Feign call 'SSLException: Unsupported or unrecognized SSL message' issue when calling b/w container apps using eureka

Question

Hi

I have deployed SpringBoot microservices as azure container apps and registered(binded) them with Eureka(managed Eureka Server for Spring in Azure Container Apps). I'm making inter microservices (making http calls b/w containers)calls using feign client and facing below SSL issue.

Appreciate any inputs to resolve this issue.

GET URL: http://abcservice/config?serviceName=xyzervice&tenantId=tenant1 2025-03-04T18:29:20.5689851Z stdout F 2025-03-04T18:29:20.568Z DEBUG 1 --- [crdservice] [io-8081-exec-10] c.c.t.p.feign.config.CustomFeignLogging  : [RouteConfigServiceClient#getRouteConfig] <--- ERROR SSLException: Unsupported or unrecognized SSL message (83ms) 2025-03-04T18:29:20.5704244Z stdout F 2025-03-04T18:29:20.569Z DEBUG 1 --- [crdservice] [io-8081-exec-10] c.c.t.p.feign.config.CustomFeignLogging  : [RouteConfigServiceClient#getRouteConfig] javax.net.ssl.SSLException: Unsupported or unrecognized SSL message 2025-03-04T18:29:20.5704820Z stdout F 	at java.base/sun.security.ssl.SSLSocketInputRecord.handleUnknownRecord(SSLSocketInputRecord.java:451) 2025-03-04T18:29:20.5704963Z stdout F 	at java.base/sun.security.ssl.SSLSocketInputRecord.decode(SSLSocketInputRecord.java:175) 2025-03-04T18:29:20.5705043Z stdout F 	at java.base/sun.security.ssl.SSLTransport.decode(SSLTransport.java:111) 2025-03-04T18:29:20.5705068Z stdout F 	at java.base/sun.security.ssl.SSLSocketImpl.decode(SSLSocketImpl.java:1500) 2025-03-04T18:29:20.5705092Z stdout F 	at java.base/sun.security.ssl.SSLSocketImpl.readHandshakeRecord(SSLSocketImpl.java:1415) 2025-03-04T18:29:20.5705116Z stdout F 	at java.base/sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:450) 2025-03-04T18:29:20.5705137Z stdout F 	at java.base/sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:421) 2025-03-04T18:29:20.5705158Z stdout F 	at java.base/sun.net.www.protocol.https.HttpsClient.afterConnect(HttpsClient.java:580)

Answer 1

Hello Chandrashekar, Anil,

Thank you for posting your question in the Microsoft Q&A forum.

When deploying Spring Boot microservices as Azure Container Apps and using Feign clients for inter-microservice communication, encountering SSL-related errors such as javax.net.ssl.SSLException: Unsupported or unrecognized SSL message can be challenging. This error typically occurs when there is a mismatch between the protocol (HTTP or HTTPS) being used by the Feign client and the target service.

The error message indicates that the Feign client is attempting to establish an HTTPS connection, but the target service (abcservice) is likely serving HTTP traffic. This mismatch causes the SSL handshake to fail, resulting in the SSLException. To resolve this issue, you need to ensure that the Feign client and the target service are aligned in terms of the protocol being used (HTTP or HTTPS).

By verifying the service URL, ensuring the correct protocol, and configuring the Feign client appropriately, you can resolve this issue. If the target service uses HTTPS, ensure that SSL certificates are properly configured and trusted by the Feign client. 

Please refer below Microsoft and Spring documentation for further information on above:

https://learn.microsoft.com/en-us/azure/container-apps/ingress-overview

https://docs.spring.io/spring-cloud-openfeign/docs/current/reference/html/

https://docs.spring.io/spring-boot/how-to/webserver.html#howto.webserver.configure-ssl

https://learn.microsoft.com/en-us/azure/app-service/troubleshoot-domain-ssl-certificates

 

If the above answer helped, please do not forget to "Accept Answer" as this may help other community members to refer the info if facing a similar issue. Your contribution to the Microsoft Q&A community is highly appreciated.