AnsweredAssumed Answered

SSL Exception

Question asked by jiteshud on Jan 21, 2014
Latest reply on Dec 29, 2015 by Hiko_Davis

Hi Experts,

Following is the exception I'm getting in logs:

 Could not get metrics from server : https://servername/IISPerfStats/iis-stats.html Could be due to unsupported protocol or cipherSuite being used
javax.net.ssl.SSLHandshakeException: Remote host closed connection during handshake
    at com.sun.net.ssl.internal.ssl.SSLSocketImpl.readRecord(Unknown Source)
    at com.sun.net.ssl.internal.ssl.SSLSocketImpl.performInitialHandshake(Unknown Source)
    at com.sun.net.ssl.internal.ssl.SSLSocketImpl.writeRecord(Unknown Source)
    at com.sun.net.ssl.internal.ssl.AppOutputStream.write(Unknown Source)
    at java.io.BufferedOutputStream.flushBuffer(Unknown Source)
    at java.io.BufferedOutputStream.flush(Unknown Source)
    at org.apache.commons.httpclient.HttpConnection.flushRequestOutputStream(HttpConnection.java:831)
    at org.apache.commons.httpclient.HttpMethodBase.writeRequest(HttpMethodBase.java:1979)
    at org.apache.commons.httpclient.HttpMethodBase.execute(HttpMethodBase.java:997)
    at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(HttpMethodDirector.java:400)
    at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(HttpMethodDirector.java:173)
    at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:430)
    at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:326)
    at com.wily.webservermonitor.AWebServerMonitor$Executor.run(AWebServerMonitor.java:125)
Caused by: java.io.EOFException: SSL peer shut down incorrectly
    at com.sun.net.ssl.internal.ssl.InputRecord.read(Unknown Source)
    ... 14 more

1/21/14 03:58:29 AM CST [ERROR] [WebServerMonitor] Could not get metrics from server : https://servername/IISPerfStats/iis-stats.html
javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
    at com.sun.net.ssl.internal.ssl.Alerts.getSSLException(Unknown Source)
    at com.sun.net.ssl.internal.ssl.SSLSocketImpl.fatal(Unknown Source)
    at com.sun.net.ssl.internal.ssl.Handshaker.fatalSE(Unknown Source)
    at com.sun.net.ssl.internal.ssl.Handshaker.fatalSE(Unknown Source)
    at com.sun.net.ssl.internal.ssl.ClientHandshaker.serverCertificate(Unknown Source)
    at com.sun.net.ssl.internal.ssl.ClientHandshaker.processMessage(Unknown Source)
    at com.sun.net.ssl.internal.ssl.Handshaker.processLoop(Unknown Source)
    at com.sun.net.ssl.internal.ssl.Handshaker.process_record(Unknown Source)
    at com.sun.net.ssl.internal.ssl.SSLSocketImpl.readRecord(Unknown Source)
    at com.sun.net.ssl.internal.ssl.SSLSocketImpl.performInitialHandshake(Unknown Source)
    at com.sun.net.ssl.internal.ssl.SSLSocketImpl.writeRecord(Unknown Source)
    at com.sun.net.ssl.internal.ssl.AppOutputStream.write(Unknown Source)
    at java.io.BufferedOutputStream.flushBuffer(Unknown Source)
    at java.io.BufferedOutputStream.flush(Unknown Source)
    at org.apache.commons.httpclient.HttpConnection.flushRequestOutputStream(HttpConnection.java:831)
    at org.apache.commons.httpclient.HttpMethodBase.writeRequest(HttpMethodBase.java:1979)
    at org.apache.commons.httpclient.HttpMethodBase.execute(HttpMethodBase.java:997)
    at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(HttpMethodDirector.java:400)
    at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(HttpMethodDirector.java:173)
    at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:430)
    at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:326)
    at com.wily.webservermonitor.AWebServerMonitor$Executor.run(AWebServerMonitor.java:125)
Caused by: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
    at sun.security.validator.PKIXValidator.doBuild(Unknown Source)
    at sun.security.validator.PKIXValidator.engineValidate(Unknown Source)
    at sun.security.validator.Validator.validate(Unknown Source)
    at com.sun.net.ssl.internal.ssl.X509TrustManagerImpl.validate(Unknown Source)
    at com.sun.net.ssl.internal.ssl.X509TrustManagerImpl.checkServerTrusted(Unknown Source)
    at com.wily.webservermonitor.AuthSSLX509TrustManager.checkServerTrusted(AuthSSLX509TrustManager.java:91)
    ... 18 more
Caused by: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
    at sun.security.provider.certpath.SunCertPathBuilder.engineBuild(Unknown Source)
    at java.security.cert.CertPathBuilder.build(Unknown Source)
    ... 24 more

APM Version - 9.5.1.0

Exception in - CA APM for web servers.

Please suggest

Regards,

Jitesh

Outcomes