# Failed to renew null client

**URL:** <https://forum.cirrus-link.com/t/failed-to-renew-null-client/644>\
**Category:** Injector Modules\
**Created:** [October 15, 2024, 10:14pm UTC](https://forum.cirrus-link.com/t/failed-to-renew-null-client/644 "2024-10-15T22:14:42Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![Benak](https://avatars.discourse-cdn.com/v4/letter/b/a9adbd/32.png) [@Benak](https://forum.cirrus-link.com/u/Benak)\
**Post date:** [October 15, 2024, 10:14pm UTC](https://forum.cirrus-link.com/t/failed-to-renew-null-client/644/1 "2024-10-15T22:14:42Z")

</div>

I suspect this is to do with a security certificate but a client suddently has the AWS injection module service failing. Does anyone have information related to “the trustAnchors parameter must be non-empty”

No config changes other than windows updates over the weekend.

 ![image](https://canada1.discourse-cdn.com/flex028/uploads/cirrus_link/original/1X/9d6a31ef987f4b3220f192edfe5833b2038077df.png)

---

<div class="post-metadata">

**Author:** ![wes.johnson](https://avatars.discourse-cdn.com/v4/letter/w/f14d63/32.png) [@wes.johnson](https://forum.cirrus-link.com/u/wes.johnson)\
**Post date:** [October 15, 2024, 11:07pm UTC](https://forum.cirrus-link.com/t/failed-to-renew-null-client/644/2 "2024-10-15T23:07:34Z")

</div>

What version of the AWS Injector are you using? Also, what is the full stack trace shown on the ‘Failed to initialize the Kinesis client’

---

<div class="post-metadata">

**Author:** ![Benak](https://avatars.discourse-cdn.com/v4/letter/b/a9adbd/32.png) [@Benak](https://forum.cirrus-link.com/u/Benak)\
**Post date:** [October 16, 2024, 1:58pm UTC](https://forum.cirrus-link.com/t/failed-to-renew-null-client/644/3 "2024-10-16T13:58:45Z")

</div>

Cirrus Link AWS 4.0.12

```auto
com.amazonaws.SdkClientException: Unable to execute HTTP request: Unexpected error: java.security.InvalidAlgorithmParameterException: the trustAnchors parameter must be non-empty

at com.amazonaws.http.AmazonHttpClient$RequestExecutor.handleRetryableException(AmazonHttpClient.java:1216)

at com.amazonaws.http.AmazonHttpClient$RequestExecutor.executeHelper(AmazonHttpClient.java:1162)

at com.amazonaws.http.AmazonHttpClient$RequestExecutor.doExecute(AmazonHttpClient.java:811)

at com.amazonaws.http.AmazonHttpClient$RequestExecutor.executeWithTimer(AmazonHttpClient.java:779)

at com.amazonaws.http.AmazonHttpClient$RequestExecutor.execute(AmazonHttpClient.java:753)

at com.amazonaws.http.AmazonHttpClient$RequestExecutor.access$500(AmazonHttpClient.java:713)

at com.amazonaws.http.AmazonHttpClient$RequestExecutionBuilderImpl.execute(AmazonHttpClient.java:695)

at com.amazonaws.http.AmazonHttpClient.execute(AmazonHttpClient.java:559)

at com.amazonaws.http.AmazonHttpClient.execute(AmazonHttpClient.java:539)

at com.amazonaws.services.kinesis.AmazonKinesisClient.doInvoke(AmazonKinesisClient.java:2219)

at com.amazonaws.services.kinesis.AmazonKinesisClient.invoke(AmazonKinesisClient.java:2195)

at com.amazonaws.services.kinesis.AmazonKinesisClient.executeDescribeStream(AmazonKinesisClient.java:738)

at com.amazonaws.services.kinesis.AmazonKinesisClient.describeStream(AmazonKinesisClient.java:714)

at com.amazonaws.services.kinesis.AmazonKinesisClient.describeStream(AmazonKinesisClient.java:750)

at com.cirruslink.ingest.kinesis.KinesisIngestService.createClient(KinesisIngestService.java:90)

at com.cirruslink.ingest.kinesis.KinesisIngestService.createClient(KinesisIngestService.java:31)

at com.cirruslink.ingest.kinesis.AbstractKinesisIngestService$ClientPushRunnable.run(AbstractKinesisIngestService.java:345)

at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(Unknown Source)

at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(Unknown Source)

at java.base/java.lang.Thread.run(Unknown Source)

Caused by: javax.net.ssl.SSLException: Unexpected error: java.security.InvalidAlgorithmParameterException: the trustAnchors parameter must be non-empty

at java.base/sun.security.ssl.Alert.createSSLException(Unknown Source)

at java.base/sun.security.ssl.TransportContext.fatal(Unknown Source)

at java.base/sun.security.ssl.TransportContext.fatal(Unknown Source)

at java.base/sun.security.ssl.TransportContext.fatal(Unknown Source)

at java.base/sun.security.ssl.SSLSocketImpl.handleException(Unknown Source)

at java.base/sun.security.ssl.SSLSocketImpl.startHandshake(Unknown Source)

at java.base/sun.security.ssl.SSLSocketImpl.startHandshake(Unknown Source)

at org.apache.http.conn.ssl.SSLConnectionSocketFactory.createLayeredSocket(SSLConnectionSocketFactory.java:436)

at org.apache.http.conn.ssl.SSLConnectionSocketFactory.connectSocket(SSLConnectionSocketFactory.java:384)

at com.amazonaws.http.conn.ssl.SdkTLSSocketFactory.connectSocket(SdkTLSSocketFactory.java:142)

at org.apache.http.impl.conn.DefaultHttpClientConnectionOperator.connect(DefaultHttpClientConnectionOperator.java:142)

at org.apache.http.impl.conn.PoolingHttpClientConnectionManager.connect(PoolingHttpClientConnectionManager.java:376)

at jdk.internal.reflect.GeneratedMethodAccessor433.invoke(Unknown Source)

at java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source)

at java.base/java.lang.reflect.Method.invoke(Unknown Source)

at com.amazonaws.http.conn.ClientConnectionManagerFactory$Handler.invoke(ClientConnectionManagerFactory.java:76)

at com.amazonaws.http.conn.$Proxy109.connect(Unknown Source)

at org.apache.http.impl.execchain.MainClientExec.establishRoute(MainClientExec.java:393)

at org.apache.http.impl.execchain.MainClientExec.execute(MainClientExec.java:236)

at org.apache.http.impl.execchain.ProtocolExec.execute(ProtocolExec.java:186)

at org.apache.http.impl.client.InternalHttpClient.doExecute(InternalHttpClient.java:185)

at org.apache.http.impl.client.CloseableHttpClient.execute(CloseableHttpClient.java:83)

at org.apache.http.impl.client.CloseableHttpClient.execute(CloseableHttpClient.java:56)

at com.amazonaws.http.apache.client.impl.SdkHttpClient.execute(SdkHttpClient.java:72)

at com.amazonaws.http.AmazonHttpClient$RequestExecutor.executeOneRequest(AmazonHttpClient.java:1343)

at com.amazonaws.http.AmazonHttpClient$RequestExecutor.executeHelper(AmazonHttpClient.java:1154)

... 18 common frames omitted

Caused by: java.lang.RuntimeException: Unexpected error: java.security.InvalidAlgorithmParameterException: the trustAnchors parameter must be non-empty

at java.base/sun.security.validator.PKIXValidator.(Unknown Source)

at java.base/sun.security.validator.Validator.getInstance(Unknown Source)

at java.base/sun.security.ssl.X509TrustManagerImpl.getValidator(Unknown Source)

at java.base/sun.security.ssl.X509TrustManagerImpl.checkTrustedInit(Unknown Source)

at java.base/sun.security.ssl.X509TrustManagerImpl.checkTrusted(Unknown Source)

at java.base/sun.security.ssl.X509TrustManagerImpl.checkServerTrusted(Unknown Source)

at java.base/sun.security.ssl.CertificateMessage$T13CertificateConsumer.checkServerCerts(Unknown Source)

at java.base/sun.security.ssl.CertificateMessage$T13CertificateConsumer.onConsumeCertificate(Unknown Source)

at java.base/sun.security.ssl.CertificateMessage$T13CertificateConsumer.consume(Unknown Source)

at java.base/sun.security.ssl.SSLHandshake.consume(Unknown Source)

at java.base/sun.security.ssl.HandshakeContext.dispatch(Unknown Source)

at java.base/sun.security.ssl.HandshakeContext.dispatch(Unknown Source)

at java.base/sun.security.ssl.TransportContext.dispatch(Unknown Source)

at java.base/sun.security.ssl.SSLTransport.decode(Unknown Source)

at java.base/sun.security.ssl.SSLSocketImpl.decode(Unknown Source)

at java.base/sun.security.ssl.SSLSocketImpl.readHandshakeRecord(Unknown Source)

... 39 common frames omitted

Caused by: java.security.InvalidAlgorithmParameterException: the trustAnchors parameter must be non-empty

at java.base/java.security.cert.PKIXParameters.setTrustAnchors(Unknown Source)

at java.base/java.security.cert.PKIXParameters.(Unknown Source)

at java.base/java.security.cert.PKIXBuilderParameters.(Unknown Source)

... 55 common frames omitted

```

---

<div class="post-metadata">

**Author:** ![wes.johnson](https://avatars.discourse-cdn.com/v4/letter/w/f14d63/32.png) [@wes.johnson](https://forum.cirrus-link.com/u/wes.johnson)\
**Post date:** [October 16, 2024, 4:55pm UTC](https://forum.cirrus-link.com/t/failed-to-renew-null-client/644/4 "2024-10-16T16:55:15Z")

</div>

Interesting. I’m not quite sure why this is happening. The first thing I would recommend is to upgrade to the latest version of the Injector you can per this doc: [Ignition Compatibility with Cirrus Link Modules - MQTT Modules for Ignition 8.x - Confluence](https://docs.chariot.io/display/CLD80/Ignition+Compatibility+with+Cirrus+Link+Modules)

4.0.12 is quite old at this point. If that doesn’t help, can you open a support ticket by sending a note to [support@cirrus-link.com](mailto:support@cirrus-link.com) and send the full logs from your system?