AnsweredAssumed Answered

SSL Exception in vse.log - Unable to process PreMasterSecret, may be too big

Question asked by SreejanJanardhanan62134731 on Oct 6, 2016

We are seeing SSL exceptions in our vse.logs recently. Only change done to the server recently is to include CKNFAST_LOADSHARING=1 in the environment variable to support hardware signing certificate and update java.security file to include sun.security.pkcs11.SunPKCS11 as a provider. We found that these SSL exceptions are happening intermittently and restarting the components resolves the issue temporarily. Using DevTest 9.1.

 

SSL exception from vse.log
-------------------------------------
ERROR com.itko.lisa.vse.sio.PortServer - An error occurred processing handshake tasks.
javax.net.ssl.SSLProtocolException: Unable to process PreMasterSecret, may be too big
at sun.security.ssl.Handshaker.checkThrown(Handshaker.java:1440)
at sun.security.ssl.SSLEngineImpl.checkTaskThrown(SSLEngineImpl.java:535)
at sun.security.ssl.SSLEngineImpl.readNetRecord(SSLEngineImpl.java:813)
at sun.security.ssl.SSLEngineImpl.unwrap(SSLEngineImpl.java:781)
at javax.net.ssl.SSLEngine.unwrap(SSLEngine.java:624)
at com.itko.lisa.vse.sio.SSLSession.processInboundNetworkData(SSLSession.java:372)
at com.itko.lisa.vse.sio.SSLSession.handleHandshake(SSLSession.java:312)
at com.itko.lisa.vse.sio.SSLSession.access$300(SSLSession.java:38)
at com.itko.lisa.vse.sio.SSLSession$TaskHandler.run(SSLSession.java:620)
at com.itko.lisa.vse.sio.SSLSession.handleHandshake(SSLSession.java:308)
at com.itko.lisa.vse.sio.SSLSession.processInboundNetworkData(SSLSession.java:403)
at com.itko.lisa.vse.sio.SSLSession.handleHandshake(SSLSession.java:312)
at com.itko.lisa.vse.sio.SSLSession.readEncryptedData(SSLSession.java:269)
at com.itko.lisa.vse.sio.SSLSession.readApplicationData(SSLSession.java:191)
at com.itko.lisa.vse.sio.NIOSession.handleRead(NIOSession.java:136)
at com.itko.lisa.vse.sio.SelectorThread.handleOperations(SelectorThread.java:316)
at com.itko.lisa.vse.sio.SelectorThread.run(SelectorThread.java:265)
at java.lang.Thread.run(Thread.java:745)
Caused by: javax.net.ssl.SSLProtocolException: Unable to process PreMasterSecret, may be too big
at sun.security.ssl.RSAClientKeyExchange.<init>(RSAClientKeyExchange.java:124)
<removed to keep under 3200 chars>

at com.itko.lisa.vse.sio.SSLSession$TaskHandler.run(SSLSession.java:613)
... 9 more

ERROR com.itko.lisa.vse.sio.PortServer - An error occurred updating channel interest.
java.nio.channels.CancelledKeyException
at sun.nio.ch.SelectionKeyImpl.ensureValid(SelectionKeyImpl.java:73)
at sun.nio.ch.SelectionKeyImpl.interestOps(SelectionKeyImpl.java:77)
at com.itko.lisa.vse.sio.SelectorThread.updateChannelInterest(SelectorThread.java:185)
at com.itko.lisa.vse.sio.SelectorThread.addChannelInterest(SelectorThread.java:153)
at com.itko.lisa.vse.sio.NIOSession.handleRead(NIOSession.java:146)
at com.itko.lisa.vse.sio.SelectorThread.handleOperations(SelectorThread.java:316)
at com.itko.lisa.vse.sio.SelectorThread.run(SelectorThread.java:265)
at java.lang.Thread.run(Thread.java:745)

Outcomes