users@glassfish.java.net

Re: Glassfish V2 RC4 doesn't work with IE 6 SP2 and SSL

From: Jeanfrancois Arcand <Jeanfrancois.Arcand_at_Sun.COM>
Date: Thu, 30 Aug 2007 11:31:55 -0400

Hi,

if you set the http-listener's attribute blocking-enabled="true" on port
443, does it work? If yes, can you file a bug:

https://glassfish.dev.java.net/servlets/ProjectIssues

Which platform the server runs on?

Thanks

-- Jeanfrancois

Ryan de Laplante wrote:
> Here are some interesting things from the server log with web container
> logging set to fine:
>
> Timestamp
>
> Aug 30, 2007 11:15:16.421
> Log Level
>
> FINE
> Logger
>
> javax.enterprise.system.container.web
> Name-Value Pairs
>
> _ThreadID=18;_ThreadName=httpSSLWorkerThread-443-1;ClassName=com.sun.enterprise.web.connector.grizzly.DefaultReadTask;MethodName=manageKeepAlive;_RequestID=0789559f-00ec-4478-add4-e613b6fb4637;
>
> Record Number
>
> 2225
> Message ID
>
> SocketChannel Read Exception
> Complete Message
>
> javax.net.ssl.SSLHandshakeException: Client requested protocol SSLv3 not
> enabled or not supported at
> com.sun.net.ssl.internal.ssl.Handshaker.checkThrown(Handshaker.java:994)
> at
> com.sun.net.ssl.internal.ssl.SSLEngineImpl.checkTaskThrown(SSLEngineImpl.java:459)
> at
> com.sun.net.ssl.internal.ssl.SSLEngineImpl.writeAppRecord(SSLEngineImpl.java:1058)
> at
> com.sun.net.ssl.internal.ssl.SSLEngineImpl.wrap(SSLEngineImpl.java:1030)
> at javax.net.ssl.SSLEngine.wrap(SSLEngine.java:411) at
> com.sun.enterprise.web.connector.grizzly.ssl.SSLUtils.wrap(SSLUtils.java:360)
> at
> com.sun.enterprise.web.connector.grizzly.ssl.SSLUtils.doHandshake(SSLUtils.java:489)
> at
> com.sun.enterprise.web.connector.grizzly.ssl.SSLReadTask.doHandshake(SSLReadTask.java:289)
> at
> com.sun.enterprise.web.connector.grizzly.ssl.SSLReadTask.doTask(SSLReadTask.java:212)
> at
> com.sun.enterprise.web.connector.grizzly.TaskBase.run(TaskBase.java:265)
> at
> com.sun.enterprise.web.connector.grizzly.ssl.SSLWorkerThread.run(SSLWorkerThread.java:106)
> Caused by: javax.net.ssl.SSLHandshakeException: Client requested
> protocol SSLv3 not enabled or not supported at
> com.sun.net.ssl.internal.ssl.Alerts.getSSLException(Alerts.java:150) at
> com.sun.net.ssl.internal.ssl.SSLEngineImpl.fatal(SSLEngineImpl.java:1356)
> at com.sun.net.ssl.internal.ssl.Handshaker.fatalSE(Handshaker.java:176)
> at com.sun.net.ssl.internal.ssl.Handshaker.fatalSE(Handshaker.java:164)
> at
> com.sun.net.ssl.internal.ssl.ServerHandshaker.clientHello(ServerHandshaker.java:294)
> at
> com.sun.net.ssl.internal.ssl.ServerHandshaker.processMessage(ServerHandshaker.java:178)
> at
> com.sun.net.ssl.internal.ssl.Handshaker.processLoop(Handshaker.java:495)
> at com.sun.net.ssl.internal.ssl.Handshaker$1.run(Handshaker.java:437) at
> java.security.AccessController.doPrivileged(Native Method) at
> com.sun.net.ssl.internal.ssl.Handshaker$DelegatedTask.run(Handshaker.java:932)
> at
> com.sun.enterprise.web.connector.grizzly.ssl.SSLUtils.executeDelegatedTask(SSLUtils.java:393)
> at
> com.sun.enterprise.web.connector.grizzly.ssl.SSLUtils.doHandshake(SSLUtils.java:468)
> ... 4 more
>
>
>
> Timestamp
>
> Aug 30, 2007 11:15:17.313
> Log Level
>
> FINE
> Logger
>
> javax.enterprise.system.container.web
> Name-Value Pairs
>
> _ThreadID=19;_ThreadName=httpSSLWorkerThread-443-0;ClassName=com.sun.enterprise.web.connector.grizzly.DefaultReadTask;MethodName=manageKeepAlive;_RequestID=60a45aa3-2321-4cb2-b519-d9fdbc40afd7;
>
> Record Number
>
> 2226
> Message ID
>
> SocketChannel Read Exception
> Complete Message
>
> javax.net.ssl.SSLException: Unsupported SSL v2.0 ClientHello at
> com.sun.net.ssl.internal.ssl.InputRecord.handleUnknownRecord(InputRecord.java:469)
> at com.sun.net.ssl.internal.ssl.InputRecord.read(InputRecord.java:355)
> at
> com.sun.net.ssl.internal.ssl.EngineInputRecord.read(EngineInputRecord.java:290)
> at
> com.sun.net.ssl.internal.ssl.SSLEngineImpl.readRecord(SSLEngineImpl.java:844)
> at
> com.sun.net.ssl.internal.ssl.SSLEngineImpl.readNetRecord(SSLEngineImpl.java:787)
> at
> com.sun.net.ssl.internal.ssl.SSLEngineImpl.unwrap(SSLEngineImpl.java:663)
> at javax.net.ssl.SSLEngine.unwrap(SSLEngine.java:566) at
> com.sun.enterprise.web.connector.grizzly.ssl.SSLUtils.unwrap(SSLUtils.java:343)
> at
> com.sun.enterprise.web.connector.grizzly.ssl.SSLUtils.doHandshake(SSLUtils.java:454)
> at
> com.sun.enterprise.web.connector.grizzly.ssl.SSLReadTask.doHandshake(SSLReadTask.java:289)
> at
> com.sun.enterprise.web.connector.grizzly.ssl.SSLReadTask.doTask(SSLReadTask.java:212)
> at
> com.sun.enterprise.web.connector.grizzly.TaskBase.run(TaskBase.java:265)
> at
> com.sun.enterprise.web.connector.grizzly.ssl.SSLWorkerThread.run(SSLWorkerThread.java:106)
>
>
>
>
>
>
>
> Ryan de Laplante wrote:
>> Today I noticed that I cannot access my SSL web application on
>> GlassfishV2 RC4 using IE 6.0. I haven't tried IE 6 since upgrading to
>> RC4, but know ithat IE6 used to work before. It works fine in IE 7,
>> and Firefox. IE 6 shows "Cannot find server or DNS error". We've
>> tried it on 5 separate computers with the same result.
>>
>>
>> I re-generated the SSL certificate on Glassfish and restarted. That
>> did not solve the problem.
>> The URL is on the Internet. If a Sun employee would like to see for
>> themselves, please email me directly.
>>
>>
>> Thanks,
>> Ryan
>>
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: users-unsubscribe_at_glassfish.dev.java.net
>> For additional commands, e-mail: users-help_at_glassfish.dev.java.net
>>
>>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe_at_glassfish.dev.java.net
> For additional commands, e-mail: users-help_at_glassfish.dev.java.net
>