Problem: VisiBroker 8.5 SP1 JDK 7 based client failing to establish an SSL connection to a JacORB 2.3.0 J2ME 1.4.2 based server with: Error VBJ-Application.orb_com.inprise.vbroker.orb.ORB@1a76837.vbroker.log.default.filter.secure - 010.032.223.073,00000000,SSL Exception occurred () javax.net.ssl.SSLException: Received fatal alert: unexpected_message at sun.security.ssl.Alerts.getSSLException(Alerts.java:208) at sun.security.ssl.Alerts.getSSLException(Alerts.java:154) at sun.security.ssl.SSLSocketImpl.recvAlert(SSLSocketImpl.java:1961) at sun.security.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:1077) at sun.security.ssl.SSLSocketImpl.performInitialHandshake(SSLSocketImpl.java:1312) at sun.security.ssl.SSLSocketImpl.writeRecord(SSLSocketImpl.java:702) at sun.security.ssl.AppOutputStream.write(AppOutputStream.java:122) at com.borland.security.csiv2.SSLConnection.write(SSLConnection.java:988) at com.inprise.vbroker.GIOP.OutputStream.write(Unknown Source) at com.inprise.vbroker.GIOP.OutputStream.writeUnfragmented(Unknown Source) at com.inprise.vbroker.GIOP.OutputStream.writeFragmented(Unknown Source) at com.inprise.vbroker.GIOP.Message.write(Unknown Source) at com.inprise.vbroker.GIOP.GiopConnection.send_message(Unknown Source) at com.inprise.vbroker.GIOP.GiopConnection.send_message(Unknown Source) at com.inprise.vbroker.GIOP.ProtocolConnector.invoke(Unknown Source) at com.inprise.vbroker.interceptor.ChainClientInterceptorAdapter.invoke(Unknown Source) at com.inprise.vbroker.interceptor.ChainClientInterceptorAdapter.is_a(Unknown Source) at com.inprise.vbroker.orb.DelegateImpl.is_a(Unknown Source) at org.omg.CORBA.portable.ObjectImpl._is_a(ObjectImpl.java:130) at org.omg.CosNaming.NamingContextHelper.narrow(NamingContextHelper.java:69) Resolution: The issue is related to an "unexpected_message" fatal alert occurring during the "Change Cipher Spec" stage of the handshake when the “TLS_RSA_WITH_AES_128_CBC_SHA” cipher is selected by the J2ME 1.4.2 based server. For a resolution ensure a later JVM is used on the server side. For a detailed investigation ensure detailed SSL logs are collected from both client and server. SI# 2782442
↧