IBM Support

SSLHandshakeException: Remote host terminated the handshake on download artifacts for JMS Relay.

Troubleshooting


Problem

After upgrading to Java IBM Semeru Java 11 from Oracle Java 8 on JMS relay agents, agents were unable to download artifacts with the error message:
javax.net.ssl.SSLHandshakeException: Remote host terminated the handshake
   at org.apache.http.conn.ssl.SSLSocketFactory.connectSocket(SSLSocketFactory.java:543)
   at org.apache.http.conn.ssl.SSLSocketFactory.connectSocket(SSLSocketFactory.java:409)
 

Symptom

Encountered this issue when using Java JDK 11 along with JMS relay.

javax.net.ssl|ERROR|03|Finalizer|2024-07-24 14:35:58.958 AEST|TransportContext.java:313|Fatal (INTERNAL_ERROR): closing inbound before receiving peer's close_notify (

"throwable" : {

javax.net.ssl.SSLException: closing inbound before receiving peer's close_notify

at java.base/sun.security.ssl.Alert.createSSLException(Alert.java:133)

at java.base/sun.security.ssl.Alert.createSSLException(Alert.java:117)

at java.base/sun.security.ssl.TransportContext.fatal(TransportContext.java:308)

at java.base/sun.security.ssl.TransportContext.fatal(TransportContext.java:264)

at java.base/sun.security.ssl.TransportContext.fatal(TransportContext.java:255)

at java.base/sun.security.ssl.SSLSocketImpl.shutdownInput(SSLSocketImpl.java:645)

at java.base/sun.security.ssl.SSLSocketImpl.shutdownInput(SSLSocketImpl.java:624)

at org.apache.http.impl.SocketHttpClientConnection.close(SocketHttpClientConnection.java:246)

at org.apache.http.impl.conn.DefaultClientConnection.close(DefaultClientConnection.java:174)

at org.apache.http.impl.conn.HttpPoolEntry.close(HttpPoolEntry.java:92)

at org.apache.http.pool.AbstractConnPool.shutdown(AbstractConnPool.java:148)

at org.apache.http.impl.conn.PoolingClientConnectionManager.shutdown(PoolingClientConnectionManager.java:277)

at org.apache.http.impl.conn.PoolingClientConnectionManager.finalize(PoolingClientConnectionManager.java:119)

at java.base/java.lang.System$2.invokeFinalize(System.java:2117)

at java.base/java.lang.ref.Finalizer.runFinalizer(Finalizer.java:87)

at java.base/java.lang.ref.Finalizer$FinalizerThread.run(Finalizer.java:171)}

....

..

.

.

.

..

.

..

javax.net.ssl|ALL|01|main|2024-07-24 14:35:59.020 AEST|SSLSessionImpl.java:795|Invalidated session: Session(1721795759020|TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384)

javax.net.ssl|DEBUG|01|main|2024-07-24 14:35:59.020 AEST|SSLSocketOutputRecord.java:71|WRITE: TLS12 alert(handshake_failure), length = 2

javax.net.ssl|DEBUG|01|main|2024-07-24 14:35:59.020 AEST|SSLSocketOutputRecord.java:85|Raw write (

0000: 15 03 03 00 02 02 28 ......(

)

javax.net.ssl|DEBUG|01|main|2024-07-24 14:35:59.020 AEST|SSLSocketImpl.java:1361|close the underlying socket

javax.net.ssl|DEBUG|01|main|2024-07-24 14:35:59.020 AEST|SSLSocketImpl.java:1380|close the SSL connection (initiative)

Caught: javax.net.ssl.SSLHandshakeException: Remote host terminated the handshake

javax.net.ssl.SSLHandshakeException: Remote host terminated the handshake

at org.apache.http.conn.ssl.SSLSocketFactory.connectSocket(SSLSocketFactory.java:543)

at org.apache.http.conn.ssl.SSLSocketFactory.connectSocket(SSLSocketFactory.java:409)

at org.apache.http.impl.conn.DefaultClientConnectionOperator.openConnection(DefaultClientConnectionOperator.java:177)

at org.apache.http.impl.conn.ManagedClientConnectionImpl.open(ManagedClientConnectionImpl.java:304)

at org.apache.http.impl.client.DefaultRequestDirector.tryConnect(DefaultRequestDirector.java:611)

at org.apache.http.impl.client.DefaultRequestDirector.execute(DefaultRequestDirector.java:446)

at org.apache.http.impl.client.AbstractHttpClient.doExecute(AbstractHttpClient.java:882)

at org.apache.http.impl.client.CloseableHttpClient.execute(CloseableHttpClient.java:82)

at com.ibm.uclab.csrepl.http.HttpClientWrapper.execute(HttpClientWrapper.java:119)

at com.ibm.uclab.csrepl.client.CodestationClient.callHttp(CodestationClient.java:305)

at com.ibm.uclab.csrepl.client.CodestationClient.getMetadata(CodestationClient.java:107)

at com.ibm.uclab.csrepl.client.ops.DownloadBase.downloadMetadata(DownloadBase.java:124)

at com.ibm.uclab.csrepl.client.ops.DownloadSync.downloadMetadata(DownloadSync.java:86)

at com.ibm.uclab.csrepl.client.ops.DownloadSync.run(DownloadSync.java:67)

at com.ibm.uclab.csrepl.client.ops.DownloadSync$run$0.call(Unknown Source)

at downloadByLabel.run(downloadByLabel.groovy:258)

at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke0(Native Method)

at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)

at java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)

Caused by: java.io.EOFException: SSL peer shut down incorrectly

... 19 more

Document Location

Worldwide

[{"Type":"MASTER","Line of Business":{"code":"LOB77","label":"Automation Platform"},"Business Unit":{"code":"BU048","label":"IBM Software"},"Product":{"code":"SS4GSP","label":"IBM UrbanCode Deploy"},"ARM Category":[{"code":"a8m50000000Cei6AAC","label":"UrbanCode Deploy-\u003ERelay"}],"ARM Case Number":"TS016794945","Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"All Versions"}]

Log InLog in to view more of this document

This document has the abstract of a technical article that is available to authorized users once you have logged on. Please use Log in button above to access the full document. After log in, if you do not have the right authorization for this document, there will be instructions on what to do next.

Document Information

Modified date:
23 August 2024

UID

ibm17161419