使用SSL连接cqlsh时遇PermissionError及SSLV3_ALERT_HANDSHAKE_FAILURE错误

环境配置 #

• Cassandra版本：3.11.5
• Python版本：3.11.8

问题现象 #

通过SSL连接cqlsh时连接失败，报错包含PermissionError及[SSL: SSLV3_ALERT_HANDSHAKE_FAILURE] ssl/tls alert handshake failure信息。已在cqlshrc中添加version = SSLv23参数，但问题未解决。

调试命令与报错详情 #

bash-5.2# cassandra -v
3.11.5
bash-5.2# python --version
Python 3.11.8

bash-5.2# cqlsh --ssl --debug
Using CQL driver:
<module 'cassandra' from '/usr/share/java/cassandra/bin/../lib/cassandra-driver-internal-only-3.25.0.zip/cassandra-driver-3.25.0/cassandra/__init__.py'>
Using connect timeout: 5 seconds
Using 'utf-8' encoding
Using ssl: True
Connection error: ('Unable to connect to any servers', {'xx.xx.xx.xx:9042': PermissionError(1, "Tried connecting to [('xx.xxx.x.xx', 9042)]. Last error: [SSL: SSLV3_ALERT_HANDSHAKE_FAILURE] ssl/tls alert handshake failure (_ssl.c:1006)"), 'xx.xxx.xx.xxx:9042': PermissionError(1, "Tried connecting to [('xx.xxx.xx.xxx', 9042)]. Last error: [SSL: SSLV3_ALERT_HANDSHAKE_FAILURE] ssl/tls alert handshake failure (_ssl.c:1006)"), 'xx.xxx.x.xx:9042': PermissionError(1, "Tried connecting to [('xx.xxx.x.xx', 9042)]. Last error: [SSL: SSLV3_ALERT_HANDSHAKE_FAILURE] ssl/tls alert handshake failure (_ssl.c:1006)"), 'xx.xxx.xx.xx:9042': PermissionError(1, "Tried connecting to [('xx.xxx.xx.xx', 9042)]. Last error: [SSL: SSLV3_ALERT_HANDSHAKE_FAILURE] ssl/tls alert handshake failure (_ssl.c:1006)")})

内容的提问来源于stack exchange，提问作者Murthy