WebSockets: Encrypted TLS connections fail when using the default certificate
Details
| Detail name | Value |
|---|---|
| Changelog Number | 11398 |
| Type | Bug |
| Status | Resolved |
| Affected Versions | Exasol 7.0.5 |
| Fix Versions | Exasol 7.0.6 |
| Resolution Date | 2021-02-18 |
Description
Connecting to Exasol may fail
with an error similar to the following.
[SSL: LENGTH_TOO_SHORT] length too short
or
tls_process_key_exchange:length mismatch
if the following conditions are met:
- Connection is trying to be established via WebSocket (pyexasol)
- Connection is encrypted
- Default TLS certificate is used
Note:
Default TLS certificate is only used if a custom TLS certificate has not been uploaded.
Workaround
- Upload a custom certificate.
- Contact Exasol support if you do not want to upload a custom certificate.
- Note: If an RSA certificate is used, the maximum supported key size is 2048 bits.
- The default certificate can be replaced with a suitable certificate.
Fix
TLS encrypted connection via WebSocket protocol can be established using default certificate.
