18

We installed Cassandra 2.0 and configure it for SSL, and we run in this issue at startup. We're using Open JDK

java-1.7.0-openjdk-1.7.0.55-2.4.7.1.el6_5.x86_64

Exception message:

Caused by: java.lang.IllegalArgumentException: Cannot support 
    TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA with currently installed providers

I looked at the following link - but this with Java 6/7.

http://www.pathin.org/tutorials/java-cassandra-cannot-support-tls_rsa_with_aes_256_cbc_sha-with-currently-installed-providers/

Any Ideas ? Thanks a bunch

mkobit
  • 43,979
  • 12
  • 156
  • 150
Durga Deep
  • 437
  • 2
  • 6
  • 14

3 Answers3

7

I am assuming this message is related to the Cassandra SSL/TLS configuration.

The answer here suggests installing unlimited crypto for your JVM but I believe your version of OpenJDK has this already.

I would suggest experimenting with the accepted cipher_suites setting in cassandra.yaml to find something that is available to your OpenJDK deployment. This openjdk question lists some of the cipher suites that may be enabled in OpenJDK, or you could accept the Cassandra default.

Community
  • 1
  • 1
pd40
  • 3,187
  • 3
  • 20
  • 29
4

update your JCE files. it will work.

Suresh Reddy
  • 51
  • 1
  • 1
    https://support.datastax.com/hc/en-us/articles/204226129-Receiving-error-Caused-by-java-lang-IllegalArgumentException-Cannot-support-TLS-RSA-WITH-AES-256-CBC-SHA-with-currently-installed-providers-on-DSE-startup-after-setting-up-client-to-node-encryption – Archmede Jul 26 '18 at 18:07
3

I will try to share my experience having issue with connecting from Devcenter with SSL enabled. .

I was getting the below error in devcenter error log. java.lang.IllegalArgumentException: Cannot support TLS_RSA_WITH_AES_256_CBC_SHA with currently installed providers

In addition to the steps mentioned in http://www.datastax.com/dev/blog/how-to-connect-devcenter-to-an-ssl-enabled-cassandra-cluster regarding JCE files added to …./java../lib/security , I had to add the same jar files to my devcenter installed location: (please make sure you have the same set of jar files under both locations)

C:\Program Filles\Java\jre1.8.xxx.xxx\lib\security and C:\Program Files\……\DevCenter\jre\lib\security

That solved my problem..

Tunaki
  • 132,869
  • 46
  • 340
  • 423
rraghav84
  • 31
  • 3
  • Thanks @rraghav for making it easy for us to find a solution. This solved the problem for me at least. Thanks so much for sharing this answer. – Faraz Mar 31 '18 at 18:11
  • https://support.datastax.com/hc/en-us/articles/204226129-Receiving-error-Caused-by-java-lang-IllegalArgumentException-Cannot-support-TLS-RSA-WITH-AES-256-CBC-SHA-with-currently-installed-providers-on-DSE-startup-after-setting-up-client-to-node-encryption – Archmede Jul 26 '18 at 18:07