javax.net.ssl.SSLHandshakeException: server certificate change is restrictedduring renegotiation

JIRA | Chuck Schweizer | 2 years ago
  1. 0

    [SERVER-207] puppetserver does not handle ssl renegotiation to different puppetdb servers behind a vip - Puppet Labs Tickets

    puppetlabs.com | 1 year ago
    javax.net.ssl.SSLHandshakeException: server certificate change is restrictedduring renegotiation
  2. 0

    I have two puppetdb servers behind a VIP. Puppetserver currently requires them to have the "same" ssl cert in order to not get this error. 2014-11-20 22:04:03,392 ERROR [c.p.h.c.SyncHttpClient] Error executing http request javax.net.ssl.SSLHandshakeException: server certificate change is restrictedduring renegotiation at sun.security.ssl.Handshaker.checkThrown(Handshaker.java:1300) ~[na:1.7.0_71] at sun.security.ssl.SSLEngineImpl.checkTaskThrown(SSLEngineImpl.java:513) ~[na:1.7.0_71] at sun.security.ssl.SSLEngineImpl.writeAppRecord(SSLEngineImpl.java:1180) ~[na:1.7.0_71] at sun.security.ssl.SSLEngineImpl.wrap(SSLEngineImpl.java:1152) ~[na:1.7.0_71] at javax.net.ssl.SSLEngine.wrap(SSLEngine.java:469) ~[na:1.7.0_71] at org.apache.http.nio.reactor.ssl.SSLIOSession.doWrap(SSLIOSession.java:220) ~[puppet-server-release.jar:na] at org.apache.http.nio.reactor.ssl.SSLIOSession.doHandshake(SSLIOSession.java:254) ~[puppet-server-release.jar:na] at org.apache.http.nio.reactor.ssl.SSLIOSession.isAppInputReady(SSLIOSession.java:391) ~[puppet-server-release.jar:na] at org.apache.http.impl.nio.reactor.AbstractIODispatch.inputReady(AbstractIODispatch.java:119) ~[puppet-server-release.jar:na] at org.apache.http.impl.nio.reactor.BaseIOReactor.readable(BaseIOReactor.java:159) ~[puppet-server-release.jar:na] at org.apache.http.impl.nio.reactor.AbstractIOReactor.processEvent(AbstractIOReactor.java:338) ~[puppet-server-release.jar:na] at org.apache.http.impl.nio.reactor.AbstractIOReactor.processEvents(AbstractIOReactor.java:316) ~[puppet-server-release.jar:na] at org.apache.http.impl.nio.reactor.AbstractIOReactor.execute(AbstractIOReactor.java:277) ~[puppet-server-release.jar:na] at org.apache.http.impl.nio.reactor.BaseIOReactor.execute(BaseIOReactor.java:105) ~[puppet-server-release.jar:na] at org.apache.http.impl.nio.reactor.AbstractMultiworkerIOReactor$Worker.run(AbstractMultiworkerIOReactor.java:584) ~[puppet-server-release.jar:na] at java.lang.Thread.run(Thread.java:745) ~[na:1.7.0_71]

    JIRA | 2 years ago | Chuck Schweizer
    javax.net.ssl.SSLHandshakeException: server certificate change is restrictedduring renegotiation
  3. 0

    JBoss

    middlewaremagic.com | 7 months ago
    java.lang.RuntimeException: javax.net.ssl.SSLHandshakeException: General SSLEngine problem
  4. Speed up your debug routine!

    Automated exception search integrated into your IDE

  5. 0

    Dropwizard + SSL Configuration

    Stack Overflow | 3 years ago | Sree
    javax.net.ssl.SSLHandshakeException: no cipher suites in common
  6. 0

    Error while connecting to webservice. - WebLogic Server - General

    developer-works.com | 1 year ago
    javax.net.ssl.SSLHandshakeException: General SSLEngine problem

    5 unregistered visitors
    Not finding the right solution?
    Take a tour to get the most out of Samebug.

    Tired of useless tips?

    Automated exception search integrated into your IDE

    Root Cause Analysis

    1. javax.net.ssl.SSLHandshakeException

      server certificate change is restrictedduring renegotiation

      at sun.security.ssl.Handshaker.checkThrown()
    2. Java JSSE
      SSLEngineImpl.wrap
      1. sun.security.ssl.Handshaker.checkThrown(Handshaker.java:1300)[na:1.7.0_71]
      2. sun.security.ssl.SSLEngineImpl.checkTaskThrown(SSLEngineImpl.java:513)[na:1.7.0_71]
      3. sun.security.ssl.SSLEngineImpl.writeAppRecord(SSLEngineImpl.java:1180)[na:1.7.0_71]
      4. sun.security.ssl.SSLEngineImpl.wrap(SSLEngineImpl.java:1152)[na:1.7.0_71]
      4 frames
    3. Java RT
      SSLEngine.wrap
      1. javax.net.ssl.SSLEngine.wrap(SSLEngine.java:469)[na:1.7.0_71]
      1 frame
    4. Apache HttpCore NIO
      AbstractMultiworkerIOReactor$Worker.run
      1. org.apache.http.nio.reactor.ssl.SSLIOSession.doWrap(SSLIOSession.java:220)[puppet-server-release.jar:na]
      2. org.apache.http.nio.reactor.ssl.SSLIOSession.doHandshake(SSLIOSession.java:254)[puppet-server-release.jar:na]
      3. org.apache.http.nio.reactor.ssl.SSLIOSession.isAppInputReady(SSLIOSession.java:391)[puppet-server-release.jar:na]
      4. org.apache.http.impl.nio.reactor.AbstractIODispatch.inputReady(AbstractIODispatch.java:119)[puppet-server-release.jar:na]
      5. org.apache.http.impl.nio.reactor.BaseIOReactor.readable(BaseIOReactor.java:159)[puppet-server-release.jar:na]
      6. org.apache.http.impl.nio.reactor.AbstractIOReactor.processEvent(AbstractIOReactor.java:338)[puppet-server-release.jar:na]
      7. org.apache.http.impl.nio.reactor.AbstractIOReactor.processEvents(AbstractIOReactor.java:316)[puppet-server-release.jar:na]
      8. org.apache.http.impl.nio.reactor.AbstractIOReactor.execute(AbstractIOReactor.java:277)[puppet-server-release.jar:na]
      9. org.apache.http.impl.nio.reactor.BaseIOReactor.execute(BaseIOReactor.java:105)[puppet-server-release.jar:na]
      10. org.apache.http.impl.nio.reactor.AbstractMultiworkerIOReactor$Worker.run(AbstractMultiworkerIOReactor.java:584)[puppet-server-release.jar:na]
      10 frames
    5. Java RT
      Thread.run
      1. java.lang.Thread.run(Thread.java:745)[na:1.7.0_71]
      1 frame