Problem:
VisiBroker 8.5 SP1 JDK 7 based client failing to establish an SSL connection to a JacORB 2.3.0 J2ME 1.4.2 based server with:
Error VBJ-Application.orb_com.inprise.vbroker.orb.ORB@1a76837.vbroker.log.default.filter.secure - 010.032.223.073,00000000,SSL Exception occurred ()
javax.net.ssl.SSLException: Received fatal alert: unexpected_message
at sun.security.ssl.Alerts.getSSLException(Alerts.java:208)
at sun.security.ssl.Alerts.getSSLException(Alerts.java:154)
at sun.security.ssl.SSLSocketImpl.recvAlert(SSLSocketImpl.java:1961)
at sun.security.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:1077)
at sun.security.ssl.SSLSocketImpl.performInitialHandshake(SSLSocketImpl.java:1312)
at sun.security.ssl.SSLSocketImpl.writeRecord(SSLSocketImpl.java:702)
at sun.security.ssl.AppOutputStream.write(AppOutputStream.java:122)
at com.borland.security.csiv2.SSLConnection.write(SSLConnection.java:988)
at com.inprise.vbroker.GIOP.OutputStream.write(Unknown Source)
at com.inprise.vbroker.GIOP.OutputStream.writeUnfragmented(Unknown Source)
at com.inprise.vbroker.GIOP.OutputStream.writeFragmented(Unknown Source)
at com.inprise.vbroker.GIOP.Message.write(Unknown Source)
at com.inprise.vbroker.GIOP.GiopConnection.send_message(Unknown Source)
at com.inprise.vbroker.GIOP.GiopConnection.send_message(Unknown Source)
at com.inprise.vbroker.GIOP.ProtocolConnector.invoke(Unknown Source)
at com.inprise.vbroker.interceptor.ChainClientInterceptorAdapter.invoke(Unknown Source)
at com.inprise.vbroker.interceptor.ChainClientInterceptorAdapter.is_a(Unknown Source)
at com.inprise.vbroker.orb.DelegateImpl.is_a(Unknown Source)
at org.omg.CORBA.portable.ObjectImpl._is_a(ObjectImpl.java:130)
at org.omg.CosNaming.NamingContextHelper.narrow(NamingContextHelper.java:69)
javax.net.ssl.SSLException: Received fatal alert: unexpected_message
at sun.security.ssl.Alerts.getSSLException(Alerts.java:208)
at sun.security.ssl.Alerts.getSSLException(Alerts.java:154)
at sun.security.ssl.SSLSocketImpl.recvAlert(SSLSocketImpl.java:1961)
at sun.security.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:1077)
at sun.security.ssl.SSLSocketImpl.performInitialHandshake(SSLSocketImpl.java:1312)
at sun.security.ssl.SSLSocketImpl.writeRecord(SSLSocketImpl.java:702)
at sun.security.ssl.AppOutputStream.write(AppOutputStream.java:122)
at com.borland.security.csiv2.SSLConnection.write(SSLConnection.java:988)
at com.inprise.vbroker.GIOP.OutputStream.write(Unknown Source)
at com.inprise.vbroker.GIOP.OutputStream.writeUnfragmented(Unknown Source)
at com.inprise.vbroker.GIOP.OutputStream.writeFragmented(Unknown Source)
at com.inprise.vbroker.GIOP.Message.write(Unknown Source)
at com.inprise.vbroker.GIOP.GiopConnection.send_message(Unknown Source)
at com.inprise.vbroker.GIOP.GiopConnection.send_message(Unknown Source)
at com.inprise.vbroker.GIOP.ProtocolConnector.invoke(Unknown Source)
at com.inprise.vbroker.interceptor.ChainClientInterceptorAdapter.invoke(Unknown Source)
at com.inprise.vbroker.interceptor.ChainClientInterceptorAdapter.is_a(Unknown Source)
at com.inprise.vbroker.orb.DelegateImpl.is_a(Unknown Source)
at org.omg.CORBA.portable.ObjectImpl._is_a(ObjectImpl.java:130)
at org.omg.CosNaming.NamingContextHelper.narrow(NamingContextHelper.java:69)
Resolution:
The issue is related to an "unexpected_message" fatal alert occurring during the "Change Cipher Spec" stage of the handshake when the “TLS_RSA_WITH_AES_128_CBC_SHA” cipher is selected by the J2ME 1.4.2 based server.
For a resolution ensure a later JVM is used on the server side.
For a detailed investigation ensure detailed SSL logs are collected from both client and server.
SI# 2782442
#Security
#VisiBroker
