The server selected protocol version TLS10 is not accepted by client preferences [TLS12]

客户端引用的协议版本是TLS12,但是服务端协议版本是10.简单说就是数据库版本太低,需要降低客户端版本才能适配

kubectl get pod -n flink -owide

kubectl exec -it sql-session-5c949ccbc-pp8vb /bin/bash -n flink

打开 java.security 文件之后，修改 jdk.tls.disabledAlgorithms= 后面的值，删除 TLSv1, TLSv1.1 和 3DES_EDE_CBC 即可。

cat java.security | grep "TLSv1, TLSv1.1,"

sed -i "s/jdk.tls.disabledAlgorithms=SSLv3, TLSv1, TLSv1.1, RC4, DES, MD5withRSA,/jdk.tls.disabledAlgorithms=SSLv3, RC4, DES, MD5withRSA,/g" /opt/java/openjdk/lib/security/java.security

sed -i "s/DH keySize < 1024, EC keySize < 224, 3DES_EDE_CBC, anon, NULL,/DH keySize < 1024, EC keySize < 224, anon, NULL,/g" /opt/java/openjdk/lib/security/java.security

cat java.security

kubectl exec -it session-deployment-only-779bdbb996-jqvjg /bin/bash -n flink

kubectl delete -f session-deployment-only.yaml -n flink

kubectl apply -f session-deployment-only.yaml -n flink

kubectl get pod -n flink

cat /opt/java/openjdk/lib/security/java.security| grep "TLSv1, TLSv1.1,"
cat /opt/java/openjdk/lib/security/java.security | grep "3DES_EDE_CBC,"

cat /opt/java/openjdk/lib/security/java.security | grep "jdk.tls.disabledAlgorithms="