java.net.ConnectException: Received fatal alert: unexpected_message
Jaikiran Pai
jai.forums2013 at gmail.com
Sat Nov 11 04:48:21 UTC 2017
> Java 1.8.0_131
> Both servers on same machine, using same Java
> Source server is using async-http-client 1.9.18
> Destination server is using Jetty 9.4.7.v20170914
....
> New I/O worker #10, WRITE: TLSv1.2 Handshake, length = 161
> [write] MD5 and SHA1 hashes: len = 140
> 0000: 01 03 03 00 63 00 00 00 20 00 C0 23 00 C0 27 00 ....c... ..#..'.
> ...
> 0080: 07 06 BB A0 AB 39 66 80 95 55 14 65 .....9f..U.e
> New I/O worker #10, WRITE: SSLv2 client hello message, length = 140
It looks like the async-http-client is sending a SSLv2 client hello
message during the handshake and I'm guessing Jetty doesn't support (or
maybe has disabled) SSLv2Hello handshake messages. What SSL protocols
have you enabled on both these sides? If you haven't explicitly enabled
any, then what do they default to in these libraries/servers?
-Jaikiran
More information about the security-dev
mailing list