Java 8 Update 162 javax.net.ssl.sslexception received fatal alert unexpected_message

[Samie Mahmood]

Hi All,

I just would like to state I am learning about Java so consider me as a newbie.

So at work we have Windows 7 Client using Java 7 Update 25 and connects to a java web based application and works fine.

I am upgrading the computers to Java 8 Update 162 and getting the error below after I input login details to the application

Log SOP opened on 18/10/19 at 12:10:29:692
Log SOP is logging at level 4 at 12:10:29:692
SOP|SOP|L4|12:10:29:692|thread applet-com.nortelnetworks.wp.util.ui.WPApplet.class-1|Logging in user 'dmdbadm'...
SOP|SOP|L4|12:10:29:739|thread applet-com.nortelnetworks.wp.util.ui.WPApplet.class-1|Establishing connection to service order manager...
SOP|SOP|L4|12:10:29:817|thread applet-com.nortelnetworks.wp.util.ui.WPApplet.class-1|Connection to service order manager successfully established.
SOP|SOP|L3|12:10:29:863|thread applet-com.nortelnetworks.wp.util.ui.WPApplet.class-1|error during JRMP connection establishment; nested exception is: 
    javax.net.ssl.SSLException: Received fatal alert: unexpected_message
SOP|SOP|L4|12:10:43:826|thread applet-com.nortelnetworks.wp.util.ui.WPApplet.class-1|Logging out user ''...
SOP|SOP|L4|12:10:43:888|thread applet-com.nortelnetworks.wp.util.ui.WPApplet.class-1|Establishing connection to service order manager...
SOP|SOP|L4|12:10:43:950|thread applet-com.nortelnetworks.wp.util.ui.WPApplet.class-1|Connection to service order manager successfully established.
SOP|SOP|L2|12:10:43:982|thread applet-com.nortelnetworks.wp.util.ui.WPApplet.class-1|Error connecting to service order manager: java.lang.NullPointerException
SOP|SOP|L3|12:10:44:028|thread applet-com.nortelnetworks.wp.util.ui.WPApplet.class-1|null"

I have done research and this points to the application requiring authentication/handshake at webserver at SSL which I also checked the network traffic and compared between Java 7 machine and Java 8 machine and Java 7 will happily do a single handshake with the web server at SSL and then continue with TLS but the Java 8 machine won't do this even though I have enabled the algorithm within the java.security file BUT when I only leave SSLv3 enabled on Java 8 and disable TLS as a whole the application works fine but this breaks other web based application that require TLS as minimum.

I do know Java 8 Update 31 (8u31) has disabled SSLv3 - which you can enable within java.security.

I have imported the website certificate within IE11 and also via Java Control Panel still same issue.

Also imported via command line in Java cacerts - still same error.

The website support have also updated the website cert in a test environment still get the same problem

What my question is:

Is possible from the client side to configure JAVA use SSLv3 for a website and port number?

I know worst case scenario we would have to go to the web application and up the encryption level to TLSv1.2 but this is supported by a different team not helping much as this time.

Here is the code on the Java console from the client where it fails:

security: Missing Codebase manifest attribute for: https://10.184.18.10/tools/sop/smi300.jar
security: Missing Application-Library-Allowable-Codebase manifest attribute for: https://10.184.18.10/tools/sop/smi300.jar
security: Validate the certificate chain using CertPath API
security: The certificate has expired, need to check timestamping info
security: No timestamping info available
basic: Plugin2ClassLoader.getPermissions CeilingPolicy allPerms
security: The certificate has expired, need to check timestamping info
security: No timestamping info available
cache: Clean up the reference queue: https://10.184.18.10/tools/sop/sop_help.jar
cache: deregisterReference: com.sun.deploy.cache.MemoryCache$CachedResourceReference@11b47f92: 3
cache: Clean up the reference queue: https://10.184.18.10/tools/sop/sop_help.jar
cache: deregisterReference: com.sun.deploy.cache.MemoryCache$CachedResourceReference@11b47f92: 2
network: Updating file at: C:\Users\mmahmood\AppData\LocalLow\Sun\Java\Deployment\security\securitypack.jar from url: https://javadl-esd-secure.oracle.com/update/securitypack.jar
java.net.ConnectException: Connection timed out: connect
	at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method)
	at sun.reflect.NativeConstructorAccessorImpl.newInstance(Unknown Source)
	at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(Unknown Source)
	at java.lang.reflect.Constructor.newInstance(Unknown Source)
	at sun.net.www.protocol.http.HttpURLConnection$10.run(Unknown Source)
	at sun.net.www.protocol.http.HttpURLConnection$10.run(Unknown Source)
	at java.security.AccessController.doPrivileged(Native Method)
	at sun.net.www.protocol.http.HttpURLConnection.getChainedException(Unknown Source)
	at sun.net.www.protocol.http.HttpURLConnection.getInputStream0(Unknown Source)
	at sun.net.www.protocol.http.HttpURLConnection.access$200(Unknown Source)
	at sun.net.www.protocol.http.HttpURLConnection$9.run(Unknown Source)
	at sun.net.www.protocol.http.HttpURLConnection$9.run(Unknown Source)
	at java.security.AccessController.doPrivileged(Native Method)
	at java.security.AccessController.doPrivilegedWithCombiner(Unknown Source)
	at sun.net.www.protocol.http.HttpURLConnection.getInputStream(Unknown Source)
	at sun.net.www.protocol.https.HttpsURLConnectionImpl.getInputStream(Unknown Source)
	at com.sun.deploy.util.SecurityBaseline.checkForUpdate(Unknown Source)
	at com.sun.deploy.util.SecurityBaseline.access$100(Unknown Source)
	at com.sun.deploy.util.SecurityBaseline$1.run(Unknown Source)
	at java.lang.Thread.run(Unknown Source)
Caused by: java.net.ConnectException: Connection timed out: connect
	at java.net.DualStackPlainSocketImpl.waitForConnect(Native Method)
	at java.net.DualStackPlainSocketImpl.socketConnect(Unknown Source)
	at java.net.AbstractPlainSocketImpl.doConnect(Unknown Source)
	at java.net.AbstractPlainSocketImpl.connectToAddress(Unknown Source)
	at java.net.AbstractPlainSocketImpl.connect(Unknown Source)
	at java.net.PlainSocketImpl.connect(Unknown Source)
	at java.net.SocksSocketImpl.connect(Unknown Source)
	at java.net.Socket.connect(Unknown Source)
	at sun.security.ssl.SSLSocketImpl.connect(Unknown Source)
	at sun.net.NetworkClient.doConnect(Unknown Source)
	at sun.net.www.http.HttpClient.openServer(Unknown Source)
	at sun.net.www.http.HttpClient.openServer(Unknown Source)
	at sun.net.www.protocol.https.HttpsClient.<init>(Unknown Source)
	at sun.net.www.protocol.https.HttpsClient.New(Unknown Source)
	at sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.getNewHttpClient(Unknown Source)
	at sun.net.www.protocol.http.HttpURLConnection.plainConnect0(Unknown Source)
	at sun.net.www.protocol.http.HttpURLConnection$6.run(Unknown Source)
	at sun.net.www.protocol.http.HttpURLConnection$6.run(Unknown Source)
	at java.security.AccessController.doPrivileged(Native Method)
	at java.security.AccessController.doPrivilegedWithCombiner(Unknown Source)
	at sun.net.www.protocol.http.HttpURLConnection.plainConnect(Unknown Source)
	at sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.connect(Unknown Source)
	at sun.net.www.protocol.http.HttpURLConnection.getInputStream0(Unknown Source)
	at sun.net.www.protocol.http.HttpURLConnection.access$200(Unknown Source)
	at sun.net.www.protocol.http.HttpURLConnection$9.run(Unknown Source)
	at sun.net.www.protocol.http.HttpURLConnection$9.run(Unknown Source)
	at java.security.AccessController.doPrivileged(Native Method)
	at java.security.AccessController.doPrivilegedWithCombiner(Unknown Source)
	at sun.net.www.protocol.http.HttpURLConnection.getInputStream(Unknown Source)
	at sun.net.www.protocol.http.HttpURLConnection.getHeaderField(Unknown Source)
	at java.net.HttpURLConnection.getHeaderFieldDate(Unknown Source)
	at java.net.URLConnection.getLastModified(Unknown Source)
	at sun.net.www.protocol.https.HttpsURLConnectionImpl.getLastModified(Unknown Source)
	... 4 more
network: Connecting http://DIDCSCP1b:5555/ with proxy=DIRECT
network: Connecting http://10.184.18.13:6668/ with proxy=DIRECT
network: Connecting http://10.184.18.13:6668/ with proxy=DIRECT
network: Connecting http://10.184.18.13:6668/ with proxy=DIRECT
Error contacting log manager: java.rmi.ConnectIOException: error during JRMP connection establishment; nested exception is: 
	javax.net.ssl.SSLException: Received fatal alert: unexpected_message
Writing to local log...
  Adding log mechanism log.SharedDatedFileLoggingMechanism to log SOP
  Current log file name is: ./SOP112919.log
Managing log files for SOP
network: Connecting http://10.184.18.13:6668/ with proxy=DIRECT
network: Connecting http://10.184.18.13:6668/ with proxy=DIRECT
network: Connecting http://10.184.18.13:6668/ with proxy=DIRECT