransportContext.fatal(TransportContext.java:321) ~[?:?]
at java.base/sun.security.ssl.TransportContext.fatal(TransportContext.java:316) ~[?:?]
at java.base/sun.security.ssl.CertificateMessage$T13CertificateConsumer.checkServerCerts(CertificateMessage.java:1318) ~[?:?]
[2025-05-06T15:37:10,755][ERROR][o.o.t.n.s.SecureNetty4Transport] [datanode-2] Exception during establishing a SSL connection: javax.net.ssl.SSLHandshakeException: Insufficient buffer remaining for AEAD cipher fragment (2). Needs to be more than tag size (16)
3. What steps have you already taken to try and solve the problem?
I tried to renew the certificate by clicking “renew-certificate” on the web interface.
4. How can the community help?
I don’t understand what to do to solve this issue.
Thanks all folks
