You are viewing a plain text version of this content. The canonical link for it is here.
Posted to jetspeed-user@portals.apache.org by "Nelligan, Steven M" <sn...@illinois.edu> on 2021/06/17 17:47:45 UTC
I am trying to force our environment to use TLSv1.2 as default.
I am trying to force our environment to use TLSv1.2 as default.
The environment contains three tomcat servers and one mule server.
One of the tomcat servers is running Java 11.
The other two tomcat servers are running Java 7, zulu-7-azure-jdk_7.34.0.5-7.0.242-win_x64.
Recently, changed the mule server to Java 8.
I've changed the portal's tomcat configurations to read:
...
-Dhttps.protocols=TLSv1.2
-Djdk.tls.client.protocols=TLSv1.2
-Djavax.net.debug=ssl
...
Trying to force TSL 1.2...
The portal server has MS IIS as front end, which redirects to our SSO Server and then re-directs back to the portal attempting to run jetspeed2.
When jetspeed tries to start, I get the following error:
Request Error Diagnostics
Error ID
KQ14K7F4
Message
java.net.ConnectException: Connection timed out: connect
Path
/fsportal/portal/fsuser-default-page.psml
User
????????
Click here<javascript:history.go(-1)> to go back to the previous page.
Server Status
Free Memory (KB)
6260146
Total Memory (KB)
8388608
The Jetspeed2 log file shows:
11:53:09,713 handleError ERROR [JetspeedServlet] Request error encountered while processing portal request: java.net.ConnectException: Connection timed out: connect
org.apache.jetspeed.pipeline.PipelineException: java.net.ConnectException: Connection timed out: connect
at org.apache.jetspeed.security.impl.AbstractSecurityValve.invoke(AbstractSecurityValve.java:121)
at org.apache.jetspeed.pipeline.JetspeedPipeline$Invocation.invokeNext(JetspeedPipeline.java:242)
at org.apache.jetspeed.container.url.impl.PortalURLValveImpl.invoke(PortalURLValveImpl.java:88)
at org.apache.jetspeed.pipeline.JetspeedPipeline$Invocation.invokeNext(JetspeedPipeline.java:242)
at org.apache.jetspeed.capabilities.impl.CapabilityValveImpl.invoke(CapabilityValveImpl.java:127)
at org.apache.jetspeed.pipeline.JetspeedPipeline$Invocation.invokeNext(JetspeedPipeline.java:242)
at org.apache.jetspeed.pipeline.JetspeedPipeline.invoke(JetspeedPipeline.java:163)
at org.apache.jetspeed.engine.JetspeedEngine.service(JetspeedEngine.java:225)
at org.apache.jetspeed.engine.JetspeedServlet.invoke(JetspeedServlet.java:300)
at org.apache.jetspeed.engine.JetspeedServlet.service(JetspeedServlet.java:318)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:728)
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:305)
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:210)
at edu.uiuc.fs.jetspeed.security.SiteMinderPortalFilter.doFilter(SiteMinderPortalFilter.java:175)
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:243)
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:210)
at org.apache.jetspeed.container.session.PortalSessionValidationFilter.doFilter(PortalSessionValidationFilter.java:92)
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:243)
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:210)
at org.apache.jetspeed.engine.servlet.XXSUrlAttackFilter.doFilter(XXSUrlAttackFilter.java:52)
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:243)
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:210)
at org.apache.jetspeed.util.ServletRequestCleanupService.doFilter(ServletRequestCleanupService.java:90)
at org.apache.jetspeed.util.ServletRequestCleanupFilter.doFilter(ServletRequestCleanupFilter.java:52)
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:243)
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:210)
at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:222)
at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:123)
at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:581)
at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:171)
at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:99)
at org.apache.catalina.valves.AccessLogValve.invoke(AccessLogValve.java:936)
at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:118)
at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:407)
at org.apache.coyote.http11.AbstractHttp11Processor.process(AbstractHttp11Processor.java:1004)
at org.apache.coyote.AbstractProtocol$AbstractConnectionHandler.process(AbstractProtocol.java:589)
at org.apache.tomcat.util.net.JIoEndpoint$SocketProcessor.run(JIoEndpoint.java:312)
at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1152)
at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:622)
at java.lang.Thread.run(Thread.java:748)
Caused by: com.sun.jersey.api.client.ClientHandlerException: java.net.ConnectException: Connection timed out: connect
at com.sun.jersey.client.urlconnection.URLConnectionClientHandler.handle(URLConnectionClientHandler.java:128)
at com.sun.jersey.api.client.Client.handle(Client.java:457)
at com.sun.jersey.api.client.WebResource.handle(WebResource.java:568)
at com.sun.jersey.api.client.WebResource.get(WebResource.java:183)
at edu.uiuc.fs.party.client.PartyClientImpl.getPartyByUin(PartyClientImpl.java:277)
at edu.uiuc.fs.jetspeed.security.FSSecurityValveSiteMinder.getParty(FSSecurityValveSiteMinder.java:191)
at edu.uiuc.fs.jetspeed.security.FSSecurityValveSiteMinder.getUserPrincipal(FSSecurityValveSiteMinder.java:173)
at edu.uiuc.fs.jetspeed.security.FSSecurityValveSiteMinder.getSubject(FSSecurityValveSiteMinder.java:123)
at org.apache.jetspeed.security.impl.AbstractSecurityValve.invoke(AbstractSecurityValve.java:117)
... 39 more
Caused by: java.net.ConnectException: Connection timed out: connect
at java.net.DualStackPlainSocketImpl.connect0(Native Method)
at java.net.DualStackPlainSocketImpl.socketConnect(DualStackPlainSocketImpl.java:79)
at java.net.AbstractPlainSocketImpl.doConnect(AbstractPlainSocketImpl.java:339)
at java.net.AbstractPlainSocketImpl.connectToAddress(AbstractPlainSocketImpl.java:200)
at java.net.AbstractPlainSocketImpl.connect(AbstractPlainSocketImpl.java:182)
at java.net.PlainSocketImpl.connect(PlainSocketImpl.java:172)
at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:392)
at java.net.Socket.connect(Socket.java:598)
at java.net.Socket.connect(Socket.java:547)
at sun.net.NetworkClient.doConnect(NetworkClient.java:180)
at sun.net.www.http.HttpClient.openServer(HttpClient.java:463)
at sun.net.www.http.HttpClient.openServer(HttpClient.java:558)
at sun.net.www.http.HttpClient.<init>(HttpClient.java:242)
at sun.net.www.http.HttpClient.New(HttpClient.java:339)
at sun.net.www.http.HttpClient.New(HttpClient.java:357)
at sun.net.www.protocol.http.HttpURLConnection.getNewHttpClient(HttpURLConnection.java:1068)
at sun.net.www.protocol.http.HttpURLConnection.plainConnect(HttpURLConnection.java:1004)
at sun.net.www.protocol.http.HttpURLConnection.connect(HttpURLConnection.java:922)
at sun.net.www.protocol.http.HttpURLConnection.getInputStream(HttpURLConnection.java:1372)
at java.net.HttpURLConnection.getResponseCode(HttpURLConnection.java:468)
at com.sun.jersey.client.urlconnection.URLConnectionClientHandler._invoke(URLConnectionClientHandler.java:215)
at com.sun.jersey.client.urlconnection.URLConnectionClientHandler.handle(URLConnectionClientHandler.java:126)
... 47 more
11:53:09,713 writeLog ERROR [diagnostics]
Id: KQ14K7F4
Time: CDT 2021-06-17 11:53:09:713
Thread: Thread[http-bio-8443-exec-3,5,main]
Internal: false
User: ????????
Server: https://?????.?????.?????.???:443
Remote IP address: ###.##.##.##
Local IP address: ###.##.##.##
Context path: /fsportal
Servlet path: /portal
Path info: /fsuser-default-page.psml
Request URI: /fsportal/portal/fsuser-default-page.psml
Request method: GET
Page path: /fsuser-default-page.psml
Error message: java.net.ConnectException: Connection timed out: connect
Exception: org.apache.jetspeed.pipeline.PipelineException: java.net.ConnectException: Connection timed out: connect
at: org.apache.jetspeed.security.impl.AbstractSecurityValve.invoke(AbstractSecurityValve.java:121)
at: org.apache.jetspeed.pipeline.JetspeedPipeline$Invocation.invokeNext(JetspeedPipeline.java:242)
at: org.apache.jetspeed.container.url.impl.PortalURLValveImpl.invoke(PortalURLValveImpl.java:88)
at: org.apache.jetspeed.pipeline.JetspeedPipeline$Invocation.invokeNext(JetspeedPipeline.java:242)
at: org.apache.jetspeed.capabilities.impl.CapabilityValveImpl.invoke(CapabilityValveImpl.java:127)
at: org.apache.jetspeed.pipeline.JetspeedPipeline$Invocation.invokeNext(JetspeedPipeline.java:242)
at: org.apache.jetspeed.pipeline.JetspeedPipeline.invoke(JetspeedPipeline.java:163)
at: org.apache.jetspeed.engine.JetspeedEngine.service(JetspeedEngine.java:225)
at: org.apache.jetspeed.engine.JetspeedServlet.invoke(JetspeedServlet.java:300)
at: org.apache.jetspeed.engine.JetspeedServlet.service(JetspeedServlet.java:318)
at: javax.servlet.http.HttpServlet.service(HttpServlet.java:728)
at: org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:305)
at: org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:210)
at: edu.uiuc.fs.jetspeed.security.SiteMinderPortalFilter.doFilter(SiteMinderPortalFilter.java:175)
at: org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:243)
at: org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:210)
at: org.apache.jetspeed.container.session.PortalSessionValidationFilter.doFilter(PortalSessionValidationFilter.java:92)
at: org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:243)
at: org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:210)
at: org.apache.jetspeed.engine.servlet.XXSUrlAttackFilter.doFilter(XXSUrlAttackFilter.java:52)
at: org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:243)
at: org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:210)
at: org.apache.jetspeed.util.ServletRequestCleanupService.doFilter(ServletRequestCleanupService.java:90)
at: org.apache.jetspeed.util.ServletRequestCleanupFilter.doFilter(ServletRequestCleanupFilter.java:52)
at: org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:243)
at: org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:210)
at: org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:222)
at: org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:123)
at: org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:581)
at: org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:171)
at: org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:99)
at: org.apache.catalina.valves.AccessLogValve.invoke(AccessLogValve.java:936)
at: org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:118)
at: org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:407)
at: org.apache.coyote.http11.AbstractHttp11Processor.process(AbstractHttp11Processor.java:1004)
at: org.apache.coyote.AbstractProtocol$AbstractConnectionHandler.process(AbstractProtocol.java:589)
at: org.apache.tomcat.util.net.JIoEndpoint$SocketProcessor.run(JIoEndpoint.java:312)
at: java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1152)
at: java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:622)
at: java.lang.Thread.run(Thread.java:748)
caused by: com.sun.jersey.api.client.ClientHandlerException: java.net.ConnectException: Connection timed out: connect
at: com.sun.jersey.client.urlconnection.URLConnectionClientHandler.handle(URLConnectionClientHandler.java:128)
at: com.sun.jersey.api.client.Client.handle(Client.java:457)
at: com.sun.jersey.api.client.WebResource.handle(WebResource.java:568)
at: com.sun.jersey.api.client.WebResource.get(WebResource.java:183)
at: edu.uiuc.fs.party.client.PartyClientImpl.getPartyByUin(PartyClientImpl.java:277)
at: edu.uiuc.fs.jetspeed.security.FSSecurityValveSiteMinder.getParty(FSSecurityValveSiteMinder.java:191)
at: edu.uiuc.fs.jetspeed.security.FSSecurityValveSiteMinder.getUserPrincipal(FSSecurityValveSiteMinder.java:173)
at: edu.uiuc.fs.jetspeed.security.FSSecurityValveSiteMinder.getSubject(FSSecurityValveSiteMinder.java:123)
at: org.apache.jetspeed.security.impl.AbstractSecurityValve.invoke(AbstractSecurityValve.java:117)
at: org.apache.jetspeed.pipeline.JetspeedPipeline$Invocation.invokeNext(JetspeedPipeline.java:242)
... 38 more
caused by: java.net.ConnectException: Connection timed out: connect
at: java.net.DualStackPlainSocketImpl.connect0(Native Method)
at: java.net.DualStackPlainSocketImpl.socketConnect(DualStackPlainSocketImpl.java:79)
at: java.net.AbstractPlainSocketImpl.doConnect(AbstractPlainSocketImpl.java:339)
at: java.net.AbstractPlainSocketImpl.connectToAddress(AbstractPlainSocketImpl.java:200)
at: java.net.AbstractPlainSocketImpl.connect(AbstractPlainSocketImpl.java:182)
at: java.net.PlainSocketImpl.connect(PlainSocketImpl.java:172)
at: java.net.SocksSocketImpl.connect(SocksSocketImpl.java:392)
at: java.net.Socket.connect(Socket.java:598)
at: java.net.Socket.connect(Socket.java:547)
at: sun.net.NetworkClient.doConnect(NetworkClient.java:180)
at: sun.net.www.http.HttpClient.openServer(HttpClient.java:463)
at: sun.net.www.http.HttpClient.openServer(HttpClient.java:558)
at: sun.net.www.http.HttpClient.<init>(HttpClient.java:242)
at: sun.net.www.http.HttpClient.New(HttpClient.java:339)
at: sun.net.www.http.HttpClient.New(HttpClient.java:357)
at: sun.net.www.protocol.http.HttpURLConnection.getNewHttpClient(HttpURLConnection.java:1068)
at: sun.net.www.protocol.http.HttpURLConnection.plainConnect(HttpURLConnection.java:1004)
at: sun.net.www.protocol.http.HttpURLConnection.connect(HttpURLConnection.java:922)
at: sun.net.www.protocol.http.HttpURLConnection.getInputStream(HttpURLConnection.java:1372)
at: java.net.HttpURLConnection.getResponseCode(HttpURLConnection.java:468)
at: com.sun.jersey.client.urlconnection.URLConnectionClientHandler._invoke(URLConnectionClientHandler.java:215)
at: com.sun.jersey.client.urlconnection.URLConnectionClientHandler.handle(URLConnectionClientHandler.java:126)
at: com.sun.jersey.api.client.Client.handle(Client.java:457)
... 46 more
Tomcat-stdout show:
...
11:53:09,713 ERROR [diagnostics]
Id: KQ14K7F4
Time: CDT 2021-06-17 11:53:09:713
Thread: Thread[http-bio-8443-exec-3,5,main]
Internal: false
User: ????????
Server: https://?????.??.????????.???:443
Remote IP address: ###.##.##.##
Local IP address: ###.##.##.##
Context path: /fsportal
Servlet path: /portal
Path info: /fsuser-default-page.psml
Request URI: /fsportal/portal/fsuser-default-page.psml
Request method: GET
Page path: /fsuser-default-page.psml
Error message: java.net.ConnectException: Connection timed out: connect
Exception: org.apache.jetspeed.pipeline.PipelineException: java.net.ConnectException: Connection timed out: connect
at: org.apache.jetspeed.security.impl.AbstractSecurityValve.invoke(AbstractSecurityValve.java:121)
at: org.apache.jetspeed.pipeline.JetspeedPipeline$Invocation.invokeNext(JetspeedPipeline.java:242)
at: org.apache.jetspeed.container.url.impl.PortalURLValveImpl.invoke(PortalURLValveImpl.java:88)
at: org.apache.jetspeed.pipeline.JetspeedPipeline$Invocation.invokeNext(JetspeedPipeline.java:242)
at: org.apache.jetspeed.capabilities.impl.CapabilityValveImpl.invoke(CapabilityValveImpl.java:127)
at: org.apache.jetspeed.pipeline.JetspeedPipeline$Invocation.invokeNext(JetspeedPipeline.java:242)
at: org.apache.jetspeed.pipeline.JetspeedPipeline.invoke(JetspeedPipeline.java:163)
at: org.apache.jetspeed.engine.JetspeedEngine.service(JetspeedEngine.java:225)
at: org.apache.jetspeed.engine.JetspeedServlet.invoke(JetspeedServlet.java:300)
at: org.apache.jetspeed.engine.JetspeedServlet.service(JetspeedServlet.java:318)
at: javax.servlet.http.HttpServlet.service(HttpServlet.java:728)
at: org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:305)
at: org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:210)
at: edu.uiuc.fs.jetspeed.security.SiteMinderPortalFilter.doFilter(SiteMinderPortalFilter.java:175)
at: org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:243)
at: org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:210)
at: org.apache.jetspeed.container.session.PortalSessionValidationFilter.doFilter(PortalSessionValidationFilter.java:92)
at: org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:243)
at: org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:210)
at: org.apache.jetspeed.engine.servlet.XXSUrlAttackFilter.doFilter(XXSUrlAttackFilter.java:52)
at: org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:243)
at: org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:210)
at: org.apache.jetspeed.util.ServletRequestCleanupService.doFilter(ServletRequestCleanupService.java:90)
at: org.apache.jetspeed.util.ServletRequestCleanupFilter.doFilter(ServletRequestCleanupFilter.java:52)
at: org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:243)
at: org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:210)
at: org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:222)
at: org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:123)
at: org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:581)
at: org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:171)
at: org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:99)
at: org.apache.catalina.valves.AccessLogValve.invoke(AccessLogValve.java:936)
at: org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:118)
at: org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:407)
at: org.apache.coyote.http11.AbstractHttp11Processor.process(AbstractHttp11Processor.java:1004)
at: org.apache.coyote.AbstractProtocol$AbstractConnectionHandler.process(AbstractProtocol.java:589)
at: org.apache.tomcat.util.net.JIoEndpoint$SocketProcessor.run(JIoEndpoint.java:312)
at: java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1152)
at: java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:622)
at: java.lang.Thread.run(Thread.java:748)
caused by: com.sun.jersey.api.client.ClientHandlerException: java.net.ConnectException: Connection timed out: connect
at: com.sun.jersey.client.urlconnection.URLConnectionClientHandler.handle(URLConnectionClientHandler.java:128)
at: com.sun.jersey.api.client.Client.handle(Client.java:457)
at: com.sun.jersey.api.client.WebResource.handle(WebResource.java:568)
at: com.sun.jersey.api.client.WebResource.get(WebResource.java:183)
at: edu.uiuc.fs.party.client.PartyClientImpl.getPartyByUin(PartyClientImpl.java:277)
at: edu.uiuc.fs.jetspeed.security.FSSecurityValveSiteMinder.getParty(FSSecurityValveSiteMinder.java:191)
at: edu.uiuc.fs.jetspeed.security.FSSecurityValveSiteMinder.getUserPrincipal(FSSecurityValveSiteMinder.java:173)
at: edu.uiuc.fs.jetspeed.security.FSSecurityValveSiteMinder.getSubject(FSSecurityValveSiteMinder.java:123)
at: org.apache.jetspeed.security.impl.AbstractSecurityValve.invoke(AbstractSecurityValve.java:117)
at: org.apache.jetspeed.pipeline.JetspeedPipeline$Invocation.invokeNext(JetspeedPipeline.java:242)
... 38 more
caused by: java.net.ConnectException: Connection timed out: connect
at: java.net.DualStackPlainSocketImpl.connect0(Native Method)
at: java.net.DualStackPlainSocketImpl.socketConnect(DualStackPlainSocketImpl.java:79)
at: java.net.AbstractPlainSocketImpl.doConnect(AbstractPlainSocketImpl.java:339)
at: java.net.AbstractPlainSocketImpl.connectToAddress(AbstractPlainSocketImpl.java:200)
at: java.net.AbstractPlainSocketImpl.connect(AbstractPlainSocketImpl.java:182)
at: java.net.PlainSocketImpl.connect(PlainSocketImpl.java:172)
at: java.net.SocksSocketImpl.connect(SocksSocketImpl.java:392)
at: java.net.Socket.connect(Socket.java:598)
at: java.net.Socket.connect(Socket.java:547)
at: sun.net.NetworkClient.doConnect(NetworkClient.java:180)
at: sun.net.www.http.HttpClient.openServer(HttpClient.java:463)
at: sun.net.www.http.HttpClient.openServer(HttpClient.java:558)
at: sun.net.www.http.HttpClient.<init>(HttpClient.java:242)
at: sun.net.www.http.HttpClient.New(HttpClient.java:339)
at: sun.net.www.http.HttpClient.New(HttpClient.java:357)
at: sun.net.www.protocol.http.HttpURLConnection.getNewHttpClient(HttpURLConnection.java:1068)
at: sun.net.www.protocol.http.HttpURLConnection.plainConnect(HttpURLConnection.java:1004)
at: sun.net.www.protocol.http.HttpURLConnection.connect(HttpURLConnection.java:922)
at: sun.net.www.protocol.http.HttpURLConnection.getInputStream(HttpURLConnection.java:1372)
at: java.net.HttpURLConnection.getResponseCode(HttpURLConnection.java:468)
at: com.sun.jersey.client.urlconnection.URLConnectionClientHandler._invoke(URLConnectionClientHandler.java:215)
at: com.sun.jersey.client.urlconnection.URLConnectionClientHandler.handle(URLConnectionClientHandler.java:126)
at: com.sun.jersey.api.client.Client.handle(Client.java:457)
... 46 more
http-bio-8443-exec-3, WRITE: TLSv1 Application Data, length = 32
http-bio-8443-exec-3, WRITE: TLSv1 Application Data, length = 304
http-bio-8443-exec-3, setSoTimeout(60000) called
http-bio-8443-exec-9, READ: TLSv1 Application Data, length = 32
http-bio-8443-exec-9, setSoTimeout(60000) called
http-bio-8443-exec-9, READ: TLSv1 Application Data, length = 3984
http-bio-8443-exec-9, WRITE: TLSv1 Application Data, length = 32
http-bio-8443-exec-9, WRITE: TLSv1 Application Data, length = 1168
http-bio-8443-exec-9, setSoTimeout(60000) called
http-bio-8443-exec-8, READ: TLSv1 Application Data, length = 32
http-bio-8443-exec-8, setSoTimeout(60000) called
http-bio-8443-exec-8, READ: TLSv1 Application Data, length = 3152
http-bio-8443-exec-8, WRITE: TLSv1 Application Data, length = 32
http-bio-8443-exec-8, WRITE: TLSv1 Application Data, length = 1472
http-bio-8443-exec-8, setSoTimeout(60000) called
http-bio-8443-exec-6, handling exception: java.net.SocketTimeoutException: Read timed out
http-bio-8443-exec-6, called close()
http-bio-8443-exec-6, called closeInternal(true)
http-bio-8443-exec-6, SEND TLSv1 ALERT: warning, description = close_notify
http-bio-8443-exec-6, WRITE: TLSv1 Alert, length = 32
http-bio-8443-exec-6, called closeSocket(selfInitiated)
http-bio-8443-exec-7, handling exception: java.net.SocketTimeoutException: Read timed out
http-bio-8443-exec-7, called close()
http-bio-8443-exec-7, called closeInternal(true)
http-bio-8443-exec-7, SEND TLSv1 ALERT: warning, description = close_notify
http-bio-8443-exec-7, WRITE: TLSv1 Alert, length = 32
http-bio-8443-exec-7, called closeSocket(selfInitiated)
http-bio-8443-exec-3, handling exception: java.net.SocketTimeoutException: Read timed out
http-bio-8443-exec-3, called close()
http-bio-8443-exec-3, called closeInternal(true)
http-bio-8443-exec-3, SEND TLSv1 ALERT: warning, description = close_notify
http-bio-8443-exec-3, WRITE: TLSv1 Alert, length = 32
http-bio-8443-exec-3, called closeSocket(selfInitiated)
http-bio-8443-exec-9, handling exception: java.net.SocketTimeoutException: Read timed out
http-bio-8443-exec-9, called close()
http-bio-8443-exec-9, called closeInternal(true)
http-bio-8443-exec-9, SEND TLSv1 ALERT: warning, description = close_notify
http-bio-8443-exec-9, WRITE: TLSv1 Alert, length = 32
http-bio-8443-exec-9, called closeSocket(selfInitiated)
http-bio-8443-exec-8, handling exception: java.net.SocketTimeoutException: Read timed out
http-bio-8443-exec-8, called close()
http-bio-8443-exec-8, called closeInternal(true)
http-bio-8443-exec-8, SEND TLSv1 ALERT: warning, description = close_notify
http-bio-8443-exec-8, WRITE: TLSv1 Alert, length = 32
http-bio-8443-exec-8, called closeSocket(selfInitiated)
Allow unsafe renegotiation: false
Allow legacy hello messages: true
Is initial handshake: true
Is secure renegotiation: false
http-bio-8443-Acceptor-0, setSoTimeout(60000) called
Ignoring unsupported cipher suite: TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384 for TLSv1
Ignoring unsupported cipher suite: TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 for TLSv1
Ignoring unsupported cipher suite: TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA384 for TLSv1
Ignoring unsupported cipher suite: TLS_ECDH_RSA_WITH_AES_256_CBC_SHA384 for TLSv1
Ignoring unsupported cipher suite: TLS_DHE_DSS_WITH_AES_256_CBC_SHA256 for TLSv1
Ignoring unsupported cipher suite: TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384 for TLSv1.1
Ignoring unsupported cipher suite: TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 for TLSv1.1
Ignoring unsupported cipher suite: TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA384 for TLSv1.1
Ignoring unsupported cipher suite: TLS_ECDH_RSA_WITH_AES_256_CBC_SHA384 for TLSv1.1
Ignoring unsupported cipher suite: TLS_DHE_DSS_WITH_AES_256_CBC_SHA256 for TLSv1.1
http-bio-8443-exec-5, READ: TLSv1 Handshake, length = 146
check handshake state: client_hello[1]
update handshake state: client_hello[1]
upcoming handshake states: server_hello[2]
*** ClientHello, TLSv1
Is there anyone who has configured jetspeed/Tomcat to use TLSv1.2 and not use the older TLSv1 or TLSv1.1
I need this so my different versions of java can talk.
Thanks for any assistance,
Steven M Nelligan
SENIOR SOFTWARE DEVELOPER
Facilities and Services
Information Technology Services
University of Illinois at Urbana-Champaign
Facilities and Services
1501 S. Oak Street | M/C 800
Champaign, IL 61820
217.244.8097 | other: 217.244.8097 | snelliga@illinois.edu<ma...@illinois.edu>
www.fs.illinois.edu<http://www.fs.illinois.edu/>
[facebook]<https://www.facebook.com/UniversityOfIllinoisFacilitiesServices> [twitter] <https://twitter.com/UofIFS> [instagram] <https://www.instagram.com/uofifs/> [youtube] <https://www.youtube.com/user/UofIFS>
[https://webtools.illinois.edu/webservices/js/ds/signature_logo.png]<http://illinois.edu/>
Under the Illinois Freedom of Information Act any written communication to or from university employees regarding university business is a public record and may be subject to public disclosure.
Re: I am trying to force our environment to use TLSv1.2 as default.
Posted by David S Taylor <da...@bluesunrise.com>.
Looks to me like the connection is timing out, probably because its unreachable. In order to use TLS v1.2 with Java 7, I am using this Zulu version:
zulu7.46.0.11-ca-jdk7.0.302-linux_x64
Your version for windows should support TLS v1.2, but maybe double check that. JVMs with 1.8 and higher should not require any additional configurations.
I see you have the Tomcat configuration setup to use TLS 1.2, that looks correct. Can you test connecting with curl?
> On Jun 17, 2021, at 10:47 AM, Nelligan, Steven M <sn...@illinois.edu> wrote:
>
> I am trying to force our environment to use TLSv1.2 as default.
>
> The environment contains three tomcat servers and one mule server.
> One of the tomcat servers is running Java 11.
> The other two tomcat servers are running Java 7, zulu-7-azure-jdk_7.34.0.5-7.0.242-win_x64.
> Recently, changed the mule server to Java 8.
>
> I’ve changed the portal’s tomcat configurations to read:
> …
> -Dhttps.protocols=TLSv1.2
> -Djdk.tls.client.protocols=TLSv1.2
> -Djavax.net.debug=ssl
> …
> Trying to force TSL 1.2…
>
> The portal server has MS IIS as front end, which redirects to our SSO Server and then re-directs back to the portal attempting to run jetspeed2.
>
> When jetspeed tries to start, I get the following error:
>
> Request Error Diagnostics
>
> Error ID
>
> KQ14K7F4
> Message
> java.net.ConnectException: Connection timed out: connect
> Path
> /fsportal/portal/fsuser-default-page.psml
> User
> ????????
> Click here <> to go back to the previous page.
>
> Server Status
>
> Free Memory (KB)
>
> 6260146
> Total Memory (KB)
> 8388608
>
>
> The Jetspeed2 log file shows:
> 11:53:09,713 handleError ERROR [JetspeedServlet] Request error encountered while processing portal request: java.net.ConnectException: Connection timed out: connect
> org.apache.jetspeed.pipeline.PipelineException: java.net.ConnectException: Connection timed out: connect
> at org.apache.jetspeed.security.impl.AbstractSecurityValve.invoke(AbstractSecurityValve.java:121)
> at org.apache.jetspeed.pipeline.JetspeedPipeline$Invocation.invokeNext(JetspeedPipeline.java:242)
> at org.apache.jetspeed.container.url.impl.PortalURLValveImpl.invoke(PortalURLValveImpl.java:88)
> at org.apache.jetspeed.pipeline.JetspeedPipeline$Invocation.invokeNext(JetspeedPipeline.java:242)
> at org.apache.jetspeed.capabilities.impl.CapabilityValveImpl.invoke(CapabilityValveImpl.java:127)
> at org.apache.jetspeed.pipeline.JetspeedPipeline$Invocation.invokeNext(JetspeedPipeline.java:242)
> at org.apache.jetspeed.pipeline.JetspeedPipeline.invoke(JetspeedPipeline.java:163)
> at org.apache.jetspeed.engine.JetspeedEngine.service(JetspeedEngine.java:225)
> at org.apache.jetspeed.engine.JetspeedServlet.invoke(JetspeedServlet.java:300)
> at org.apache.jetspeed.engine.JetspeedServlet.service(JetspeedServlet.java:318)
> at javax.servlet.http.HttpServlet.service(HttpServlet.java:728)
> at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:305)
> at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:210)
> at edu.uiuc.fs.jetspeed.security.SiteMinderPortalFilter.doFilter(SiteMinderPortalFilter.java:175)
> at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:243)
> at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:210)
> at org.apache.jetspeed.container.session.PortalSessionValidationFilter.doFilter(PortalSessionValidationFilter.java:92)
> at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:243)
> at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:210)
> at org.apache.jetspeed.engine.servlet.XXSUrlAttackFilter.doFilter(XXSUrlAttackFilter.java:52)
> at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:243)
> at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:210)
> at org.apache.jetspeed.util.ServletRequestCleanupService.doFilter(ServletRequestCleanupService.java:90)
> at org.apache.jetspeed.util.ServletRequestCleanupFilter.doFilter(ServletRequestCleanupFilter.java:52)
> at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:243)
> at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:210)
> at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:222)
> at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:123)
> at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:581)
> at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:171)
> at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:99)
> at org.apache.catalina.valves.AccessLogValve.invoke(AccessLogValve.java:936)
> at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:118)
> at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:407)
> at org.apache.coyote.http11.AbstractHttp11Processor.process(AbstractHttp11Processor.java:1004)
> at org.apache.coyote.AbstractProtocol$AbstractConnectionHandler.process(AbstractProtocol.java:589)
> at org.apache.tomcat.util.net.JIoEndpoint$SocketProcessor.run(JIoEndpoint.java:312)
> at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1152)
> at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:622)
> at java.lang.Thread.run(Thread.java:748)
> Caused by: com.sun.jersey.api.client.ClientHandlerException: java.net.ConnectException: Connection timed out: connect
> at com.sun.jersey.client.urlconnection.URLConnectionClientHandler.handle(URLConnectionClientHandler.java:128)
> at com.sun.jersey.api.client.Client.handle(Client.java:457)
> at com.sun.jersey.api.client.WebResource.handle(WebResource.java:568)
> at com.sun.jersey.api.client.WebResource.get(WebResource.java:183)
> at edu.uiuc.fs.party.client.PartyClientImpl.getPartyByUin(PartyClientImpl.java:277)
> at edu.uiuc.fs.jetspeed.security.FSSecurityValveSiteMinder.getParty(FSSecurityValveSiteMinder.java:191)
> at edu.uiuc.fs.jetspeed.security.FSSecurityValveSiteMinder.getUserPrincipal(FSSecurityValveSiteMinder.java:173)
> at edu.uiuc.fs.jetspeed.security.FSSecurityValveSiteMinder.getSubject(FSSecurityValveSiteMinder.java:123)
> at org.apache.jetspeed.security.impl.AbstractSecurityValve.invoke(AbstractSecurityValve.java:117)
> ... 39 more
> Caused by: java.net.ConnectException: Connection timed out: connect
> at java.net.DualStackPlainSocketImpl.connect0(Native Method)
> at java.net.DualStackPlainSocketImpl.socketConnect(DualStackPlainSocketImpl.java:79)
> at java.net.AbstractPlainSocketImpl.doConnect(AbstractPlainSocketImpl.java:339)
> at java.net.AbstractPlainSocketImpl.connectToAddress(AbstractPlainSocketImpl.java:200)
> at java.net.AbstractPlainSocketImpl.connect(AbstractPlainSocketImpl.java:182)
> at java.net.PlainSocketImpl.connect(PlainSocketImpl.java:172)
> at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:392)
> at java.net.Socket.connect(Socket.java:598)
> at java.net.Socket.connect(Socket.java:547)
> at sun.net.NetworkClient.doConnect(NetworkClient.java:180)
> at sun.net.www.http.HttpClient.openServer(HttpClient.java:463)
> at sun.net.www.http.HttpClient.openServer(HttpClient.java:558)
> at sun.net.www.http.HttpClient.<init>(HttpClient.java:242)
> at sun.net.www.http.HttpClient.New(HttpClient.java:339)
> at sun.net.www.http.HttpClient.New(HttpClient.java:357)
> at sun.net.www.protocol.http.HttpURLConnection.getNewHttpClient(HttpURLConnection.java:1068)
> at sun.net.www.protocol.http.HttpURLConnection.plainConnect(HttpURLConnection.java:1004)
> at sun.net.www.protocol.http.HttpURLConnection.connect(HttpURLConnection.java:922)
> at sun.net.www.protocol.http.HttpURLConnection.getInputStream(HttpURLConnection.java:1372)
> at java.net.HttpURLConnection.getResponseCode(HttpURLConnection.java:468)
> at com.sun.jersey.client.urlconnection.URLConnectionClientHandler._invoke(URLConnectionClientHandler.java:215)
> at com.sun.jersey.client.urlconnection.URLConnectionClientHandler.handle(URLConnectionClientHandler.java:126)
> ... 47 more
> 11:53:09,713 writeLog ERROR [diagnostics]
>
> Id: KQ14K7F4
> Time: CDT 2021-06-17 11:53:09:713
> Thread: Thread[http-bio-8443-exec-3,5,main]
> Internal: false
> User: ????????
> Server: https://?????.?????.?????.???:443 <https://?????.?????.?????.???:443>
> Remote IP address: ###.##.##.##
> Local IP address: ###.##.##.##
> Context path: /fsportal
> Servlet path: /portal
> Path info: /fsuser-default-page.psml
> Request URI: /fsportal/portal/fsuser-default-page.psml
> Request method: GET
> Page path: /fsuser-default-page.psml
> Error message: java.net.ConnectException: Connection timed out: connect
> Exception: org.apache.jetspeed.pipeline.PipelineException: java.net.ConnectException: Connection timed out: connect
> at: org.apache.jetspeed.security.impl.AbstractSecurityValve.invoke(AbstractSecurityValve.java:121)
> at: org.apache.jetspeed.pipeline.JetspeedPipeline$Invocation.invokeNext(JetspeedPipeline.java:242)
> at: org.apache.jetspeed.container.url.impl.PortalURLValveImpl.invoke(PortalURLValveImpl.java:88)
> at: org.apache.jetspeed.pipeline.JetspeedPipeline$Invocation.invokeNext(JetspeedPipeline.java:242)
> at: org.apache.jetspeed.capabilities.impl.CapabilityValveImpl.invoke(CapabilityValveImpl.java:127)
> at: org.apache.jetspeed.pipeline.JetspeedPipeline$Invocation.invokeNext(JetspeedPipeline.java:242)
> at: org.apache.jetspeed.pipeline.JetspeedPipeline.invoke(JetspeedPipeline.java:163)
> at: org.apache.jetspeed.engine.JetspeedEngine.service(JetspeedEngine.java:225)
> at: org.apache.jetspeed.engine.JetspeedServlet.invoke(JetspeedServlet.java:300)
> at: org.apache.jetspeed.engine.JetspeedServlet.service(JetspeedServlet.java:318)
> at: javax.servlet.http.HttpServlet.service(HttpServlet.java:728)
> at: org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:305)
> at: org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:210)
> at: edu.uiuc.fs.jetspeed.security.SiteMinderPortalFilter.doFilter(SiteMinderPortalFilter.java:175)
> at: org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:243)
> at: org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:210)
> at: org.apache.jetspeed.container.session.PortalSessionValidationFilter.doFilter(PortalSessionValidationFilter.java:92)
> at: org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:243)
> at: org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:210)
> at: org.apache.jetspeed.engine.servlet.XXSUrlAttackFilter.doFilter(XXSUrlAttackFilter.java:52)
> at: org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:243)
> at: org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:210)
> at: org.apache.jetspeed.util.ServletRequestCleanupService.doFilter(ServletRequestCleanupService.java:90)
> at: org.apache.jetspeed.util.ServletRequestCleanupFilter.doFilter(ServletRequestCleanupFilter.java:52)
> at: org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:243)
> at: org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:210)
> at: org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:222)
> at: org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:123)
> at: org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:581)
> at: org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:171)
> at: org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:99)
> at: org.apache.catalina.valves.AccessLogValve.invoke(AccessLogValve.java:936)
> at: org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:118)
> at: org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:407)
> at: org.apache.coyote.http11.AbstractHttp11Processor.process(AbstractHttp11Processor.java:1004)
> at: org.apache.coyote.AbstractProtocol$AbstractConnectionHandler.process(AbstractProtocol.java:589)
> at: org.apache.tomcat.util.net.JIoEndpoint$SocketProcessor.run(JIoEndpoint.java:312)
> at: java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1152)
> at: java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:622)
> at: java.lang.Thread.run(Thread.java:748)
> caused by: com.sun.jersey.api.client.ClientHandlerException: java.net.ConnectException: Connection timed out: connect
> at: com.sun.jersey.client.urlconnection.URLConnectionClientHandler.handle(URLConnectionClientHandler.java:128)
> at: com.sun.jersey.api.client.Client.handle(Client.java:457)
> at: com.sun.jersey.api.client.WebResource.handle(WebResource.java:568)
> at: com.sun.jersey.api.client.WebResource.get(WebResource.java:183)
> at: edu.uiuc.fs.party.client.PartyClientImpl.getPartyByUin(PartyClientImpl.java:277)
> at: edu.uiuc.fs.jetspeed.security.FSSecurityValveSiteMinder.getParty(FSSecurityValveSiteMinder.java:191)
> at: edu.uiuc.fs.jetspeed.security.FSSecurityValveSiteMinder.getUserPrincipal(FSSecurityValveSiteMinder.java:173)
> at: edu.uiuc.fs.jetspeed.security.FSSecurityValveSiteMinder.getSubject(FSSecurityValveSiteMinder.java:123)
> at: org.apache.jetspeed.security.impl.AbstractSecurityValve.invoke(AbstractSecurityValve.java:117)
> at: org.apache.jetspeed.pipeline.JetspeedPipeline$Invocation.invokeNext(JetspeedPipeline.java:242)
> ... 38 more
> caused by: java.net.ConnectException: Connection timed out: connect
> at: java.net.DualStackPlainSocketImpl.connect0(Native Method)
> at: java.net.DualStackPlainSocketImpl.socketConnect(DualStackPlainSocketImpl.java:79)
> at: java.net.AbstractPlainSocketImpl.doConnect(AbstractPlainSocketImpl.java:339)
> at: java.net.AbstractPlainSocketImpl.connectToAddress(AbstractPlainSocketImpl.java:200)
> at: java.net.AbstractPlainSocketImpl.connect(AbstractPlainSocketImpl.java:182)
> at: java.net.PlainSocketImpl.connect(PlainSocketImpl.java:172)
> at: java.net.SocksSocketImpl.connect(SocksSocketImpl.java:392)
> at: java.net.Socket.connect(Socket.java:598)
> at: java.net.Socket.connect(Socket.java:547)
> at: sun.net.NetworkClient.doConnect(NetworkClient.java:180)
> at: sun.net.www.http.HttpClient.openServer(HttpClient.java:463)
> at: sun.net.www.http.HttpClient.openServer(HttpClient.java:558)
> at: sun.net.www.http.HttpClient.<init>(HttpClient.java:242)
> at: sun.net.www.http.HttpClient.New(HttpClient.java:339)
> at: sun.net.www.http.HttpClient.New(HttpClient.java:357)
> at: sun.net.www.protocol.http.HttpURLConnection.getNewHttpClient(HttpURLConnection.java:1068)
> at: sun.net.www.protocol.http.HttpURLConnection.plainConnect(HttpURLConnection.java:1004)
> at: sun.net.www.protocol.http.HttpURLConnection.connect(HttpURLConnection.java:922)
> at: sun.net.www.protocol.http.HttpURLConnection.getInputStream(HttpURLConnection.java:1372)
> at: java.net.HttpURLConnection.getResponseCode(HttpURLConnection.java:468)
> at: com.sun.jersey.client.urlconnection.URLConnectionClientHandler._invoke(URLConnectionClientHandler.java:215)
> at: com.sun.jersey.client.urlconnection.URLConnectionClientHandler.handle(URLConnectionClientHandler.java:126)
> at: com.sun.jersey.api.client.Client.handle(Client.java:457)
> ... 46 more
>
> Tomcat-stdout show:
> …
> 11:53:09,713 ERROR [diagnostics]
>
> Id: KQ14K7F4
> Time: CDT 2021-06-17 11:53:09:713
> Thread: Thread[http-bio-8443-exec-3,5,main]
> Internal: false
> User: ????????
> Server: https://?????.??.????????.???:443 <https://?????.??.????????.???:443>
> Remote IP address: ###.##.##.##
> Local IP address: ###.##.##.##
> Context path: /fsportal
> Servlet path: /portal
> Path info: /fsuser-default-page.psml
> Request URI: /fsportal/portal/fsuser-default-page.psml
> Request method: GET
> Page path: /fsuser-default-page.psml
> Error message: java.net.ConnectException: Connection timed out: connect
> Exception: org.apache.jetspeed.pipeline.PipelineException: java.net.ConnectException: Connection timed out: connect
> at: org.apache.jetspeed.security.impl.AbstractSecurityValve.invoke(AbstractSecurityValve.java:121)
> at: org.apache.jetspeed.pipeline.JetspeedPipeline$Invocation.invokeNext(JetspeedPipeline.java:242)
> at: org.apache.jetspeed.container.url.impl.PortalURLValveImpl.invoke(PortalURLValveImpl.java:88)
> at: org.apache.jetspeed.pipeline.JetspeedPipeline$Invocation.invokeNext(JetspeedPipeline.java:242)
> at: org.apache.jetspeed.capabilities.impl.CapabilityValveImpl.invoke(CapabilityValveImpl.java:127)
> at: org.apache.jetspeed.pipeline.JetspeedPipeline$Invocation.invokeNext(JetspeedPipeline.java:242)
> at: org.apache.jetspeed.pipeline.JetspeedPipeline.invoke(JetspeedPipeline.java:163)
> at: org.apache.jetspeed.engine.JetspeedEngine.service(JetspeedEngine.java:225)
> at: org.apache.jetspeed.engine.JetspeedServlet.invoke(JetspeedServlet.java:300)
> at: org.apache.jetspeed.engine.JetspeedServlet.service(JetspeedServlet.java:318)
> at: javax.servlet.http.HttpServlet.service(HttpServlet.java:728)
> at: org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:305)
> at: org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:210)
> at: edu.uiuc.fs.jetspeed.security.SiteMinderPortalFilter.doFilter(SiteMinderPortalFilter.java:175)
> at: org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:243)
> at: org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:210)
> at: org.apache.jetspeed.container.session.PortalSessionValidationFilter.doFilter(PortalSessionValidationFilter.java:92)
> at: org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:243)
> at: org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:210)
> at: org.apache.jetspeed.engine.servlet.XXSUrlAttackFilter.doFilter(XXSUrlAttackFilter.java:52)
> at: org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:243)
> at: org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:210)
> at: org.apache.jetspeed.util.ServletRequestCleanupService.doFilter(ServletRequestCleanupService.java:90)
> at: org.apache.jetspeed.util.ServletRequestCleanupFilter.doFilter(ServletRequestCleanupFilter.java:52)
> at: org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:243)
> at: org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:210)
> at: org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:222)
> at: org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:123)
> at: org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:581)
> at: org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:171)
> at: org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:99)
> at: org.apache.catalina.valves.AccessLogValve.invoke(AccessLogValve.java:936)
> at: org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:118)
> at: org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:407)
> at: org.apache.coyote.http11.AbstractHttp11Processor.process(AbstractHttp11Processor.java:1004)
> at: org.apache.coyote.AbstractProtocol$AbstractConnectionHandler.process(AbstractProtocol.java:589)
> at: org.apache.tomcat.util.net.JIoEndpoint$SocketProcessor.run(JIoEndpoint.java:312)
> at: java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1152)
> at: java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:622)
> at: java.lang.Thread.run(Thread.java:748)
> caused by: com.sun.jersey.api.client.ClientHandlerException: java.net.ConnectException: Connection timed out: connect
> at: com.sun.jersey.client.urlconnection.URLConnectionClientHandler.handle(URLConnectionClientHandler.java:128)
> at: com.sun.jersey.api.client.Client.handle(Client.java:457)
> at: com.sun.jersey.api.client.WebResource.handle(WebResource.java:568)
> at: com.sun.jersey.api.client.WebResource.get(WebResource.java:183)
> at: edu.uiuc.fs.party.client.PartyClientImpl.getPartyByUin(PartyClientImpl.java:277)
> at: edu.uiuc.fs.jetspeed.security.FSSecurityValveSiteMinder.getParty(FSSecurityValveSiteMinder.java:191)
> at: edu.uiuc.fs.jetspeed.security.FSSecurityValveSiteMinder.getUserPrincipal(FSSecurityValveSiteMinder.java:173)
> at: edu.uiuc.fs.jetspeed.security.FSSecurityValveSiteMinder.getSubject(FSSecurityValveSiteMinder.java:123)
> at: org.apache.jetspeed.security.impl.AbstractSecurityValve.invoke(AbstractSecurityValve.java:117)
> at: org.apache.jetspeed.pipeline.JetspeedPipeline$Invocation.invokeNext(JetspeedPipeline.java:242)
> ... 38 more
> caused by: java.net.ConnectException: Connection timed out: connect
> at: java.net.DualStackPlainSocketImpl.connect0(Native Method)
> at: java.net.DualStackPlainSocketImpl.socketConnect(DualStackPlainSocketImpl.java:79)
> at: java.net.AbstractPlainSocketImpl.doConnect(AbstractPlainSocketImpl.java:339)
> at: java.net.AbstractPlainSocketImpl.connectToAddress(AbstractPlainSocketImpl.java:200)
> at: java.net.AbstractPlainSocketImpl.connect(AbstractPlainSocketImpl.java:182)
> at: java.net.PlainSocketImpl.connect(PlainSocketImpl.java:172)
> at: java.net.SocksSocketImpl.connect(SocksSocketImpl.java:392)
> at: java.net.Socket.connect(Socket.java:598)
> at: java.net.Socket.connect(Socket.java:547)
> at: sun.net.NetworkClient.doConnect(NetworkClient.java:180)
> at: sun.net.www.http.HttpClient.openServer(HttpClient.java:463)
> at: sun.net.www.http.HttpClient.openServer(HttpClient.java:558)
> at: sun.net.www.http.HttpClient.<init>(HttpClient.java:242)
> at: sun.net.www.http.HttpClient.New(HttpClient.java:339)
> at: sun.net.www.http.HttpClient.New(HttpClient.java:357)
> at: sun.net.www.protocol.http.HttpURLConnection.getNewHttpClient(HttpURLConnection.java:1068)
> at: sun.net.www.protocol.http.HttpURLConnection.plainConnect(HttpURLConnection.java:1004)
> at: sun.net.www.protocol.http.HttpURLConnection.connect(HttpURLConnection.java:922)
> at: sun.net.www.protocol.http.HttpURLConnection.getInputStream(HttpURLConnection.java:1372)
> at: java.net.HttpURLConnection.getResponseCode(HttpURLConnection.java:468)
> at: com.sun.jersey.client.urlconnection.URLConnectionClientHandler._invoke(URLConnectionClientHandler.java:215)
> at: com.sun.jersey.client.urlconnection.URLConnectionClientHandler.handle(URLConnectionClientHandler.java:126)
> at: com.sun.jersey.api.client.Client.handle(Client.java:457)
> ... 46 more
>
> http-bio-8443-exec-3, WRITE: TLSv1 Application Data, length = 32
> http-bio-8443-exec-3, WRITE: TLSv1 Application Data, length = 304
> http-bio-8443-exec-3, setSoTimeout(60000) called
> http-bio-8443-exec-9, READ: TLSv1 Application Data, length = 32
> http-bio-8443-exec-9, setSoTimeout(60000) called
> http-bio-8443-exec-9, READ: TLSv1 Application Data, length = 3984
> http-bio-8443-exec-9, WRITE: TLSv1 Application Data, length = 32
> http-bio-8443-exec-9, WRITE: TLSv1 Application Data, length = 1168
> http-bio-8443-exec-9, setSoTimeout(60000) called
> http-bio-8443-exec-8, READ: TLSv1 Application Data, length = 32
> http-bio-8443-exec-8, setSoTimeout(60000) called
> http-bio-8443-exec-8, READ: TLSv1 Application Data, length = 3152
> http-bio-8443-exec-8, WRITE: TLSv1 Application Data, length = 32
> http-bio-8443-exec-8, WRITE: TLSv1 Application Data, length = 1472
> http-bio-8443-exec-8, setSoTimeout(60000) called
> http-bio-8443-exec-6, handling exception: java.net.SocketTimeoutException: Read timed out
> http-bio-8443-exec-6, called close()
> http-bio-8443-exec-6, called closeInternal(true)
> http-bio-8443-exec-6, SEND TLSv1 ALERT: warning, description = close_notify
> http-bio-8443-exec-6, WRITE: TLSv1 Alert, length = 32
> http-bio-8443-exec-6, called closeSocket(selfInitiated)
> http-bio-8443-exec-7, handling exception: java.net.SocketTimeoutException: Read timed out
> http-bio-8443-exec-7, called close()
> http-bio-8443-exec-7, called closeInternal(true)
> http-bio-8443-exec-7, SEND TLSv1 ALERT: warning, description = close_notify
> http-bio-8443-exec-7, WRITE: TLSv1 Alert, length = 32
> http-bio-8443-exec-7, called closeSocket(selfInitiated)
> http-bio-8443-exec-3, handling exception: java.net.SocketTimeoutException: Read timed out
> http-bio-8443-exec-3, called close()
> http-bio-8443-exec-3, called closeInternal(true)
> http-bio-8443-exec-3, SEND TLSv1 ALERT: warning, description = close_notify
> http-bio-8443-exec-3, WRITE: TLSv1 Alert, length = 32
> http-bio-8443-exec-3, called closeSocket(selfInitiated)
> http-bio-8443-exec-9, handling exception: java.net.SocketTimeoutException: Read timed out
> http-bio-8443-exec-9, called close()
> http-bio-8443-exec-9, called closeInternal(true)
> http-bio-8443-exec-9, SEND TLSv1 ALERT: warning, description = close_notify
> http-bio-8443-exec-9, WRITE: TLSv1 Alert, length = 32
> http-bio-8443-exec-9, called closeSocket(selfInitiated)
> http-bio-8443-exec-8, handling exception: java.net.SocketTimeoutException: Read timed out
> http-bio-8443-exec-8, called close()
> http-bio-8443-exec-8, called closeInternal(true)
> http-bio-8443-exec-8, SEND TLSv1 ALERT: warning, description = close_notify
> http-bio-8443-exec-8, WRITE: TLSv1 Alert, length = 32
> http-bio-8443-exec-8, called closeSocket(selfInitiated)
> Allow unsafe renegotiation: false
> Allow legacy hello messages: true
> Is initial handshake: true
> Is secure renegotiation: false
> http-bio-8443-Acceptor-0, setSoTimeout(60000) called
> Ignoring unsupported cipher suite: TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384 for TLSv1
> Ignoring unsupported cipher suite: TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 for TLSv1
> Ignoring unsupported cipher suite: TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA384 for TLSv1
> Ignoring unsupported cipher suite: TLS_ECDH_RSA_WITH_AES_256_CBC_SHA384 for TLSv1
> Ignoring unsupported cipher suite: TLS_DHE_DSS_WITH_AES_256_CBC_SHA256 for TLSv1
> Ignoring unsupported cipher suite: TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384 for TLSv1.1
> Ignoring unsupported cipher suite: TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 for TLSv1.1
> Ignoring unsupported cipher suite: TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA384 for TLSv1.1
> Ignoring unsupported cipher suite: TLS_ECDH_RSA_WITH_AES_256_CBC_SHA384 for TLSv1.1
> Ignoring unsupported cipher suite: TLS_DHE_DSS_WITH_AES_256_CBC_SHA256 for TLSv1.1
> http-bio-8443-exec-5, READ: TLSv1 Handshake, length = 146
> check handshake state: client_hello[1]
> update handshake state: client_hello[1]
> upcoming handshake states: server_hello[2]
> *** ClientHello, TLSv1
>
>
> Is there anyone who has configured jetspeed/Tomcat to use TLSv1.2 and not use the older TLSv1 or TLSv1.1
>
> I need this so my different versions of java can talk.
>
> Thanks for any assistance,
>
>
> STEVEN M NELLIGAN
> SENIOR SOFTWARE DEVELOPER
>
> Facilities and Services
> Information Technology Services
> University of Illinois at Urbana-Champaign
> Facilities and Services
> 1501 S. Oak Street | M/C 800
> Champaign, IL 61820
> 217.244.8097 | other: 217.244.8097 | snelliga@illinois.edu <ma...@illinois.edu>
> www.fs.illinois.edu <http://www.fs.illinois.edu/>
>
> <https://www.facebook.com/UniversityOfIllinoisFacilitiesServices> <https://twitter.com/UofIFS> <https://www.instagram.com/uofifs/> <https://www.youtube.com/user/UofIFS>
>
> <http://illinois.edu/>
>
> Under the Illinois Freedom of Information Act any written communication to or from university employees regarding university business is a public record and may be subject to public disclosure.