Uploaded image for project: 'JBoss Enterprise Application Platform'
  1. JBoss Enterprise Application Platform
  2. JBEAP-24164

Error - Undertow - Initial SSL/TLS data is not a handshake record

    XMLWordPrintable

Details

    • Clarification
    • Resolution: Unresolved
    • Major
    • None
    • None
    • Remoting, Undertow
    • None
    • False
    • None
    • False

    Description

      When I Run the Debug on the Jboss with Https config on it display the following Message 

       

      Please refer the Undertow config

       

           <subsystem xmlns="urn:jboss:domain:undertow:10.0" default-server="default-server" default-virtual-host="default-host" default-servlet-container="default" default-security-domain="other" statistics-enabled="${wildfly.undertow.statistics-enabled:${wildfly.statistics-enabled:false}}">
                  <buffer-cache name="default"/>
                  <server name="default-server">
                      <http-listener name="default" socket-binding="http" max-parameters="10000" redirect-socket="https" enable-http2="true"/>
                      <https-listener name="https" socket-binding="https" max-parameters="10000" security-realm="ApplicationRealm" enable-http2="true"/>
                      <host name="default-host" alias="localhost">
                          <location name="/" handler="welcome-content"/>
                          <http-invoker security-realm="ApplicationRealm"/>
                      </host>
                  </server>
                  <servlet-container name="default">
                      <jsp-config/>
                      <websockets/>
                  </servlet-container>
                  <handlers>
                      <file name="welcome-content" path="${jboss.home.dir}/welcome-content"/>
                  </handlers>
              </subsystem>

       

      16:31:20,782 INFO  [stdout] (default I/O-3) Using SSLEngineImpl.
      16:31:20,797 DEBUG [io.undertow.request] (default I/O-3) Using ALPN provider JDK8AlpnProvider for connector at /10.186.75.176:9081
      16:31:20,813 INFO  [stdout] (default I/O-3) Allow unsafe renegotiation: false
      16:31:20,813 INFO  [stdout] (default I/O-3) Allow legacy hello messages: true
      16:31:20,813 INFO  [stdout] (default I/O-3) Is initial handshake: true
      16:31:20,813 INFO  [stdout] (default I/O-3) Is secure renegotiation: false
      16:31:20,813 INFO  [stdout] (default I/O-3) Ignoring unsupported cipher suite: TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384 for TLSv1
      16:31:20,813 INFO  [stdout] (default I/O-3) Ignoring unsupported cipher suite: TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 for TLSv1
      16:31:20,813 INFO  [stdout] (default I/O-3) Ignoring unsupported cipher suite: TLS_RSA_WITH_AES_256_CBC_SHA256 for TLSv1
      16:31:20,813 INFO  [stdout] (default I/O-3) Ignoring unsupported cipher suite: TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA384 for TLSv1
      16:31:20,813 INFO  [stdout] (default I/O-3) Ignoring unsupported cipher suite: TLS_ECDH_RSA_WITH_AES_256_CBC_SHA384 for TLSv1
      16:31:20,813 INFO  [stdout] (default I/O-3) Ignoring unsupported cipher suite: TLS_DHE_RSA_WITH_AES_256_CBC_SHA256 for TLSv1
      16:31:20,813 INFO  [stdout] (default I/O-3) Ignoring unsupported cipher suite: TLS_DHE_DSS_WITH_AES_256_CBC_SHA256 for TLSv1
      16:31:20,954 INFO  [stdout] (default I/O-3) Ignoring unsupported cipher suite: TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384 for TLSv1.1
      16:31:20,954 INFO  [stdout] (default I/O-3) Ignoring unsupported cipher suite: TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 for TLSv1.1
      16:31:20,954 INFO  [stdout] (default I/O-3) Ignoring unsupported cipher suite: TLS_RSA_WITH_AES_256_CBC_SHA256 for TLSv1.1
      16:31:20,954 INFO  [stdout] (default I/O-3) Ignoring unsupported cipher suite: TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA384 for TLSv1.1
      16:31:20,954 INFO  [stdout] (default I/O-3) Ignoring unsupported cipher suite: TLS_ECDH_RSA_WITH_AES_256_CBC_SHA384 for TLSv1.1
      16:31:20,954 INFO  [stdout] (default I/O-3) Ignoring unsupported cipher suite: TLS_DHE_RSA_WITH_AES_256_CBC_SHA256 for TLSv1.1
      16:31:20,954 INFO  [stdout] (default I/O-3) Ignoring unsupported cipher suite: TLS_DHE_DSS_WITH_AES_256_CBC_SHA256 for TLSv1.1
      16:31:20,954 INFO  [stdout] (default I/O-3) default I/O-3, called closeInbound()
      16:31:20,954 INFO  [stdout] (default I/O-3) default I/O-3, fatal error: 80: Inbound closed before receiving peer's close_notify: possible truncation attack?
      16:31:20,954 INFO  [stdout] (default I/O-3) javax.net.ssl.SSLException: Inbound closed before receiving peer's close_notify: possible truncation attack?
      16:31:20,954 INFO  [stdout] (default I/O-3) default I/O-3, SEND TLSv1.2 ALERT:  fatal, description = internal_error
      16:31:20,954 INFO  [stdout] (default I/O-3) default I/O-3, WRITE: TLSv1.2 Alert, length = 2
      16:31:20,954 INFO  [stdout] (default I/O-3) default I/O-3, called closeOutbound()
      16:31:20,954 INFO  [stdout] (default I/O-3) default I/O-3, closeOutboundInternal()
      16:31:20,954 DEBUG [io.undertow.request.io] (default I/O-3) UT005013: An IOException occurred: javax.net.ssl.SSLHandshakeException: UT000140: Initial SSL/TLS data is not a handshake record
          at io.undertow.protocols.ssl.ALPNHackClientHelloExplorer.exploreClientHello(ALPNHackClientHelloExplorer.java:84) [undertow-core-2.0.28.SP1-redhat-00001.jar:2.0.28.SP1-redhat-00001]
          at io.undertow.protocols.ssl.ALPNHackSSLEngine.unwrap(ALPNHackSSLEngine.java:205) [undertow-core-2.0.28.SP1-redhat-00001.jar:2.0.28.SP1-redhat-00001]
          at io.undertow.server.protocol.http.ALPNLimitingSSLEngine.unwrap(ALPNLimitingSSLEngine.java:159) [undertow-core-2.0.28.SP1-redhat-00001.jar:2.0.28.SP1-redhat-00001]
          at io.undertow.protocols.ssl.SslConduit.doUnwrap(SslConduit.java:750) [undertow-core-2.0.28.SP1-redhat-00001.jar:2.0.28.SP1-redhat-00001]
          at io.undertow.protocols.ssl.SslConduit.read(SslConduit.java:579) [undertow-core-2.0.28.SP1-redhat-00001.jar:2.0.28.SP1-redhat-00001]
          at org.xnio.conduits.ConduitStreamSourceChannel.read(ConduitStreamSourceChannel.java:127) [xnio-api-3.7.7.Final-redhat-00001.jar:3.7.7.Final-redhat-00001]
          at io.undertow.server.protocol.http.AlpnOpenListener$AlpnConnectionListener.handleEvent(AlpnOpenListener.java:350) [undertow-core-2.0.28.SP1-redhat-00001.jar:2.0.28.SP1-redhat-00001]
          at io.undertow.server.protocol.http.AlpnOpenListener.handleEvent(AlpnOpenListener.java:307) [undertow-core-2.0.28.SP1-redhat-00001.jar:2.0.28.SP1-redhat-00001]
          at io.undertow.server.protocol.http.AlpnOpenListener.handleEvent(AlpnOpenListener.java:67) [undertow-core-2.0.28.SP1-redhat-00001.jar:2.0.28.SP1-redhat-00001]
          at org.xnio.ChannelListeners.invokeChannelListener(ChannelListeners.java:92) [xnio-api-3.7.7.Final-redhat-00001.jar:3.7.7.Final-redhat-00001]
          at org.xnio.ChannelListeners$10.handleEvent(ChannelListeners.java:291) [xnio-api-3.7.7.Final-redhat-00001.jar:3.7.7.Final-redhat-00001]
          at org.xnio.ChannelListeners$10.handleEvent(ChannelListeners.java:286) [xnio-api-3.7.7.Final-redhat-00001.jar:3.7.7.Final-redhat-00001]
          at org.xnio.ChannelListeners.invokeChannelListener(ChannelListeners.java:92) [xnio-api-3.7.7.Final-redhat-00001.jar:3.7.7.Final-redhat-00001]
          at org.xnio.ChannelListeners$DelegatingChannelListener.handleEvent(ChannelListeners.java:1092) [xnio-api-3.7.7.Final-redhat-00001.jar:3.7.7.Final-redhat-00001]
          at org.xnio.ChannelListeners.invokeChannelListener(ChannelListeners.java:92) [xnio-api-3.7.7.Final-redhat-00001.jar:3.7.7.Final-redhat-00001]
          at org.xnio.nio.QueuedNioTcpServer2.acceptTask(QueuedNioTcpServer2.java:178) [xnio-nio-3.7.7.Final-redhat-00001.jar:3.7.7.Final-redhat-00001]
          at org.xnio.nio.WorkerThread.safeRun(WorkerThread.java:612) [xnio-nio-3.7.7.Final-redhat-00001.jar:3.7.7.Final-redhat-00001]
          at org.xnio.nio.WorkerThread.run(WorkerThread.java:479) [xnio-nio-3.7.7.Final-redhat-00001.jar:3.7.7.Final-redhat-00001]

      16:31:25,785 INFO  [stdout] (default I/O-2) Using SSLEngineImpl.
      16:31:25,785 INFO  [stdout] (default I/O-2) Allow unsafe renegotiation: false
      16:31:25,785 INFO  [stdout] (default I/O-2) Allow legacy hello messages: true
      16:31:25,785 INFO  [stdout] (default I/O-2) Is initial handshake: true
      16:31:25,785 INFO  [stdout] (default I/O-2) Is secure renegotiation: false

      Attachments

        Activity

          People

            Unassigned Unassigned
            jafeer.rahim Jafeer Rahim (Inactive)
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

            Dates

              Created:
              Updated: