Hi Alan,
I’'m more interested in the server log files.
Can you use the search service or does this also
fail?
It seems that the s2s connection causes the problem.
I see the three sessions for each server in my
setup.
LG
When I browse the remote machine (i.e. seurat.cbt.nist.gov, a Linux box), my local Wildfire logs the following errors:[/b]
2006.03.15 18:01:18 [org.jivesoftware.wildfire.server.OutgoingServerSession.createOutgoingSession(O utgoingServerSession.java:315)
] Error creating secured outgoing session to remote server: seurat.cbt.nist.gov(DNS lookup: seurat.cbt.nist.gov:5269)
javax.net.ssl.SSLHandshakeException: General SSLEngine problem
at com.sun.net.ssl.internal.ssl.Handshaker.checkThrown(Unknown Source)
at com.sun.net.ssl.internal.ssl.SSLEngineImpl.checkTaskThrown(Unknown Source)
at com.sun.net.ssl.internal.ssl.SSLEngineImpl.writeAppRecord(Unknown Source)
at com.sun.net.ssl.internal.ssl.SSLEngineImpl.wrap(Unknown Source)
at javax.net.ssl.SSLEngine.wrap(Unknown Source)
at org.jivesoftware.wildfire.net.TLSStreamHandler.doHandshake(TLSStreamHandler.jav a:320)
at org.jivesoftware.wildfire.net.TLSStreamHandler.(TLSStreamHandler.java:206)
at org.jivesoftware.wildfire.net.SocketConnection.startTLS(SocketConnection.java:1 50)
at org.jivesoftware.wildfire.server.OutgoingServerSession.secureAndAuthenticate(Ou tgoingServerSession.java:343)
at org.jivesoftware.wildfire.server.OutgoingServerSession.createOutgoingSession(Ou tgoingServerSession.java:296)
at org.jivesoftware.wildfire.server.OutgoingServerSession.authenticateDomain(Outgo ingServerSession.java:139)
at org.jivesoftware.wildfire.server.OutgoingSessionPromise.createSessionAndSendPac ket(OutgoingSessionPromise.java:126)
at org.jivesoftware.wildfire.server.OutgoingSessionPromise.access$300(OutgoingSess ionPromise.java:37)
at org.jivesoftware.wildfire.server.OutgoingSessionPromise$1$1.run(OutgoingSession Promise.java:91)
at java.util.concurrent.ThreadPoolExecutor$Worker.runTask(Unknown Source)
at java.util.concurrent.ThreadPoolExecutor$Worker.run(Unknown Source)
at java.lang.Thread.run(Unknown Source)
Caused by: javax.net.ssl.SSLHandshakeException: General SSLEngine problem
at com.sun.net.ssl.internal.ssl.Alerts.getSSLException(Unknown Source)
at com.sun.net.ssl.internal.ssl.SSLEngineImpl.fatal(Unknown Source)
at com.sun.net.ssl.internal.ssl.Handshaker.fatalSE(Unknown Source)
at com.sun.net.ssl.internal.ssl.Handshaker.fatalSE(Unknown Source)
at com.sun.net.ssl.internal.ssl.ClientHandshaker.serverCertificate(Unknown Source)
at com.sun.net.ssl.internal.ssl.ClientHandshaker.processMessage(Unknown Source)
at com.sun.net.ssl.internal.ssl.Handshaker.processLoop(Unknown Source)
at com.sun.net.ssl.internal.ssl.Handshaker$1.run(Unknown Source)
at java.security.AccessController.doPrivileged(Native Method)
at com.sun.net.ssl.internal.ssl.Handshaker$DelegatedTask.run(Unknown Source)
at org.jivesoftware.wildfire.net.TLSStreamHandler.doTasks(TLSStreamHandler.java:37 1)
at org.jivesoftware.wildfire.net.TLSStreamHandler.doHandshake(TLSStreamHandler.jav a:281)
… 11 more
Caused by: java.security.cert.CertificateException: root certificate not trusted of
at org.jivesoftware.wildfire.net.ServerTrustManager.checkServerTrusted(ServerTrust Manager.java:133)
at com.sun.net.ssl.internal.ssl.JsseX509TrustManager.checkServerTrusted(Unknown Source)
… 19 more
2006.03.15 18:01:18 [org.jivesoftware.wildfire.net.SocketReader.run(SocketReader.java:159)
] Connection closed before session established
Socket[addr=/129.6.162.240,port=42543,localport=5269]
2006.03.15 18:01:18 [org.jivesoftware.wildfire.net.SocketReader.negotiateTLS(SocketReader.java:680)
] Error while negotiating TLS
javax.net.ssl.SSLException: Unsupported record version Unknown-47.115
at com.sun.net.ssl.internal.ssl.EngineInputRecord.bytesInCompletePacket(Unknown Source)
at com.sun.net.ssl.internal.ssl.SSLEngineImpl.readNetRecord(Unknown Source)
at com.sun.net.ssl.internal.ssl.SSLEngineImpl.unwrap(Unknown Source)
at javax.net.ssl.SSLEngine.unwrap(Unknown Source)
at org.jivesoftware.wildfire.net.TLSStreamHandler.doHandshake(TLSStreamHandler.jav a:268)
at org.jivesoftware.wildfire.net.TLSStreamHandler.(TLSStreamHandler.java:206)
at org.jivesoftware.wildfire.net.SocketConnection.startTLS(SocketConnection.java:1 50)
at org.jivesoftware.wildfire.net.SocketReader.negotiateTLS(SocketReader.java:677)
at org.jivesoftware.wildfire.net.SocketReader.readStream(SocketReader.java:266)
at org.jivesoftware.wildfire.net.SocketReader.run(SocketReader.java:119)
at java.lang.Thread.run(Unknown Source)
2006.03.15 18:01:18 [org.jivesoftware.wildfire.net.SocketReader.run(SocketReader.java:159)
] Connection closed before session established
Socket[addr=/129.6.162.240,port=42544,localport=5269]
The remote machine (seurat) wildfire logs has the following errors, note that p623572.campus.nist.gov is my PC:[/b]
2006.03.15 17:54:16 org.jivesoftware.wildfire.net.SocketReader.negotiateTLS(SocketReader.java:680) Error while negotiating TLS
javax.net.ssl.SSLException: Unsupported record version Unknown-47.115
at com.sun.net.ssl.internal.ssl.EngineInputRecord.bytesInCompletePacket(Unknown Source)
at com.sun.net.ssl.internal.ssl.SSLEngineImpl.readNetRecord(Unknown Source)
at com.sun.net.ssl.internal.ssl.SSLEngineImpl.unwrap(Unknown Source)
at javax.net.ssl.SSLEngine.unwrap(Unknown Source)
at org.jivesoftware.wildfire.net.TLSStreamHandler.doHandshake(TLSStreamHandler.jav a:268)
at org.jivesoftware.wildfire.net.TLSStreamHandler.(TLSStreamHandler.java:206)
at org.jivesoftware.wildfire.net.SocketConnection.startTLS(SocketConnection.java:1 50)
at org.jivesoftware.wildfire.net.SocketReader.negotiateTLS(SocketReader.java:677)
at org.jivesoftware.wildfire.net.SocketReader.readStream(SocketReader.java:266)
at org.jivesoftware.wildfire.net.SocketReader.run(SocketReader.java:119)
at java.lang.Thread.run(Unknown Source)
2006.03.15 17:54:16 org.jivesoftware.wildfire.net.SocketReader.run(SocketReader.java:159) Connection closed before session established
Socket[addr=/129.6.162.91,port=2772,localport=5269]
2006.03.15 17:54:16 org.jivesoftware.wildfire.server.OutgoingServerSession.createOutgoingSession(Out goingServerSession.java:315) Error creating secured outgoing session to remote server: p623572.campus.nist.gov(DNS lookup: p623572.campus.nist.gov:5269)
javax.net.ssl.SSLHandshakeException: General SSLEngine problem
at com.sun.net.ssl.internal.ssl.Handshaker.checkThrown(Unknown Source)
at com.sun.net.ssl.internal.ssl.SSLEngineImpl.checkTaskThrown(Unknown Source)
at com.sun.net.ssl.internal.ssl.SSLEngineImpl.writeAppRecord(Unknown Source)
at com.sun.net.ssl.internal.ssl.SSLEngineImpl.wrap(Unknown Source)
at javax.net.ssl.SSLEngine.wrap(Unknown Source)
at org.jivesoftware.wildfire.net.TLSStreamHandler.doHandshake(TLSStreamHandler.jav a:320)
at org.jivesoftware.wildfire.net.TLSStreamHandler.(TLSStreamHandler.java:206)
at org.jivesoftware.wildfire.net.SocketConnection.startTLS(SocketConnection.java:1 50)
at org.jivesoftware.wildfire.server.OutgoingServerSession.secureAndAuthenticate(Ou tgoingServerSession.java:343)
at org.jivesoftware.wildfire.server.OutgoingServerSession.createOutgoingSession(Ou tgoingServerSession.java:296)
at org.jivesoftware.wildfire.server.OutgoingServerSession.authenticateDomain(Outgo ingServerSession.java:139)
at org.jivesoftware.wildfire.server.OutgoingSessionPromise.createSessionAndSendPac ket(OutgoingSessionPromise.java:126)
at org.jivesoftware.wildfire.server.OutgoingSessionPromise.access$300(OutgoingSess ionPromise.java:37)
at org.jivesoftware.wildfire.server.OutgoingSessionPromise$1$1.run(OutgoingSession Promise.java:91)
at java.util.concurrent.ThreadPoolExecutor$Worker.runTask(Unknown Source)
at java.util.concurrent.ThreadPoolExecutor$Worker.run(Unknown Source)
at java.lang.Thread.run(Unknown Source)
Caused by: javax.net.ssl.SSLHandshakeException: General SSLEngine problem
at com.sun.net.ssl.internal.ssl.Alerts.getSSLException(Unknown Source)
at com.sun.net.ssl.internal.ssl.SSLEngineImpl.fatal(Unknown Source)
at com.sun.net.ssl.internal.ssl.Handshaker.fatalSE(Unknown Source)
at com.sun.net.ssl.internal.ssl.Handshaker.fatalSE(Unknown Source)
at com.sun.net.ssl.internal.ssl.ClientHandshaker.serverCertificate(Unknown Source)
at com.sun.net.ssl.internal.ssl.ClientHandshaker.processMessage(Unknown Source)
at com.sun.net.ssl.internal.ssl.Handshaker.processLoop(Unknown Source)
at com.sun.net.ssl.internal.ssl.Handshaker$1.run(Unknown Source)
at java.security.AccessController.doPrivileged(Native Method)
at com.sun.net.ssl.internal.ssl.Handshaker$DelegatedTask.run(Unknown Source)
at org.jivesoftware.wildfire.net.TLSStreamHandler.doTasks(TLSStreamHandler.java:37 1)
at org.jivesoftware.wildfire.net.TLSStreamHandler.doHandshake(TLSStreamHandler.jav a:281)
… 11 more
Caused by: java.security.cert.CertificateException: root certificate not trusted of
at org.jivesoftware.wildfire.net.ServerTrustManager.checkServerTrusted(ServerTrust Manager.java:133)
at com.sun.net.ssl.internal.ssl.JsseX509TrustManager.checkServerTrusted(Unknown Source)
… 19 more
2006.03.15 17:54:16 org.jivesoftware.wildfire.net.SocketReader.run(SocketReader.java:159) Connection closed before session established
Socket[addr=/129.6.162.91,port=2774,localport=5269]
Looks like some sort of TLS problem between the 2 machines?[/b]
NOTE: I do use TLS on port 5223 to log into both machines when I bring up the Spark Client - there is no problem logging in on either machines. I also have both machines using OpenLDAP for user verification purposes.