JDK 7 TLSv1.2 handshake_failure
979355Dec 11 2012 — edited Dec 12 2012During initial handshake with TLSv1.2 protocol, we are observing what appears
to be handshake failure right after Server sends ServerHelloDone. (Probably
Client sending Client Certificate Message to the server and somehow resulting
is EOF although Server is has not explicitly asked for the Client certificate.)
This is only observed with TLSv1.2 protocol enabled browsers (IE8).
http-0.0.0.0-9999-1, READ: TLSv1.2 Handshake, length = 185
*** ClientHello, TLSv1.2
RandomCookie: GMT: 1338433763 bytes = { 82, 238, 41, 104, 38, 171, 90, 234,
66, 207, 28, 23, 138, 239, 167, 155, 67, 20, 247, 189, 236, 198, 110, 7, 92,
90, 99, 34 }
Session ID: {}
Cipher Suites: [TLS_RSA_WITH_AES_128_CBC_SHA256,
*** ServerHello, TLSv1.2
RandomCookie: GMT: 1338433763 bytes = { 80, 62, 121, 77, 213, 150, 106, 112,
199, 167, 124, 40, 184, 83, 25, 108, 250, 215, 32, 147, 6, 102, 116, 87, 229,
157, 76, 18 }
Session ID: {80, 199, 225, 227, 142, 254, 98, 13, 88, 45, 24, 128, 141, 233,
146, 172, 138, 35, 133, 91, 25, 122, 254, 53, 138, 30, 204, 194, 42, 73, 194,
85}
Cipher Suite: TLS_RSA_WITH_AES_128_CBC_SHA256
Compression Method: 0
Extension renegotiation_info, renegotiated_connection: <empty>
***
Cipher suite: TLS_RSA_WITH_AES_128_CBC_SHA256
*** ServerHelloDone
http-0.0.0.0-9999-1, WRITE: TLSv1.2 Handshake, length = 1194
[Raw write]: length = 1199
0000: 16 03 03 04 AA 02 00 00 4D 03 03 50 C7 E1 E3 50 ........M..P...P
04A0: 2A 8F C8 2D 19 CD 06 FE 7D 0C 91 0E 00 00 00 *..-...........
http-0.0.0.0-9999-1, received EOFException: error
http-0.0.0.0-9999-1, handling exception: javax.net.ssl.SSLHandshakeException:
Remote host closed connection during handshake
%% Invalidated: [Session-2, TLS_RSA_WITH_AES_128_CBC_SHA256]
http-0.0.0.0-9999-1, SEND TLSv1.2 ALERT: fatal, description =
handshake_failure
http-0.0.0.0-9999-1, WRITE: TLSv1.2 Alert, length = 2
[Raw write]: length = 7
0000: 15 03 03 00 02 02 28 ......(
http-0.0.0.0-9999-1, called closeSocket()
http-0.0.0.0-9999-1, called close()
http-0.0.0.0-9999-1, called closeInternal(true)