We are seeing SSL exceptions in our vse.logs recently. Only change done to the server recently is to include CKNFAST_LOADSHARING=1 in the environment variable to support hardware signing certificate and update java.security file to include sun.security.pkcs11.SunPKCS11 as a provider. We found that these SSL exceptions are happening intermittently and restarting the components resolves the issue temporarily. Using DevTest 9.1.
SSL exception from vse.log
-------------------------------------
ERROR com.itko.lisa.vse.sio.PortServer - An error occurred processing handshake tasks.
javax.net.ssl.SSLProtocolException: Unable to process PreMasterSecret, may be too big
at sun.security.ssl.Handshaker.checkThrown(Handshaker.java:1440)
at sun.security.ssl.SSLEngineImpl.checkTaskThrown(SSLEngineImpl.java:535)
at sun.security.ssl.SSLEngineImpl.readNetRecord(SSLEngineImpl.java:813)
at sun.security.ssl.SSLEngineImpl.unwrap(SSLEngineImpl.java:781)
at javax.net.ssl.SSLEngine.unwrap(SSLEngine.java:624)
at com.itko.lisa.vse.sio.SSLSession.processInboundNetworkData(SSLSession.java:372)
at com.itko.lisa.vse.sio.SSLSession.handleHandshake(SSLSession.java:312)
at com.itko.lisa.vse.sio.SSLSession.access$300(SSLSession.java:38)
at com.itko.lisa.vse.sio.SSLSession$TaskHandler.run(SSLSession.java:620)
at com.itko.lisa.vse.sio.SSLSession.handleHandshake(SSLSession.java:308)
at com.itko.lisa.vse.sio.SSLSession.processInboundNetworkData(SSLSession.java:403)
at com.itko.lisa.vse.sio.SSLSession.handleHandshake(SSLSession.java:312)
at com.itko.lisa.vse.sio.SSLSession.readEncryptedData(SSLSession.java:269)
at com.itko.lisa.vse.sio.SSLSession.readApplicationData(SSLSession.java:191)
at com.itko.lisa.vse.sio.NIOSession.handleRead(NIOSession.java:136)
at com.itko.lisa.vse.sio.SelectorThread.handleOperations(SelectorThread.java:316)
at com.itko.lisa.vse.sio.SelectorThread.run(SelectorThread.java:265)
at java.lang.Thread.run(Thread.java:745)
Caused by: javax.net.ssl.SSLProtocolException: Unable to process PreMasterSecret, may be too big
at sun.security.ssl.RSAClientKeyExchange.<init>(RSAClientKeyExchange.java:124)
<removed to keep under 3200 chars>
at com.itko.lisa.vse.sio.SSLSession$TaskHandler.run(SSLSession.java:613)
... 9 more
ERROR com.itko.lisa.vse.sio.PortServer - An error occurred updating channel interest.
java.nio.channels.CancelledKeyException
at sun.nio.ch.SelectionKeyImpl.ensureValid(SelectionKeyImpl.java:73)
at sun.nio.ch.SelectionKeyImpl.interestOps(SelectionKeyImpl.java:77)
at com.itko.lisa.vse.sio.SelectorThread.updateChannelInterest(SelectorThread.java:185)
at com.itko.lisa.vse.sio.SelectorThread.addChannelInterest(SelectorThread.java:153)
at com.itko.lisa.vse.sio.NIOSession.handleRead(NIOSession.java:146)
at com.itko.lisa.vse.sio.SelectorThread.handleOperations(SelectorThread.java:316)
at com.itko.lisa.vse.sio.SelectorThread.run(SelectorThread.java:265)
at java.lang.Thread.run(Thread.java:745)