Java SSL errors using Java 1.7 or lower

Java SSL errors using Java 1.7 or lower

The customer is having trouble using Java drag-and-drop uploader, Local Edit and other java utilities.

The customer is using Java 1.7 and webNetwork on a Windows Server 2012.

The customer also has a \stoneware\config\includeProtocols file that only lists TLS 1.2 and TLS 1.1.  TLS 1.0 was not included and thus was Excluded.  TLS 1.0 is used by many applets and other tools.  Some start to work after upgrading the client java this is because the newer java can negotiate to a different TLS version better than Java 1.7, other 3rd party tools may still require TLS 1.0 and thus it needs to be turned back on if excluded.



Example error output indicating an SSL TLS 1.0 issue.

1.7.0_71
TLS1.2 is enabled.
Dec 24, 2014 11:58:24 AM - DownloadManager - downloadFile - File: about.txt [Response code: 200]
path = C:\Users\xxx\AppData\Local\Temp\mydownloader-1419440304147\about.txt
fileToLaunch = C:\Users\xxx\AppData\Local\Temp\mydownloader-1419440304147\about.txt
executing: cmd /k "C:\Users\xxx\AppData\Local\Temp\mydownloader-1419440304147\about.txt"
uploadDirectory = /Shared/Consulting/www
Dec 24, 2014 11:58:34 AM - NetUtils - detectProxyForUrl() - Could not detect proxy info.java.io.IOException: Proxy service provider is not yet set
Dec 24, 2014 11:58:34 AM - NetUtils - detectProxyForUrl() - Could not detect proxy info.java.io.IOException: Proxy service provider is not yet set
javax.net.ssl.SSLHandshakeException: Remote host closed connection during handshake
at sun.security.ssl.SSLSocketImpl.readRecord(Unknown Source)
at sun.security.ssl.SSLSocketImpl.performInitialHandshake(Unknown Source)
at sun.security.ssl.SSLSocketImpl.writeRecord(Unknown Source)
at sun.security.ssl.AppOutputStream.write(Unknown Source)
at java.io.BufferedOutputStream.flushBuffer(Unknown Source)
at java.io.BufferedOutputStream.flush(Unknown Source)
at java.io.DataOutputStream.flush(Unknown Source)
at javaatwork.myuploaderslim.e.d.a(HTTPUploadTask.java:637)
at javaatwork.myuploaderslim.e.d.a(HTTPUploadTask.java:527)
at javaatwork.myuploaderslim.e.d.e(HTTPUploadTask.java:293)
at javaatwork.myuploaderslim.e.e.a(HTTPUploadTask.java:199)
at javaatwork.myuploaderslim.f.k.run(SwingWorker.java:109)
at java.lang.Thread.run(Unknown Source)
Caused by: java.io.EOFException: SSL peer shut down incorrectly
at sun.security.ssl.InputRecord.read(Unknown Source)
... 13 more
Dec 24, 2014 11:58:34 AM - HTTPUploadTask 3 - upload() - javax.net.ssl.SSLHandshakeException: Remote host closed connection during handshake




Connecting to https://webnet.example-cloud...
javax.net.ssl.SSLHandshakeException: Remote host closed connection during handsh
ake
        at sun.security.ssl.SSLSocketImpl.readRecord(Unknown Source)
        at sun.security.ssl.SSLSocketImpl.performInitialHandshake(Unknown Source
)
        at sun.security.ssl.SSLSocketImpl.startHandshake(Unknown Source)
        at sun.security.ssl.SSLSocketImpl.startHandshake(Unknown Source)
        at sun.net.www.protocol.https.HttpsClient.afterConnect(Unknown Source)
        at sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.connect
(Unknown Source)
        at sun.net.www.protocol.https.HttpsURLConnectionImpl.connect(Unknown Sou
rce)
        at TestSSL.main(TestSSL.java:33)
Caused by: java.io.EOFException: SSL peer shut down incorrectly
        at sun.security.ssl.InputRecord.read(Unknown Source)
        ... 8 more

    Can't find the KB

    Unable to find the KB to address your issue ?  

      • Recent Articles

      • Lenovo Unified Workspace End-of-Life Questions and Answers

        Will the shutdown of LUW servers and access to downloads affect my server licensing? No, the shutdown of the customer servers and access to the product and licensing downloads will not affect your server licensing. This license is downloaded and ...
      • How do I determine my Unified Workspace license expiration date?

        The best method for determining the licensing information including the expiration date of your Unified Workspace license: Login to your 8090 management console on each server This may take remoting into each LUW server and relay, opening a browser, ...
      • Lenovo Unified Workspace 7.0.2.13 Released

        Highlights of Unified Workspace 7.0.2.13 Before you install: Please view the installation notes here. 7.0.2.13 requires a 7.0 license file. Below is a list of enhancements and fixes released in Unified Workspace 7.0.2.13 Fixed external storage ...
      • LanSchool Documentation Guides

        LanSchool Classic Teacher Console The LanSchool Teacher Console is the interface teachers will use to manage their classroom and students. It contains all the tools necessary for a teacher to effectively interact with students and create a ...
      • Lenovo Unified Workspace 7.0.1.41 Released

        Highlights of Unified Workspace 7.0.1.41 Before you install: Please view the installation notes here. 7.0.1.41 requires a 7.0 license file. Below is a list of enhancements and fixes for Unified Workspace 7.0.1.41 Updated Log4j Updated Java Updated ...
      • Related Articles

      • Our SSL cert is expiring on our UW servers, can Lenovo Software help us renew that certificate?

        Issue SSL Certificate is expiring/expired on customer's Unified Workspace (formerly webNetwork) server(s). Solution Lenovo Software Support can assist you with renewing the SSL Certificate on your UW servers.  The only downtime required will be a ...
      • Convert PFX certificate to JKS keystore using KeyStore Explorer

        Issue: Can we import the wildcard SSL Certificate we already have on our IIS server(s)? Solution: Please see the following documentation on how to convert a PFX certificate, exported from an IIS server, to a Java JKS keystore. Once you have your new ...
      • webNetwork will not start because AD ssl certificate has expired

        Customer restarted webnetwork and now it won’t start. It gives errors like : FATAL (12/23) 11:19:23 [com.stoneware.service.DirectoryManager]: Unable to verify/extend schema. javax.naming.CommunicationException: simple bind failed: 192.168.1.41:636 ...
      • DNS Errors

        Customer is having issues talking to active directory and ran a dns test with the results INFO: exploring forest using domain controller: server1.company.com  >>>>>: (DNS) - testing domain: COMPANY  INFO: according to DNS, the following services are ...
      • How do I renew my SSL certificate?

        This process is in 3 basic parts.  1 - Create the Keystore  2 - Generate the CSR  3 - Import the cert  The documentation below has several methods to complete this process. The first is a how to use a free Java gui tool called Portecle, the second is ...