This Question is Possibly Answered

1 "correct" answer available (10 pts) 2 "helpful" answers available (5 pts)
1 Replies Last post: May 12, 2008 4:25 AM by Mark Straver  
Matej Cepl Bronze 7 posts since
Jan 17, 2008
Currently Being Moderated

Jan 28, 2008 9:52 AM

Error while negotiating TLS

When running openfire 3.4.4 on Fedora/Rawhide (with Icedtea java-1.7.0-icedtea-1.7.0.0-0.24.b24.fc9.x86_64), I get constantly this exception:

 

2008.01.27 14:21:10 org.jivesoftware.openfire.net.SocketReadingMode.negotiateTLS(SocketReadingMode.j ava:76) Error while negotiating TLS: org.jivesoftware.openfire.net.SocketConnection@58c9e870 socket: Socket[http://addr=/63.246.20.125,port=54789,localport=5269|http://addr=/63.246.20.125, port=54789,localport=5269] session: org.jivesoftware.openfire.session.LocalIncomingServerSession@2728ed5f status: 1 address: ppp1053.in.ipex.cz/72739a82 id: 72739a82

javax.net.ssl.SSLException: Unsupported record version Unknown-47.115

        at sun.security.ssl.EngineInputRecord.bytesInCompletePacket(EngineInputRecord.java :116)

        at sun.security.ssl.SSLEngineImpl.readNetRecord(SSLEngineImpl.java:779)

        at sun.security.ssl.SSLEngineImpl.unwrap(SSLEngineImpl.java:692)

        at javax.net.ssl.SSLEngine.unwrap(SSLEngine.java:624)

        at org.jivesoftware.openfire.net.TLSStreamHandler.doHandshake(TLSStreamHandler.jav a:211)

        at org.jivesoftware.openfire.net.TLSStreamHandler.start(TLSStreamHandler.java:157)

        at org.jivesoftware.openfire.net.SocketConnection.startTLS(SocketConnection.java:1 65)

        at org.jivesoftware.openfire.net.SocketReadingMode.negotiateTLS(SocketReadingMode. java:73)

        at org.jivesoftware.openfire.net.BlockingReadingMode.readStream(BlockingReadingMod e.java:126)

        at org.jivesoftware.openfire.net.BlockingReadingMode.run(BlockingReadingMode.java: 62)

        at org.jivesoftware.openfire.net.SocketReader.run(SocketReader.java:119)

        at java.lang.Thread.run(Thread.java:674)

 

Is it my misconfiguration of openfire, bad IcedTea, or some bug in openfire itself?

Mark Straver Bronze 47 posts since
May 11, 2008
Currently Being Moderated
May 12, 2008 4:25 AM in response to: Matej Cepl
Re: Error while negotiating TLS

I'm getting the same issues, mainly for inbound server connections. apparently the "unknown-47.115" means the SSL certificate isn't trusted. I'm not sure if this is a local problem with openfire or if it is a problem with the remote server not having/getting the right information.

More Like This

  • Retrieving data ...