java.net.ConnectException: Received fatal alert: unexpected_message

Jaikiran Pai jai.forums2013 at gmail.com
Sat Nov 11 04:48:21 UTC 2017


 > Java 1.8.0_131
 > Both servers on same machine, using same Java
 > Source server is using async-http-client 1.9.18
 > Destination server is using Jetty 9.4.7.v20170914

....

 > New I/O worker #10, WRITE: TLSv1.2 Handshake, length = 161
 > [write] MD5 and SHA1 hashes:  len = 140
 > 0000: 01 03 03 00 63 00 00 00   20 00 C0 23 00 C0 27 00 ....c... ..#..'.
 > ...
 > 0080: 07 06 BB A0 AB 39 66 80   95 55 14 65 .....9f..U.e
 > New I/O worker #10, WRITE: SSLv2 client hello message, length = 140

It looks like the async-http-client is sending a SSLv2 client hello 
message during the handshake and I'm guessing Jetty doesn't support (or 
maybe has disabled) SSLv2Hello handshake messages. What SSL protocols 
have you enabled on both these sides? If you haven't explicitly enabled 
any, then what do they default to in these libraries/servers?

-Jaikiran




More information about the security-dev mailing list