# V.1.5.0 operator Ssl hadnshake issue

**URL:** <https://forums.percona.com/t/v-1-5-0-operator-ssl-hadnshake-issue/8219>\
**Category:** Percona Operator for MongoDB\
**Tags:** bugs, mongodb\
**Created:** [November 1, 2020, 10:55am UTC](https://forums.percona.com/t/v-1-5-0-operator-ssl-hadnshake-issue/8219 "2020-11-01T10:55:53Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![EugeneK](https://sea1.discourse-cdn.com/flex019/user_avatar/forums.percona.com/eugenek/32/1441_2.png) [@EugeneK](https://forums.percona.com/u/EugeneK)\
**Post date:** [November 1, 2020, 10:55am UTC](https://forums.percona.com/t/v-1-5-0-operator-ssl-hadnshake-issue/8219/1 "2020-11-01T10:55:53Z")

</div>

Hi,

I am using v1.5.0 kubernetes operator for mongo, cluster version v1.14.1, mongo - image: percona/percona-server-mongodb:3.6

And I have issue with a lot of requests from operator to mongo pods:

2020-11-01T16:15:37.169+0000 I NETWORK [conn5119] Error receiving request from client: SSLHandshakeFailed: no SSL certificate provided by peer; connection rejected. Ending connection from 10.40.0.3:40190 (connection id: 5119)

2020-11-01T16:15:37.169+0000 I NETWORK [conn5119] end connection 10.40.0.3:40190 (20 connections now open)

2020-11-01T16:15:37.172+0000 E NETWORK [conn5120] no SSL certificate provided by peer; connection rejected

2020-11-01T16:15:37.172+0000 I NETWORK [conn5120] Error receiving request from client: SSLHandshakeFailed: no SSL certificate provided by peer; connection rejected. Ending connection from 10.40.0.3:40196 (connection id: 5120)

2020-11-01T16:15:37.172+0000 I NETWORK [conn5120] end connection 10.40.0.3:40196 (19 connections now open)

It is with default configuration in cr.yaml (no SSL options in secrets section), operator has created ssl secrets:

mongo-cluster-ssl [kubernetes.io/tls](http://kubernetes.io/tls) 3 13m

mongo-cluster-ssl-internal [kubernetes.io/tls](http://kubernetes.io/tls) 3 13m

I tried to disable SSL at all, by changing option allowUnsafeConfigurations: true and removing ssl secrets, apply cr and restart operator, after that I get another errors in mongo log:

2020-11-01T16:22:51.830+0000 I NETWORK [listener] connection accepted from 10.40.0.3:53330 #2454 (17 connections now open)

2020-11-01T16:22:51.831+0000 I NETWORK [conn2454] Error receiving request from client: SSLHandshakeFailed: SSL handshake received but server is started without SSL support. Ending connection from 10.40.0.3:53330 (connection id: 2454)

2020-11-01T16:22:51.831+0000 I NETWORK [conn2454] end connection 10.40.0.3:53330 (16 connections now open)

2020-11-01T16:22:52.162+0000 I NETWORK [listener] connection accepted from 10.40.0.3:53342 #2455 (17 connections now open)

2020-11-01T16:22:52.163+0000 I NETWORK [conn2455] Error receiving request from client: SSLHandshakeFailed: SSL handshake received but server is started without SSL support. Ending connection from 10.40.0.3:53342 (connection id: 2455)

So question is how to make operator work coreccly with ssl certs, in first case to avoid SSLhandshake issues, or disable ssl at all (2nd case )?

---

<div class="post-metadata">

**Author:** ![Sergey\_Pronin](https://sea1.discourse-cdn.com/flex019/user_avatar/forums.percona.com/sergey_pronin/32/14887_2.png) [@Sergey\_Pronin](https://forums.percona.com/u/Sergey_Pronin)\
**Post date:** [November 2, 2020, 6:29am UTC](https://forums.percona.com/t/v-1-5-0-operator-ssl-hadnshake-issue/8219/2 "2020-11-02T06:29:31Z")

</div>

Hello @EugeneK ,

thanks for submitting this. We are aware of this issue and it is going to be fixed in the next release of the operator (v 1.6), which is planned to go out by the end of 2020.

The code is already there and merged:

Jira issue: [https://jira.percona.com/browse/K8SPSMDB-268](https://jira.percona.com/browse/K8SPSMDB-268)

PR: [https://github.com/percona/percona-server-mongodb-operator/pull/434](https://github.com/percona/percona-server-mongodb-operator/pull/434)

Please let me know if it helps.