<div dir="ltr"><div dir="ltr"><div dir="ltr">Xuelei,<div>The certificate in the connection is a red herring and not important. It's actually a very unusual behaviour by <a href="http://talk.google.com">talk.google.com</a> endpoint to encapsulate an error message inside a certificate.</div><div><br></div><div>As per the output I included: </div><div><pre style="color:rgb(0,0,0)"><i>"certificate" : {
</i>><i> "version" : "v3",
</i>><i> "serial number" : "00 90 76 89 18 E9 33 93 A0",
</i>><i> "signature algorithm": "SHA256withRSA",
</i>><i> "issuer" : "CN=invalid2.invalid, OU="No SNI provided;
</i>><i> please fix your client."",
</i>><i> "not before" : "2015-01-01 11:00:00.000 AEDT",
</i>><i> "not after" : "2030-01-01 11:00:00.000 AEDT",
</i>><i> "subject" : "CN=invalid2.invalid, OU="No SNI provided;
</i>><i> please fix your client."",</i></pre><pre style="color:rgb(0,0,0)"><i><br></i></pre><pre style="color:rgb(0,0,0)"><span style="color:rgb(34,34,34);font-family:Arial,Helvetica,sans-serif;white-space:normal">This certificate simply masks the TLS interoperability issue as an untrusted certificate issue.</span></pre>The fact is, some of the extensions sent by JSSE are changes to TLS 1.2 to support TLS 1.3, this however affects some clients adversely in practice and usually JDK provides properties to turn new enhancements off and work around such behaviour, for the extensions I mentioned this is not provided and hence they are always sent for client sockets unless TLSv1.2 is not in use. </div><div><br></div><div>The impact to us is that upgrading to JDK11 means for some endpoints or devices that are not 100% compliant to the spec the security is reduced as we have to now work around to drop connections to these to TLSv1.1 or TLS1.0 or not to move to Java 11 at all.</div><div><pre><font face="Arial, Helvetica, sans-serif"><span style="white-space:normal">My request is simply to have all of the new extensions configurable on individual basis so that they can be turned off if needed for compatibility just like most other security enhancements that were delivered in the past.</span></font></pre>It appears some of the issues can come from <br><br>- inclusion of RSASSA-PSS alg in TLS 1.2 handshakes but these can disabled at least<br><br>-signature_algorithms_cert and supported_versions extensions which seem to be hardcoded for TLS 1.2 (I was not able to conclusively identify which of these caused my troubles)<br><br><a href="https://tools.ietf.org/html/rfc8446#section-1.3">https://tools.ietf.org/html/rfc8446#section-1.3</a> does say that TLS 1.2 clients are affected but in an optional manner.Just today I've encountered another Java 11 interop issue with TLS but this time with a physical device which can have a long shelf life yet running a simple client socket handshake abruptly terminates the connection upon client hello (no server_hello at all), and downgrading the JRE below 11 works fine. I'm including a trace for that as well:<pre style="color:rgb(0,0,0)"><br></pre><div><div class="hljs ruby" style="display:block;overflow-x:auto;padding:0.5em;color:rgb(51,51,51);background:rgb(248,248,248);font-family:monospace"><pre style="color:rgb(0,0,0)">javax.net.ssl<span class="hljs-params">|DEBUG|</span><span class="hljs-number" style="color:rgb(136,0,0)">01</span><span class="hljs-params">|main|</span><span class="hljs-number" style="color:rgb(136,0,0)">2019</span>-<span class="hljs-number" style="color:rgb(136,0,0)">01</span>-08 <span class="hljs-number" style="color:rgb(136,0,0)">13</span><span class="hljs-symbol" style="color:rgb(188,96,96)">:</span><span class="hljs-number" style="color:rgb(136,0,0)">40</span><span class="hljs-symbol" style="color:rgb(188,96,96)">:</span><span class="hljs-number" style="color:rgb(136,0,0)">14.395</span> AEDT<span class="hljs-params">|SSLCipher.java:437|</span>jdk.tls.<span class="hljs-symbol" style="color:rgb(188,96,96)">keyLimits:</span> entry = AES/GCM/NoPadding KeyUpdate <span class="hljs-number" style="color:rgb(136,0,0)">2</span>^<span class="hljs-number" style="color:rgb(136,0,0)">37</span>. AES/GCM/<span class="hljs-symbol" style="color:rgb(188,96,96)">NOPADDING:</span>KEYUPDATE = <span class="hljs-number" style="color:rgb(136,0,0)">137438953472</span><br></pre><pre><pre><font face="Arial, Helvetica, sans-serif"><span style="white-space:normal">javax.net.ssl<span class="hljs-params">|WARNING|</span><span class="hljs-number" style="color:rgb(136,0,0)">01</span><span class="hljs-params">|main|</span><span class="hljs-number" style="color:rgb(136,0,0)">2019</span>-<span class="hljs-number" style="color:rgb(136,0,0)">01</span>-08 <span class="hljs-number" style="color:rgb(136,0,0)">13</span><span class="hljs-symbol" style="color:rgb(188,96,96)">:</span><span class="hljs-number" style="color:rgb(136,0,0)">40</span><span class="hljs-symbol" style="color:rgb(188,96,96)">:</span><span class="hljs-number" style="color:rgb(136,0,0)">14.433</span> AEDT<span class="hljs-params">|ServerNameExtension.java:255|</span>Unable to indicate server name</span></font></pre><pre><font face="Arial, Helvetica, sans-serif"><span style="white-space:normal">javax.net.ssl<span class="hljs-params">|DEBUG|</span><span class="hljs-number" style="color:rgb(136,0,0)">01</span><span class="hljs-params">|main|</span><span class="hljs-number" style="color:rgb(136,0,0)">2019</span>-<span class="hljs-number" style="color:rgb(136,0,0)">01</span>-08 <span class="hljs-number" style="color:rgb(136,0,0)">13</span><span class="hljs-symbol" style="color:rgb(188,96,96)">:</span><span class="hljs-number" style="color:rgb(136,0,0)">40</span><span class="hljs-symbol" style="color:rgb(188,96,96)">:</span><span class="hljs-number" style="color:rgb(136,0,0)">14.433</span> AEDT<span class="hljs-params">|SSLExtensions.java:235|</span>Ignore, context unavailable <span class="hljs-symbol" style="color:rgb(188,96,96)">extension:</span> server_name</span></font></pre><pre><font face="Arial, Helvetica, sans-serif"><span style="white-space:normal">javax.net.ssl<span class="hljs-params">|DEBUG|</span><span class="hljs-number" style="color:rgb(136,0,0)">01</span><span class="hljs-params">|main|</span><span class="hljs-number" style="color:rgb(136,0,0)">2019</span>-<span class="hljs-number" style="color:rgb(136,0,0)">01</span>-08 <span class="hljs-number" style="color:rgb(136,0,0)">13</span><span class="hljs-symbol" style="color:rgb(188,96,96)">:</span><span class="hljs-number" style="color:rgb(136,0,0)">40</span><span class="hljs-symbol" style="color:rgb(188,96,96)">:</span><span class="hljs-number" style="color:rgb(136,0,0)">14.433</span> AEDT<span class="hljs-params">|SSLExtensions.java:235|</span>Ignore, context unavailable <span class="hljs-symbol" style="color:rgb(188,96,96)">extension:</span> status_request</span></font></pre><pre><font face="Arial, Helvetica, sans-serif"><span style="white-space:normal">javax.net.ssl<span class="hljs-params">|WARNING|</span><span class="hljs-number" style="color:rgb(136,0,0)">01</span><span class="hljs-params">|main|</span><span class="hljs-number" style="color:rgb(136,0,0)">2019</span>-<span class="hljs-number" style="color:rgb(136,0,0)">01</span>-08 <span class="hljs-number" style="color:rgb(136,0,0)">13</span><span class="hljs-symbol" style="color:rgb(188,96,96)">:</span><span class="hljs-number" style="color:rgb(136,0,0)">40</span><span class="hljs-symbol" style="color:rgb(188,96,96)">:</span><span class="hljs-number" style="color:rgb(136,0,0)">14.443</span> AEDT<span class="hljs-params">|SignatureScheme.java:282|</span>Signature algorithm, ed25519, is <span class="hljs-keyword" style="font-weight:bold">not</span> supported by the underlying providers</span></font></pre><pre><font face="Arial, Helvetica, sans-serif"><span style="white-space:normal">javax.net.ssl<span class="hljs-params">|WARNING|</span><span class="hljs-number" style="color:rgb(136,0,0)">01</span><span class="hljs-params">|main|</span><span class="hljs-number" style="color:rgb(136,0,0)">2019</span>-<span class="hljs-number" style="color:rgb(136,0,0)">01</span>-08 <span class="hljs-number" style="color:rgb(136,0,0)">13</span><span class="hljs-symbol" style="color:rgb(188,96,96)">:</span><span class="hljs-number" style="color:rgb(136,0,0)">40</span><span class="hljs-symbol" style="color:rgb(188,96,96)">:</span><span class="hljs-number" style="color:rgb(136,0,0)">14.444</span> AEDT<span class="hljs-params">|SignatureScheme.java:282|</span>Signature algorithm, ed448, is <span class="hljs-keyword" style="font-weight:bold">not</span> supported by the underlying providers</span></font></pre><pre><font face="Arial, Helvetica, sans-serif"><span style="white-space:normal">javax.net.ssl<span class="hljs-params">|INFO|</span><span class="hljs-number" style="color:rgb(136,0,0)">01</span><span class="hljs-params">|main|</span><span class="hljs-number" style="color:rgb(136,0,0)">2019</span>-<span class="hljs-number" style="color:rgb(136,0,0)">01</span>-08 <span class="hljs-number" style="color:rgb(136,0,0)">13</span><span class="hljs-symbol" style="color:rgb(188,96,96)">:</span><span class="hljs-number" style="color:rgb(136,0,0)">40</span><span class="hljs-symbol" style="color:rgb(188,96,96)">:</span><span class="hljs-number" style="color:rgb(136,0,0)">14.449</span> AEDT<span class="hljs-params">|AlpnExtension.java:161|</span>No available application protocols</span></font></pre><pre><font face="Arial, Helvetica, sans-serif"><span style="white-space:normal">javax.net.ssl<span class="hljs-params">|DEBUG|</span><span class="hljs-number" style="color:rgb(136,0,0)">01</span><span class="hljs-params">|main|</span><span class="hljs-number" style="color:rgb(136,0,0)">2019</span>-<span class="hljs-number" style="color:rgb(136,0,0)">01</span>-08 <span class="hljs-number" style="color:rgb(136,0,0)">13</span><span class="hljs-symbol" style="color:rgb(188,96,96)">:</span><span class="hljs-number" style="color:rgb(136,0,0)">40</span><span class="hljs-symbol" style="color:rgb(188,96,96)">:</span><span class="hljs-number" style="color:rgb(136,0,0)">14.449</span> AEDT<span class="hljs-params">|SSLExtensions.java:235|</span>Ignore, context unavailable <span class="hljs-symbol" style="color:rgb(188,96,96)">extension:</span> application_layer_protocol_negotiation</span></font></pre><pre><font face="Arial, Helvetica, sans-serif"><span style="white-space:normal">javax.net.ssl<span class="hljs-params">|DEBUG|</span><span class="hljs-number" style="color:rgb(136,0,0)">01</span><span class="hljs-params">|main|</span><span class="hljs-number" style="color:rgb(136,0,0)">2019</span>-<span class="hljs-number" style="color:rgb(136,0,0)">01</span>-08 <span class="hljs-number" style="color:rgb(136,0,0)">13</span><span class="hljs-symbol" style="color:rgb(188,96,96)">:</span><span class="hljs-number" style="color:rgb(136,0,0)">40</span><span class="hljs-symbol" style="color:rgb(188,96,96)">:</span><span class="hljs-number" style="color:rgb(136,0,0)">14.450</span> AEDT<span class="hljs-params">|SSLExtensions.java:235|</span>Ignore, context unavailable <span class="hljs-symbol" style="color:rgb(188,96,96)">extension:</span> status_request_v2</span></font></pre><pre><font face="Arial, Helvetica, sans-serif"><span style="white-space:normal">javax.net.ssl<span class="hljs-params">|DEBUG|</span><span class="hljs-number" style="color:rgb(136,0,0)">01</span><span class="hljs-params">|main|</span><span class="hljs-number" style="color:rgb(136,0,0)">2019</span>-<span class="hljs-number" style="color:rgb(136,0,0)">01</span>-08 <span class="hljs-number" style="color:rgb(136,0,0)">13</span><span class="hljs-symbol" style="color:rgb(188,96,96)">:</span><span class="hljs-number" style="color:rgb(136,0,0)">40</span><span class="hljs-symbol" style="color:rgb(188,96,96)">:</span><span class="hljs-number" style="color:rgb(136,0,0)">14.453</span> AEDT<span class="hljs-params">|ClientHello.java:651|</span>Produced ClientHello handshake message (</span></font></pre><pre><font face="Arial, Helvetica, sans-serif"><span style="white-space:normal"><span class="hljs-string" style="color:rgb(136,0,0)">"ClientHello"</span>: {</span></font></pre><pre><font face="Arial, Helvetica, sans-serif"><span style="white-space:normal"> <span class="hljs-string" style="color:rgb(136,0,0)">"client version"</span> : <span class="hljs-string" style="color:rgb(136,0,0)">"TLSv1.2"</span>,</span></font></pre><pre><font face="Arial, Helvetica, sans-serif"><span style="white-space:normal"> <span class="hljs-string" style="color:rgb(136,0,0)">"random"</span> : <span class="hljs-string" style="color:rgb(136,0,0)">"1A BA E8 FC 59 00 AB DF 9A 1A 07 94 24 7F 34 3D 0B D2 7D 10 72 52 54 CD 44 43 62 E8 8B 42 C6 68"</span>,</span></font></pre><pre><font face="Arial, Helvetica, sans-serif"><span style="white-space:normal"> <span class="hljs-string" style="color:rgb(136,0,0)">"session id"</span> : <span class="hljs-string" style="color:rgb(136,0,0)">""</span>,</span></font></pre><pre><font face="Arial, Helvetica, sans-serif"><span style="white-space:normal"> <span class="hljs-string" style="color:rgb(136,0,0)">"cipher suites"</span> : <span class="hljs-string" style="color:rgb(136,0,0)">"[TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256(0xC023), TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256(0xC027), TLS_RSA_WITH_AES_128_CBC_SHA256(0x003C), TLS_ECDH_RSA_WITH_AES_128_CBC_SHA256(0xC029), TLS_RSA_WITH_AES_128_CBC_SHA(0x002F)]"</span>,</span></font></pre><pre><font face="Arial, Helvetica, sans-serif"><span style="white-space:normal"> <span class="hljs-string" style="color:rgb(136,0,0)">"compression methods"</span> : <span class="hljs-string" style="color:rgb(136,0,0)">"00"</span>,</span></font></pre><pre><font face="Arial, Helvetica, sans-serif"><span style="white-space:normal"> <span class="hljs-string" style="color:rgb(136,0,0)">"extensions"</span> : [</span></font></pre><pre><font face="Arial, Helvetica, sans-serif"><span style="white-space:normal"> <span class="hljs-string" style="color:rgb(136,0,0)">"supported_groups (10)"</span>: {</span></font></pre><pre><font face="Arial, Helvetica, sans-serif"><span style="white-space:normal"> <span class="hljs-string" style="color:rgb(136,0,0)">"versions"</span>: [secp256r1, secp384r1, secp521r1, secp160k1]</span></font></pre><pre><font face="Arial, Helvetica, sans-serif"><span style="white-space:normal"> },</span></font></pre><pre><font face="Arial, Helvetica, sans-serif"><span style="white-space:normal"> <span class="hljs-string" style="color:rgb(136,0,0)">"ec_point_formats (11)"</span>: {</span></font></pre><pre><font face="Arial, Helvetica, sans-serif"><span style="white-space:normal"> <span class="hljs-string" style="color:rgb(136,0,0)">"formats"</span>: [uncompressed]</span></font></pre><pre><font face="Arial, Helvetica, sans-serif"><span style="white-space:normal"> },</span></font></pre><pre><font face="Arial, Helvetica, sans-serif"><span style="white-space:normal"> <span class="hljs-string" style="color:rgb(136,0,0)">"signature_algorithms (13)"</span>: {</span></font></pre><pre><font face="Arial, Helvetica, sans-serif"><span style="white-space:normal"> <span class="hljs-string" style="color:rgb(136,0,0)">"signature schemes"</span>: [ecdsa_secp256r1_sha256, ecdsa_secp384r1_sha384, ecdsa_secp512r1_sha512, rsa_pss_rsae_sha256, rsa_pss_rsae_sha384, rsa_pss_rsae_sha512, rsa_pss_pss_sha256, rsa_pss_pss_sha384, rsa_pss_pss_sha512, rsa_pkcs1_sha256, rsa_pkcs1_sha384, rsa_pkcs1_sha512, dsa_sha256, ecdsa_sha224, rsa_sha224, dsa_sha224, ecdsa_sha1, rsa_pkcs1_sha1, dsa_sha1, rsa_md5]</span></font></pre><pre><font face="Arial, Helvetica, sans-serif"><span style="white-space:normal"> },</span></font></pre><pre><font face="Arial, Helvetica, sans-serif"><span style="white-space:normal"> <span class="hljs-string" style="color:rgb(136,0,0)">"signature_algorithms_cert (50)"</span>: {</span></font></pre><pre><font face="Arial, Helvetica, sans-serif"><span style="white-space:normal"> <span class="hljs-string" style="color:rgb(136,0,0)">"signature schemes"</span>: [ecdsa_secp256r1_sha256, ecdsa_secp384r1_sha384, ecdsa_secp512r1_sha512, rsa_pss_rsae_sha256, rsa_pss_rsae_sha384, rsa_pss_rsae_sha512, rsa_pss_pss_sha256, rsa_pss_pss_sha384, rsa_pss_pss_sha512, rsa_pkcs1_sha256, rsa_pkcs1_sha384, rsa_pkcs1_sha512, dsa_sha256, ecdsa_sha224, rsa_sha224, dsa_sha224, ecdsa_sha1, rsa_pkcs1_sha1, dsa_sha1, rsa_md5]</span></font></pre><pre><font face="Arial, Helvetica, sans-serif"><span style="white-space:normal"> },</span></font></pre><pre><font face="Arial, Helvetica, sans-serif"><span style="white-space:normal"> <span class="hljs-string" style="color:rgb(136,0,0)">"extended_master_secret (23)"</span>: {</span></font></pre><pre><font face="Arial, Helvetica, sans-serif"><span style="white-space:normal"> <empty></span></font></pre><pre><font face="Arial, Helvetica, sans-serif"><span style="white-space:normal"> },</span></font></pre><pre><font face="Arial, Helvetica, sans-serif"><span style="white-space:normal"> <span class="hljs-string" style="color:rgb(136,0,0)">"supported_versions (43)"</span>: {</span></font></pre><pre><font face="Arial, Helvetica, sans-serif"><span style="white-space:normal"> <span class="hljs-string" style="color:rgb(136,0,0)">"versions"</span>: [TLSv1.<span class="hljs-number" style="color:rgb(136,0,0)">2</span>, TLSv1.<span class="hljs-number" style="color:rgb(136,0,0)">1</span>]</span></font></pre><pre><font face="Arial, Helvetica, sans-serif"><span style="white-space:normal"> },</span></font></pre><pre><font face="Arial, Helvetica, sans-serif"><span style="white-space:normal"> <span class="hljs-string" style="color:rgb(136,0,0)">"renegotiation_info (65,281)"</span>: {</span></font></pre><pre><font face="Arial, Helvetica, sans-serif"><span style="white-space:normal"> <span class="hljs-string" style="color:rgb(136,0,0)">"renegotiated connection"</span>: [<no renegotiated connection>]</span></font></pre><pre><font face="Arial, Helvetica, sans-serif"><span style="white-space:normal"> }</span></font></pre><pre><font face="Arial, Helvetica, sans-serif"><span style="white-space:normal"> ]</span></font></pre><pre><font face="Arial, Helvetica, sans-serif"><span style="white-space:normal">}</span></font></pre><pre><font face="Arial, Helvetica, sans-serif"><span style="white-space:normal">)</span></font></pre><pre><font face="Arial, Helvetica, sans-serif"><span style="white-space:normal">javax.net.ssl<span class="hljs-params">|DEBUG|</span><span class="hljs-number" style="color:rgb(136,0,0)">01</span><span class="hljs-params">|main|</span><span class="hljs-number" style="color:rgb(136,0,0)">2019</span>-<span class="hljs-number" style="color:rgb(136,0,0)">01</span>-08 <span class="hljs-number" style="color:rgb(136,0,0)">13</span><span class="hljs-symbol" style="color:rgb(188,96,96)">:</span><span class="hljs-number" style="color:rgb(136,0,0)">40</span><span class="hljs-symbol" style="color:rgb(188,96,96)">:</span><span class="hljs-number" style="color:rgb(136,0,0)">14.455</span> AEDT<span class="hljs-params">|Alert.java:232|</span>Received alert message (</span></font></pre><pre><font face="Arial, Helvetica, sans-serif"><span style="white-space:normal"><span class="hljs-string" style="color:rgb(136,0,0)">"Alert"</span>: {</span></font></pre><pre><font face="Arial, Helvetica, sans-serif"><span style="white-space:normal"> <span class="hljs-string" style="color:rgb(136,0,0)">"level"</span> : <span class="hljs-string" style="color:rgb(136,0,0)">"fatal"</span>,</span></font></pre><pre><font face="Arial, Helvetica, sans-serif"><span style="white-space:normal"> <span class="hljs-string" style="color:rgb(136,0,0)">"description"</span>: <span class="hljs-string" style="color:rgb(136,0,0)">"handshake_failure"</span></span></font></pre><pre><font face="Arial, Helvetica, sans-serif"><span style="white-space:normal">}</span></font></pre><pre><font face="Arial, Helvetica, sans-serif"><span style="white-space:normal">)</span></font></pre><pre><font face="Arial, Helvetica, sans-serif"><span style="white-space:normal">javax.net.ssl<span class="hljs-params">|ERROR|</span><span class="hljs-number" style="color:rgb(136,0,0)">01</span><span class="hljs-params">|main|</span><span class="hljs-number" style="color:rgb(136,0,0)">2019</span>-<span class="hljs-number" style="color:rgb(136,0,0)">01</span>-08 <span class="hljs-number" style="color:rgb(136,0,0)">13</span><span class="hljs-symbol" style="color:rgb(188,96,96)">:</span><span class="hljs-number" style="color:rgb(136,0,0)">40</span><span class="hljs-symbol" style="color:rgb(188,96,96)">:</span><span class="hljs-number" style="color:rgb(136,0,0)">14.456</span> AEDT<span class="hljs-params">|TransportContext.java:313|</span>Fatal (HANDSHAKE_FAILURE): Received fatal <span class="hljs-symbol" style="color:rgb(188,96,96)">alert:</span> handshake_failure (</span></font></pre><pre><font face="Arial, Helvetica, sans-serif"><span style="white-space:normal"><span class="hljs-string" style="color:rgb(136,0,0)">"throwable"</span> : {</span></font></pre><pre><font face="Arial, Helvetica, sans-serif"><span style="white-space:normal"> javax.net.ssl.<span class="hljs-symbol" style="color:rgb(188,96,96)">SSLHandshakeException:</span> Received fatal <span class="hljs-symbol" style="color:rgb(188,96,96)">alert:</span> handshake_failure</span></font></pre><pre><font face="Arial, Helvetica, sans-serif"><span style="white-space:normal"> at java.base/sun.security.ssl.Alert.createSSLException(Alert.<span class="hljs-symbol" style="color:rgb(188,96,96)">java:</span><span class="hljs-number" style="color:rgb(136,0,0)">128</span>)</span></font></pre><pre><font face="Arial, Helvetica, sans-serif"><span style="white-space:normal"> at java.base/sun.security.ssl.Alert.createSSLException(Alert.<span class="hljs-symbol" style="color:rgb(188,96,96)">java:</span><span class="hljs-number" style="color:rgb(136,0,0)">117</span>)</span></font></pre><pre><font face="Arial, Helvetica, sans-serif"><span style="white-space:normal"> at java.base/sun.security.ssl.TransportContext.fatal(TransportContext.<span class="hljs-symbol" style="color:rgb(188,96,96)">java:</span><span class="hljs-number" style="color:rgb(136,0,0)">308</span>)</span></font></pre><pre><font face="Arial, Helvetica, sans-serif"><span style="white-space:normal"> at java.base/sun.security.ssl.Alert$AlertConsumer.consume(Alert.<span class="hljs-symbol" style="color:rgb(188,96,96)">java:</span><span class="hljs-number" style="color:rgb(136,0,0)">279</span>)</span></font></pre><pre><font face="Arial, Helvetica, sans-serif"><span style="white-space:normal"> at java.base/sun.security.ssl.TransportContext.dispatch(TransportContext.<span class="hljs-symbol" style="color:rgb(188,96,96)">java:</span><span class="hljs-number" style="color:rgb(136,0,0)">181</span>)</span></font></pre><pre><font face="Arial, Helvetica, sans-serif"><span style="white-space:normal"> at java.base/sun.security.ssl.SSLTransport.decode(SSLTransport.<span class="hljs-symbol" style="color:rgb(188,96,96)">java:</span><span class="hljs-number" style="color:rgb(136,0,0)">164</span>)</span></font></pre><pre><font face="Arial, Helvetica, sans-serif"><span style="white-space:normal"> at java.base/sun.security.ssl.SSLSocketImpl.decode(SSLSocketImpl.<span class="hljs-symbol" style="color:rgb(188,96,96)">java:</span><span class="hljs-number" style="color:rgb(136,0,0)">1152</span>)</span></font></pre><pre><font face="Arial, Helvetica, sans-serif"><span style="white-space:normal"> at java.base/sun.security.ssl.SSLSocketImpl.readHandshakeRecord(SSLSocketImpl.<span class="hljs-symbol" style="color:rgb(188,96,96)">java:</span><span class="hljs-number" style="color:rgb(136,0,0)">1063</span>)</span></font></pre><pre><font face="Arial, Helvetica, sans-serif"><span style="white-space:normal"> at java.base/sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.<span class="hljs-symbol" style="color:rgb(188,96,96)">java:</span><span class="hljs-number" style="color:rgb(136,0,0)">402</span>)</span></font></pre><pre><font face="Arial, Helvetica, sans-serif"><span style="white-space:normal"> at SslSocketClient.main(SslSocketClient.<span class="hljs-symbol" style="color:rgb(188,96,96)">kt:</span><span class="hljs-number" style="color:rgb(136,0,0)">47</span>)}</span></font></pre><pre><font face="Arial, Helvetica, sans-serif"><span style="white-space:normal"><br></span></font></pre><pre><font face="Arial, Helvetica, sans-serif"><span style="white-space:normal">)</span></font></pre><pre><font face="Arial, Helvetica, sans-serif"><span style="white-space:normal">javax.net.ssl<span class="hljs-params">|DEBUG|</span><span class="hljs-number" style="color:rgb(136,0,0)">01</span><span class="hljs-params">|main|</span><span class="hljs-number" style="color:rgb(136,0,0)">2019</span>-<span class="hljs-number" style="color:rgb(136,0,0)">01</span>-08 <span class="hljs-number" style="color:rgb(136,0,0)">13</span><span class="hljs-symbol" style="color:rgb(188,96,96)">:</span><span class="hljs-number" style="color:rgb(136,0,0)">40</span><span class="hljs-symbol" style="color:rgb(188,96,96)">:</span><span class="hljs-number" style="color:rgb(136,0,0)">14.457</span> AEDT<span class="hljs-params">|SSLSocketImpl.java:1361|</span>close the underlying socket</span></font></pre><pre><font face="Arial, Helvetica, sans-serif"><span style="white-space:normal">javax.net.ssl<span class="hljs-params">|DEBUG|</span><span class="hljs-number" style="color:rgb(136,0,0)">01</span><span class="hljs-params">|main|</span><span class="hljs-number" style="color:rgb(136,0,0)">2019</span>-<span class="hljs-number" style="color:rgb(136,0,0)">01</span>-08 <span class="hljs-number" style="color:rgb(136,0,0)">13</span><span class="hljs-symbol" style="color:rgb(188,96,96)">:</span><span class="hljs-number" style="color:rgb(136,0,0)">40</span><span class="hljs-symbol" style="color:rgb(188,96,96)">:</span><span class="hljs-number" style="color:rgb(136,0,0)">14.457</span> AEDT<span class="hljs-params">|SSLSocketImpl.java:1380|</span>close the SSL connection (initiative)</span></font></pre><pre><font face="Arial, Helvetica, sans-serif"><span style="white-space:normal">Exception <span class="hljs-keyword" style="font-weight:bold">in</span> thread <span class="hljs-string" style="color:rgb(136,0,0)">"main"</span> javax.net.ssl.<span class="hljs-symbol" style="color:rgb(188,96,96)">SSLHandshakeException:</span> Received fatal <span class="hljs-symbol" style="color:rgb(188,96,96)">alert:</span> handshake_failure</span></font></pre><pre><font face="Arial, Helvetica, sans-serif"><span style="white-space:normal"> at java.base/sun.security.ssl.Alert.createSSLException(Alert.<span class="hljs-symbol" style="color:rgb(188,96,96)">java:</span><span class="hljs-number" style="color:rgb(136,0,0)">128</span>)</span></font></pre><pre><font face="Arial, Helvetica, sans-serif"><span style="white-space:normal"> at java.base/sun.security.ssl.Alert.createSSLException(Alert.<span class="hljs-symbol" style="color:rgb(188,96,96)">java:</span><span class="hljs-number" style="color:rgb(136,0,0)">117</span>)</span></font></pre><pre><font face="Arial, Helvetica, sans-serif"><span style="white-space:normal"> at java.base/sun.security.ssl.TransportContext.fatal(TransportContext.<span class="hljs-symbol" style="color:rgb(188,96,96)">java:</span><span class="hljs-number" style="color:rgb(136,0,0)">308</span>)</span></font></pre><pre><font face="Arial, Helvetica, sans-serif"><span style="white-space:normal"> at java.base/sun.security.ssl.Alert$AlertConsumer.consume(Alert.<span class="hljs-symbol" style="color:rgb(188,96,96)">java:</span><span class="hljs-number" style="color:rgb(136,0,0)">279</span>)</span></font></pre><pre><font face="Arial, Helvetica, sans-serif"><span style="white-space:normal"> at java.base/sun.security.ssl.TransportContext.dispatch(TransportContext.<span class="hljs-symbol" style="color:rgb(188,96,96)">java:</span><span class="hljs-number" style="color:rgb(136,0,0)">181</span>)</span></font></pre><pre><font face="Arial, Helvetica, sans-serif"><span style="white-space:normal"> at java.base/sun.security.ssl.SSLTransport.decode(SSLTransport.<span class="hljs-symbol" style="color:rgb(188,96,96)">java:</span><span class="hljs-number" style="color:rgb(136,0,0)">164</span>)</span></font></pre><pre><font face="Arial, Helvetica, sans-serif"><span style="white-space:normal"> at java.base/sun.security.ssl.SSLSocketImpl.decode(SSLSocketImpl.<span class="hljs-symbol" style="color:rgb(188,96,96)">java:</span><span class="hljs-number" style="color:rgb(136,0,0)">1152</span>)</span></font></pre><pre><font face="Arial, Helvetica, sans-serif"><span style="white-space:normal"> at java.base/sun.security.ssl.SSLSocketImpl.readHandshakeRecord(SSLSocketImpl.<span class="hljs-symbol" style="color:rgb(188,96,96)">java:</span><span class="hljs-number" style="color:rgb(136,0,0)">1063</span>)</span></font></pre><pre><font face="Arial, Helvetica, sans-serif"><span style="white-space:normal"> at java.base/sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.<span class="hljs-symbol" style="color:rgb(188,96,96)">java:</span><span class="hljs-number" style="color:rgb(136,0,0)">402</span>)</span></font></pre><pre><font face="Arial, Helvetica, sans-serif"><span style="white-space:normal"> at SslSocketClient.main(SslSocketClient.<span class="hljs-symbol" style="color:rgb(188,96,96)">kt:</span><span class="hljs-number" style="color:rgb(136,0,0)">47</span>)</span></font></pre></pre><pre style="color:rgb(0,0,0)"><span style="color:rgb(34,34,34);font-family:Arial,Helvetica,sans-serif;white-space:normal"><br></span></pre><pre></pre></div></div><br><pre><br></pre><pre></pre></div></div></div></div>