java - Intermittent SSL Connection error while connection to Windows Active Directory

Question

We have recently upgraded SSL certificate on Windows Active Directory. After update of SSL certificate we are intermittently getting SSL error while trying to connect Windows Active Directory server from Java Web Application.

Below are the SSL Debug error logs. Strange point is post restart (sometime 1,2 restart) issue got resolved.

00:10:02,687 INFO  [stdout] (Thread-67) 4Thread-67, WRITE: TLSv1 Application Data, length = 32
00:10:02,688 INFO  [stdout] (Thread-617) E 3D 53 54 5F 43 4F   4D 50 41 4E 59 5F 43 59  CN=ST_COMPANY_CY
00:10:02,690 INFO  [stdout] (Thread-621) Thread-621, handling exception: java.net.SocketException: Connection reset
00:10:02,691 INFO  [stdout] (Thread-621) %% Invalidated:  [Session-770, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA]
00:10:02,691 INFO  [stdout] (Thread-621) Thread-621, SEND TLSv1 ALERT:  fatal, description = unexpected_message
00:10:02,692 INFO  [stdout] (Thread-67) [Raw write]: length = 37
00:10:02,693 INFO  [stdout] (Thread-67) 0000: 17 03 01 00 20 E4 BC CB   2A 53 09 20 B4 9B F3 36  .... ...*S. ...6
00:10:02,694 INFO  [stdout] (Thread-67) 0010: C1 9B 8F 7F E0 26 2A 0B   CE 08 ED 91 E3 B9 8C 72  .....&*........r
00:10:02,694 INFO  [stdout] (Thread-67) 0020: 5B 1F 6B C9 46                                     [.k.F
00:10:02,695 INFO  [stdout] (Thread-621) Padded plaintext before ENCRYPTION:  len = 32
00:10:02,696 INFO  [stdout] (Thread-621) 0000: 02 0A 4F EC A1 57 DC 9E   DD 4A D5 6A 59 7E FF B9  ..O..W...J.jY...
00:10:02,697 INFO  [stdout] (Thread-621) 0010: E8 CB 5F 42 27 CB 09 09   09 09 09 09 09 09 09 09  .._B'...........
00:10:02,697 INFO  [stdout] (Thread-621) Thread-621, WRITE: TLSv1 Alert, length = 32
00:10:02,698 INFO  [stdout] (Thread-621) Thread-621, Exception sending alert: java.net.SocketException: Broken pipe
00:10:02,698 INFO  [stdout] (Thread-621) Thread-621, called closeSocket()
00:10:02,699 INFO  [stdout] (Thread-67) Thread-67, handling exception: javax.net.ssl.SSLException: Connection has been shutdown: javax.net.ssl.SSLException: java.net.SocketException: Connection reset

question from:https://stackoverflow.com/questions/65921399/intermittent-ssl-connection-error-while-connection-to-windows-active-directory

Answer 1

Waitting for answers