security - JDK 从 1.6 升级到 1.8 后 SSL 握手失败

Question

我在 weblogic10.3.6 服务器集群中的其中一台托管服务器上启用了单向 SSL。早前使用的JAVA版本是1.6。不过后来已经升级到1.8了。我正在运行一个独立的 jar，它使用以下命令在 t3s 协议(protocol)上访问上面提到的托管服务器，以便为某些 EJB 查找创建一些初始上下文。

<Oct 18, 2015 4:41:23 PM IST> <Debug> <SecuritySSL> <BEA-000000> <[Thread[main,5,main]]weblogic.security.SSL.jsseadapter: SSLCONTEXT: addTrustedCA called.>
<Oct 18, 2015 4:41:23 PM IST> <Debug> <Se`enter code here`curitySSL> <BEA-000000> <[Thread[main,5,main]]weblogic.security.SSL.jsseadapter: SSLCONTEXT: addTrustedCA called.>
<Oct 18, 2015 4:41:23 PM IST> <Debug> <SecuritySSL> <BEA-000000> <[Thread[main,5,main]]weblogic.security.SSL.jsseadapter: SSLCONTEXT: addTrustedCA called.>
<Oct 18, 2015 4:41:23 PM IST> <Debug> <SecuritySSL> <BEA-000000> <[Thread[main,5,main]]weblogic.security.SSL.jsseadapter: SSLCONTEXT: addTrustedCA called.>
<Oct 18, 2015 4:41:23 PM IST> <Debug> <SecuritySSL> <BEA-000000> <[Thread[main,5,main]]weblogic.security.SSL.jsseadapter: SSLCONTEXT: addTrustedCA called.>
<Oct 18, 2015 4:41:23 PM IST> <Debug> <SecuritySSL> <BEA-000000> <[Thread[main,5,main]]weblogic.security.SSL.jsseadapter: SSLCONTEXT: addTrustedCA called.>
<Oct 18, 2015 4:41:23 PM IST> <Debug> <SecuritySSL> <BEA-000000> <[Thread[main,5,main]]weblogic.security.SSL.jsseadapter: SSLCONTEXT: addTrustedCA called.>
<Oct 18, 2015 4:41:23 PM IST> <Debug> <SecuritySSL> <BEA-000000> <[Thread[main,5,main]]weblogic.security.SSL.jsseadapter: SSLCONTEXT: addTrustedCA called.>
<Oct 18, 2015 4:41:23 PM IST> <Debug> <SecuritySSL> <BEA-000000> <[Thread[main,5,main]]weblogic.security.SSL.jsseadapter: SSLCONTEXT: addTrustedCA called.>
<Oct 18, 2015 4:41:23 PM IST> <Debug> <SecuritySSL> <BEA-000000> <[Thread[main,5,main]]weblogic.security.SSL.jsseadapter: SSLCONTEXT: addTrustedCA called.>
<Oct 18, 2015 4:41:23 PM IST> <Debug> <SecuritySSL> <BEA-000000> <[Thread[main,5,main]]weblogic.security.SSL.jsseadapter: SSLCONTEXT: addTrustedCA called.>
<Oct 18, 2015 4:41:23 PM IST> <Debug> <SecuritySSL> <BEA-000000> <[Thread[main,5,main]]weblogic.security.SSL.jsseadapter: SSLCONTEXT: addTrustedCA called.>
<Oct 18, 2015 4:41:23 PM IST> <Debug> <SecuritySSL> <BEA-000000> <[Thread[main,5,main]]weblogic.security.SSL.jsseadapter: SSLCONTEXT: addTrustedCA called.>
<Oct 18, 2015 4:41:23 PM IST> <Debug> <SecuritySSL> <BEA-000000> <[Thread[main,5,main]]weblogic.security.SSL.jsseadapter: SSLCONTEXT: addTrustedCA called.>
<Oct 18, 2015 4:41:23 PM IST> <Debug> <SecuritySSL> <BEA-000000> <[Thread[main,5,main]]weblogic.security.SSL.jsseadapter: SSLCONTEXT: addTrustedCA called.>
<Oct 18, 2015 4:41:23 PM IST> <Debug> <SecuritySSL> <BEA-000000> <[Thread[main,5,main]]weblogic.security.SSL.jsseadapter: SSLCONTEXT: addTrustedCA called.>
<Oct 18, 2015 4:41:23 PM IST> <Debug> <SecuritySSL> <BEA-000000> <[Thread[main,5,main]]weblogic.security.SSL.jsseadapter: SSLCONTEXT: addTrustedCA called.>
<Oct 18, 2015 4:41:23 PM IST> <Debug> <SecuritySSL> <BEA-000000> <[Thread[main,5,main]]weblogic.security.SSL.jsseadapter: SSLCONTEXT: addTrustedCA called.>
<Oct 18, 2015 4:41:23 PM IST> <Debug> <SecuritySSL> <BEA-000000> <[Thread[main,5,main]]weblogic.security.SSL.jsseadapter: SSLCONTEXT: addTrustedCA called.>
<Oct 18, 2015 4:41:23 PM IST> <Debug> <SecuritySSL> <BEA-000000> <[Thread[main,5,main]]weblogic.security.SSL.jsseadapter: SSLCONTEXT: addTrustedCA called.>
<Oct 18, 2015 4:41:23 PM IST> <Debug> <SecuritySSL> <BEA-000000> <[Thread[main,5,main]]weblogic.security.SSL.jsseadapter: SSLCONTEXT: addTrustedCA called.>
<Oct 18, 2015 4:41:23 PM IST> <Debug> <SecuritySSL> <BEA-000000> <[Thread[main,5,main]]weblogic.security.SSL.jsseadapter: SSLCONTEXT: addTrustedCA called.>
<Oct 18, 2015 4:41:23 PM IST> <Debug> <SecuritySSL> <BEA-000000> <[Thread[main,5,main]]weblogic.security.SSL.jsseadapter: SSLCONTEXT: addTrustedCA called.>
<Oct 18, 2015 4:41:23 PM IST> <Debug> <SecuritySSL> <BEA-000000> <[Thread[main,5,main]]weblogic.security.SSL.jsseadapter: SSLCONTEXT: addTrustedCA called.>
<Oct 18, 2015 4:41:23 PM IST> <Debug> <SecuritySSL> <BEA-000000> <[Thread[main,5,main]]weblogic.security.SSL.jsseadapter: SSLCONTEXT: addTrustedCA called.>
<Oct 18, 2015 4:41:23 PM IST> <Debug> <SecuritySSL> <BEA-000000> <[Thread[main,5,main]]weblogic.security.SSL.jsseadapter: SSLCONTEXT: addTrustedCA called.>
<Oct 18, 2015 4:41:23 PM IST> <Debug> <SecuritySSL> <BEA-000000> <[Thread[main,5,main]]weblogic.security.SSL.jsseadapter: SSLCONTEXT: addTrustedCA called.>
<Oct 18, 2015 4:41:23 PM IST> <Debug> <SecuritySSL> <BEA-000000> <[Thread[main,5,main]]weblogic.security.SSL.jsseadapter: SSLCONTEXT: addTrustedCA called.>
<Oct 18, 2015 4:41:23 PM IST> <Debug> <SecuritySSL> <BEA-000000> <[Thread[main,5,main]]weblogic.security.SSL.jsseadapter: SSLCONTEXT: addTrustedCA called.>
<Oct 18, 2015 4:41:23 PM IST> <Debug> <SecuritySSL> <BEA-000000> <[Thread[main,5,main]]weblogic.security.SSL.jsseadapter: SSLCONTEXT: addTrustedCA called.>
<Oct 18, 2015 4:41:23 PM IST> <Debug> <SecuritySSL> <BEA-000000> <[Thread[main,5,main]]weblogic.security.SSL.jsseadapter: SSLCONTEXT: addTrustedCA called.>
<Oct 18, 2015 4:41:23 PM IST> <Debug> <SecuritySSL> <BEA-000000> <[Thread[main,5,main]]weblogic.security.SSL.jsseadapter: SSLCONTEXT: addTrustedCA called.>
<Oct 18, 2015 4:41:23 PM IST> <Debug> <SecuritySSL> <BEA-000000> <[Thread[main,5,main]]weblogic.security.SSL.jsseadapter: SSLCONTEXT: addTrustedCA called.>
<Oct 18, 2015 4:41:23 PM IST> <Debug> <SecuritySSL> <BEA-000000> <[Thread[main,5,main]]weblogic.security.SSL.jsseadapter: SSLCONTEXT: addTrustedCA called.>
<Oct 18, 2015 4:41:24 PM IST> <Debug> <SecuritySSL> <BEA-000000> <[Thread[main,5,main]]weblogic.security.SSL.jsseadapter: SSLCONTEXT: Got SSLContext, protocol=TLS, provider=SunJSSE>
<Oct 18, 2015 4:41:25 PM IST> <Debug> <SecuritySSL> <BEA-000000> <[Thread[main,5,main]]weblogic.security.SSL.jsseadapter: SSLENGINE: SSLEngine.setEnabledCipherSuites(String[]): value=TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384,TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384,TLS_RSA_WITH_AES_256_CBC_SHA256,TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA384,TLS_ECDH_RSA_WITH_AES_256_CBC_SHA384,TLS_DHE_RSA_WITH_AES_256_CBC_SHA256,TLS_DHE_DSS_WITH_AES_256_CBC_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA,TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA,TLS_RSA_WITH_AES_256_CBC_SHA,TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA,TLS_ECDH_RSA_WITH_AES_256_CBC_SHA,TLS_DHE_RSA_WITH_AES_256_CBC_SHA,TLS_DHE_DSS_WITH_AES_256_CBC_SHA,TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256,TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256,TLS_RSA_WITH_AES_128_CBC_SHA256,TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA256,TLS_ECDH_RSA_WITH_AES_128_CBC_SHA256,TLS_DHE_RSA_WITH_AES_128_CBC_SHA256,TLS_DHE_DSS_WITH_AES_128_CBC_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA,TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA,TLS_RSA_WITH_AES_128_CBC_SHA,TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA,TLS_ECDH_RSA_WITH_AES_128_CBC_SHA,TLS_DHE_RSA_WITH_AES_128_CBC_SHA,TLS_DHE_DSS_WITH_AES_128_CBC_SHA,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDH_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDH_RSA_WITH_AES_256_GCM_SHA384,TLS_DHE_RSA_WITH_AES_256_GCM_SHA384,TLS_DHE_DSS_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256,TLS_DHE_RSA_WITH_AES_128_GCM_SHA256,TLS_DHE_DSS_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA,TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA,SSL_RSA_WITH_3DES_EDE_CBC_SHA,TLS_ECDH_ECDSA_WITH_3DES_EDE_CBC_SHA,TLS_ECDH_RSA_WITH_3DES_EDE_CBC_SHA,SSL_DHE_RSA_WITH_3DES_EDE_CBC_SHA,SSL_DHE_DSS_WITH_3DES_EDE_CBC_SHA,TLS_EMPTY_RENEGOTIATION_INFO_SCSV.>
<Oct 18, 2015 4:41:25 PM IST> <Debug> <SecuritySSL> <BEA-000000> <[Thread[main,5,main]]weblogic.security.SSL.jsseadapter: SSLENGINE: SSLEngine.setEnabledProtocols(String[]): value=SSLv2Hello,SSLv3,TLSv1,TLSv1.1,TLSv1.2.>
<Oct 18, 2015 4:41:25 PM IST> <Debug> <SecuritySSL> <BEA-000000> <[Thread[main,5,main]]weblogic.security.SSL.jsseadapter: SSLENGINE: SSLEngine.setEnableSessionCreation(boolean): value=true.>
<Oct 18, 2015 4:41:25 PM IST> <Debug> <SecuritySSL> <BEA-000000> <[Thread[main,5,main]]weblogic.security.SSL.jsseadapter: SSLENGINE: SSLEngine.setUseClientMode(boolean): value=true.>
<Oct 18, 2015 4:41:25 PM IST> <Debug> <SecuritySSL> <BEA-000000> <[Thread[main,5,main]]weblogic.security.SSL.jsseadapter: SSLENGINE: SSLEngine.setWantClientAuth(boolean): value=false.>
<Oct 18, 2015 4:41:25 PM IST> <Debug> <SecuritySSL> <BEA-000000> <[Thread[main,5,main]]weblogic.security.SSL.jsseadapter: SSLENGINE: SSLEngine.setNeedClientAuth(boolean): value=false.>
<Oct 18, 2015 4:41:25 PM IST> <Debug> <SecuritySSL> <BEA-000000> <[Thread[main,5,main]]weblogic.security.SSL.jsseadapter: SSLENGINE: SSLEngine.setNeedClientAuth(boolean): value=false.>
<Oct 18, 2015 4:41:25 PM IST> <Debug> <SecuritySSL> <BEA-000000> <[Thread[main,5,main]]weblogic.security.SSL.jsseadapter: SSLENGINE: SSLEngine.setUseClientMode(boolean): value=true.>
<Oct 18, 2015 4:41:25 PM IST> <Debug> <SecuritySSL> <BEA-000000> <[Thread[main,5,main]]weblogic.security.SSL.jsseadapter: SSLENGINE: SSLEngine.setUseClientMode(boolean): value=true.>
<Oct 18, 2015 4:41:25 PM IST> <Debug> <SecuritySSL> <BEA-000000> <[Thread[main,5,main]]weblogic.security.SSL.jsseadapter: SSLENGINE: SSLEngine.wrap(ByteBuffer,ByteBuffer) called: result=Status = OK HandshakeStatus = NEED_UNWRAP
bytesConsumed = 0 bytesProduced = 208.>
<Oct 18, 2015 4:41:25 PM IST> <Debug> <SecuritySSL> <BEA-000000> <[Thread[main,5,main]]weblogic.security.SSL.jsseadapter: SSLENGINE: SSLEngine.unwrap(ByteBuffer,ByteBuffer[]) called: result=Status = BUFFER_UNDERFLOW HandshakeStatus = NEED_UNWRAP
bytesConsumed = 0 bytesProduced = 0.>
<Oct 18, 2015 4:41:25 PM IST> <Debug> <SecuritySSL> <BEA-000000> <[Thread[main,5,main]]weblogic.security.SSL.jsseadapter: SSLENGINE: Exception occurred during SSLEngine.unwrap(ByteBuffer,ByteBuffer[]).
javax.net.ssl.SSLException: Received fatal alert: unexpected_message
        at sun.security.ssl.Alerts.getSSLException(Alerts.java:208)
        at sun.security.ssl.SSLEngineImpl.fatal(SSLEngineImpl.java:1666)
        at sun.security.ssl.SSLEngineImpl.fatal(SSLEngineImpl.java:1634)
        at sun.security.ssl.SSLEngineImpl.recvAlert(SSLEngineImpl.java:1800)
        at sun.security.ssl.SSLEngineImpl.readRecord(SSLEngineImpl.java:1083)
        at sun.security.ssl.SSLEngineImpl.readNetRecord(SSLEngineImpl.java:907)
        at sun.security.ssl.SSLEngineImpl.unwrap(SSLEngineImpl.java:781)
        at javax.net.ssl.SSLEngine.unwrap(SSLEngine.java:664)
        at weblogic.security.SSL.jsseadapter.JaSSLEngine$5.run(JaSSLEngine.java:134)
        at weblogic.security.SSL.jsseadapter.JaSSLEngine.doAction(JaSSLEngine.java:732)
        at weblogic.security.SSL.jsseadapter.JaSSLEngine.unwrap(JaSSLEngine.java:132)
        at weblogic.socket.JSSEFilterImpl.unwrap(JSSEFilterImpl.java:505)
        at weblogic.socket.JSSEFilterImpl.unwrapAndHandleResults(JSSEFilterImpl.java:448)
        at weblogic.socket.JSSEFilterImpl.doHandshake(JSSEFilterImpl.java:80)
        at weblogic.socket.JSSEFilterImpl.doHandshake(JSSEFilterImpl.java:64)
        at weblogic.socket.JSSEFilterImpl.doHandshake(JSSEFilterImpl.java:59)
        at weblogic.socket.JSSEFilterImpl.write(JSSEFilterImpl.java:390)
        at weblogic.socket.JSSESocket$JSSEOutputStream.write(JSSESocket.java:78)
        at java.io.BufferedOutputStream.flushBuffer(BufferedOutputStream.java:82)
        at java.io.BufferedOutputStream.flush(BufferedOutputStream.java:140)
        at java.io.DataOutputStream.flush(DataOutputStream.java:123)
        at weblogic.rjvm.t3.MuxableSocketT3.connect(MuxableSocketT3.java:404)
        at weblogic.rjvm.t3.ConnectionFactoryT3S.createConnection(ConnectionFactoryT3S.java:44)
        at weblogic.rjvm.ConnectionManager.createConnection(ConnectionManager.java:1792)
        at weblogic.rjvm.ConnectionManager.findOrCreateConnection(ConnectionManager.java:1424)
        at weblogic.rjvm.ConnectionManager.bootstrap(ConnectionManager.java:443)
        at weblogic.rjvm.ConnectionManager.bootstrap(ConnectionManager.java:321)
        at weblogic.rjvm.RJVMManager.findOrCreateRemoteInternal(RJVMManager.java:260)
        at weblogic.rjvm.RJVMManager.findOrCreate(RJVMManager.java:197)
        at weblogic.rjvm.RJVMFinder.findOrCreateRemoteServer(RJVMFinder.java:238)
        at weblogic.rjvm.RJVMFinder.findOrCreateInternal(RJVMFinder.java:200)
        at weblogic.rjvm.RJVMFinder.findOrCreate(RJVMFinder.java:170)
        at weblogic.rjvm.ServerURL.findOrCreateRJVM(ServerURL.java:165)
        at weblogic.jndi.WLInitialContextFactoryDelegate.getInitialContext(WLInitialContextFactoryDelegate.java:353)
        at weblogic.jndi.Environment.getContext(Environment.java:315)
        at weblogic.jndi.Environment.getContext(Environment.java:285)
        at weblogic.jndi.WLInitialContextFactory.getInitialContext(WLInitialContextFactory.java:117)
        at javax.naming.spi.NamingManager.getInitialContext(NamingManager.java:684)
        at javax.naming.InitialContext.getDefaultInitCtx(InitialContext.java:313)
        at javax.naming.InitialContext.init(InitialContext.java:244)
        at javax.naming.InitialContext.<init>(InitialContext.java:216)
        at com.telcordia.csw.commonutil.configuration.ConfigurationAccessProvider.initiateInitialContext(ConfigurationAccessProvider.java:141)
        at com.telcordia.csw.commonutil.configuration.ConfigurationAccessProvider.getInitialContext(ConfigurationAccessProvider.java:128)
        at com.telcordia.csw.commonutil.configuration.ConfigurationAccessProvider.initConfigurationAccessor(ConfigurationAccessProvider.java:84)
        at com.telcordia.csw.commonutil.configuration.ConfigurationAccessProvider.getConfigurationAccessor(ConfigurationAccessProvider.java:41)
        at egi.msdp.nim.ldap.sync.TriggerSynchronizationProcess.getMsdpConfig(TriggerSynchronizationProcess.java:1000)
        at egi.msdp.nim.ldap.sync.TriggerSynchronizationProcess.main(TriggerSynchronizationProcess.java:131)
>
<Oct 18, 2015 4:41:25 PM IST> <Debug> <SecuritySSL> <BEA-000000> <[Thread[main,5,main]]weblogic.security.SSL.jsseadapter: SSLENGINE: SSLEngine.closeOutbound(): value=closed.>
<Oct 18, 2015 4:41:25 PM IST> <Debug> <SecuritySSL> <BEA-000000> <[Thread[main,5,main]]weblogic.security.SSL.jsseadapter: SSLENGINE: SSLEngine.wrap(ByteBuffer,ByteBuffer) called: result=Status = CLOSED HandshakeStatus = NEED_UNWRAP
bytesConsumed = 0 bytesProduced = 7.>
[2015/10/18 16:41:25][ERROR][TriggerSynchronizationProcess]:Error while fetching common configuration. Error isUnable to create InitialContext on address t3s://granitemtlb.int.in.nmc.ericsson.se:7299/. Cause: null
com.telcordia.csw.commonutil.configuration.CommonConfigurationException: Unable to create InitialContext on address t3s://granitemtlb.int.in.nmc.ericsson.se:7299/. Cause: null
        at com.telcordia.csw.commonutil.configuration.ConfigurationAccessProvider.initiateInitialContext(ConfigurationAccessProvider.java:143)
        at com.telcordia.csw.commonutil.configuration.ConfigurationAccessProvider.getInitialContext(ConfigurationAccessProvider.java:128)
        at com.telcordia.csw.commonutil.configuration.ConfigurationAccessProvider.initConfigurationAccessor(ConfigurationAccessProvider.java:84)
        at com.telcordia.csw.commonutil.configuration.ConfigurationAccessProvider.getConfigurationAccessor(ConfigurationAccessProvider.java:41)
        at egi.msdp.nim.ldap.sync.TriggerSynchronizationProcess.getMsdpConfig(TriggerSynchronizationProcess.java:1000)
        at egi.msdp.nim.ldap.sync.TriggerSynchronizationProcess.main(TriggerSynchronizationProcess.java:131)
Caused by: javax.naming.CommunicationException [Root exception is java.net.ConnectException: t3s://granitemtlb.int.in.nmc.ericsson.se:7299: Destination unreachable; nested exception is:
        javax.net.ssl.SSLException: Received fatal alert: unexpected_message; No available router to destination]
        at weblogic.jndi.internal.ExceptionTranslator.toNamingException(ExceptionTranslator.java:40)
        at weblogic.jndi.WLInitialContextFactoryDelegate.toNamingException(WLInitialContextFactoryDelegate.java:792)
        at weblogic.jndi.WLInitialContextFactoryDelegate.getInitialContext(WLInitialContextFactoryDelegate.java:368)
        at weblogic.jndi.Environment.getContext(Environment.java:315)
        at weblogic.jndi.Environment.getContext(Environment.java:285)
        at weblogic.jndi.WLInitialContextFactory.getInitialContext(WLInitialContextFactory.java:117)
        at javax.naming.spi.NamingManager.getInitialContext(NamingManager.java:684)
        at javax.naming.InitialContext.getDefaultInitCtx(InitialContext.java:313)
        at javax.naming.InitialContext.init(InitialContext.java:244)
        at javax.naming.InitialContext.<init>(InitialContext.java:216)
        at com.telcordia.csw.commonutil.configuration.ConfigurationAccessProvider.initiateInitialContext(ConfigurationAccessProvider.java:141)
        ... 5 more
Caused by: java.net.ConnectException: t3s://granitemtlb.int.in.nmc.ericsson.se:7299: Destination unreachable; nested exception is:
        javax.net.ssl.SSLException: Received fatal alert: unexpected_message; No available router to destination
        at weblogic.rjvm.RJVMFinder.findOrCreateInternal(RJVMFinder.java:216)
        at weblogic.rjvm.RJVMFinder.findOrCreate(RJVMFinder.java:170)
        at weblogic.rjvm.ServerURL.findOrCreateRJVM(ServerURL.java:165)
        at weblogic.jndi.WLInitialContextFactoryDelegate.getInitialContext(WLInitialContextFactoryDelegate.java:353)
        ... 13 more
Caused by: java.rmi.ConnectException: Destination unreachable; nested exception is:
        javax.net.ssl.SSLException: Received fatal alert: unexpected_message; No available router to destination
        at weblogic.rjvm.ConnectionManager.bootstrap(ConnectionManager.java:470)
        at weblogic.rjvm.ConnectionManager.bootstrap(ConnectionManager.java:321)
        at weblogic.rjvm.RJVMManager.findOrCreateRemoteInternal(RJVMManager.java:260)
        at weblogic.rjvm.RJVMManager.findOrCreate(RJVMManager.java:197)
        at weblogic.rjvm.RJVMFinder.findOrCreateRemoteServer(RJVMFinder.java:238)
        at weblogic.rjvm.RJVMFinder.findOrCreateInternal(RJVMFinder.java:200)
        ... 16 more
[2015/10/18 16:41:25][ERROR][TriggerSynchronizationProcess]:Exception occured. Error is Error while fetching common configuration. Error isUnable to create InitialContext on address t3s://granitemtlb.int.in.nmc.ericsson.se:7299/. Cause: null
java.lang.Exception: Error while fetching common configuration. Error isUnable to create InitialContext on address t3s://granitemtlb.int.in.nmc.ericsson.se:7299/. Cause: null
        at egi.msdp.nim.ldap.sync.TriggerSynchronizationProcess.getMsdpConfig(TriggerSynchronizationProcess.java:1081)
        at egi.msdp.nim.ldap.sync.TriggerSynchronizationProcess.main(TriggerSynchronizationProcess.java:131)
Caused by: com.telcordia.csw.commonutil.configuration.CommonConfigurationException: Unable to create InitialContext on address t3s://granitemtlb.int.in.nmc.ericsson.se:7299/. Cause: null
        at com.telcordia.csw.commonutil.configuration.ConfigurationAccessProvider.initiateInitialContext(ConfigurationAccessProvider.java:143)
        at com.telcordia.csw.commonutil.configuration.ConfigurationAccessProvider.getInitialContext(ConfigurationAccessProvider.java:128)
        at com.telcordia.csw.commonutil.configuration.ConfigurationAccessProvider.initConfigurationAccessor(ConfigurationAccessProvider.java:84)
        at com.telcordia.csw.commonutil.configuration.ConfigurationAccessProvider.getConfigurationAccessor(ConfigurationAccessProvider.java:41)
        at egi.msdp.nim.ldap.sync.TriggerSynchronizationProcess.getMsdpConfig(TriggerSynchronizationProcess.java:1000)
        ... 1 more
Caused by: javax.naming.CommunicationException [Root exception is java.net.ConnectException: t3s://granitemtlb.int.in.nmc.ericsson.se:7299: Destination unreachable; nested exception is:
        javax.net.ssl.SSLException: Received fatal alert: unexpected_message; No available router to destination]
        at weblogic.jndi.internal.ExceptionTranslator.toNamingException(ExceptionTranslator.java:40)
        at weblogic.jndi.WLInitialContextFactoryDelegate.toNamingException(WLInitialContextFactoryDelegate.java:792)
        at weblogic.jndi.WLInitialContextFactoryDelegate.getInitialContext(WLInitialContextFactoryDelegate.java:368)
        at weblogic.jndi.Environment.getContext(Environment.java:315)
        at weblogic.jndi.Environment.getContext(Environment.java:285)
        at weblogic.jndi.WLInitialContextFactory.getInitialContext(WLInitialContextFactory.java:117)
        at javax.naming.spi.NamingManager.getInitialContext(NamingManager.java:684)
        at javax.naming.InitialContext.getDefaultInitCtx(InitialContext.java:313)
        at javax.naming.InitialContext.init(InitialContext.java:244)
        at javax.naming.InitialContext.<init>(InitialContext.java:216)
        at com.telcordia.csw.commonutil.configuration.ConfigurationAccessProvider.initiateInitialContext(ConfigurationAccessProvider.java:141)
        ... 5 more
Caused by: java.net.ConnectException: t3s://granitemtlb.int.in.nmc.ericsson.se:7299: Destination unreachable; nested exception is:
        javax.net.ssl.SSLException: Received fatal alert: unexpected_message; No available router to destination
        at weblogic.rjvm.RJVMFinder.findOrCreateInternal(RJVMFinder.java:216)
        at weblogic.rjvm.RJVMFinder.findOrCreate(RJVMFinder.java:170)
        at weblogic.rjvm.ServerURL.findOrCreateRJVM(ServerURL.java:165)
        at weblogic.jndi.WLInitialContextFactoryDelegate.getInitialContext(WLInitialContextFactoryDelegate.java:353)
        ... 13 more
Caused by: java.rmi.ConnectException: Destination unreachable; nested exception is:
        javax.net.ssl.SSLException: Received fatal alert: unexpected_message; No available router to destination
        at weblogic.rjvm.ConnectionManager.bootstrap(ConnectionManager.java:470)
        at weblogic.rjvm.ConnectionManager.bootstrap(ConnectionManager.java:321)
        at weblogic.rjvm.RJVMManager.findOrCreateRemoteInternal(RJVMManager.java:260)
        at weblogic.rjvm.RJVMManager.findOrCreate(RJVMManager.java:197)
        at weblogic.rjvm.RJVMFinder.findOrCreateRemoteServer(RJVMFinder.java:238)
        at weblogic.rjvm.RJVMFinder.findOrCreateInternal(RJVMFinder.java:200)
        ... 16 more
java.lang.Exception: Error while fetching common configuration. Error isUnable to create InitialContext on address t3s://granitemtlb.int.in.nmc.ericsson.se:7299/. Cause: null
        at egi.msdp.nim.ldap.sync.TriggerSynchronizationProcess.getMsdpConfig(TriggerSynchronizationProcess.java:1081)
        at egi.msdp.nim.ldap.sync.TriggerSynchronizationProcess.main(TriggerSynchronizationProcess.java:131)
Caused by: com.telcordia.csw.commonutil.configuration.CommonConfigurationException: Unable to create InitialContext on address t3s://granitemtlb.int.in.nmc.ericsson.se:7299/. Cause: null
        at com.telcordia.csw.commonutil.configuration.ConfigurationAccessProvider.initiateInitialContext(ConfigurationAccessProvider.java:143)
        at com.telcordia.csw.commonutil.configuration.ConfigurationAccessProvider.getInitialContext(ConfigurationAccessProvider.java:128)
        at com.telcordia.csw.commonutil.configuration.ConfigurationAccessProvider.initConfigurationAccessor(ConfigurationAccessProvider.java:84)
        at com.telcordia.csw.commonutil.configuration.ConfigurationAccessProvider.getConfigurationAccessor(ConfigurationAccessProvider.java:41)
        at egi.msdp.nim.ldap.sync.TriggerSynchronizationProcess.getMsdpConfig(TriggerSynchronizationProcess.java:1000)
        ... 1 more
Caused by: javax.naming.CommunicationException [Root exception is java.net.ConnectException: t3s://granitemtlb.int.in.nmc.ericsson.se:7299: Destination unreachable; nested exception is:
        javax.net.ssl.SSLException: Received fatal alert: unexpected_message; No available router to destination]
        at weblogic.jndi.internal.ExceptionTranslator.toNamingException(ExceptionTranslator.java:40)
        at weblogic.jndi.WLInitialContextFactoryDelegate.toNamingException(WLInitialContextFactoryDelegate.java:792)
        at weblogic.jndi.WLInitialContextFactoryDelegate.getInitialContext(WLInitialContextFactoryDelegate.java:368)
        at weblogic.jndi.Environment.getContext(Environment.java:315)
        at weblogic.jndi.Environment.getContext(Environment.java:285)
        at weblogic.jndi.WLInitialContextFactory.getInitialContext(WLInitialContextFactory.java:117)
        at javax.naming.spi.NamingManager.getInitialContext(NamingManager.java:684)
        at javax.naming.InitialContext.getDefaultInitCtx(InitialContext.java:313)
        at javax.naming.InitialContext.init(InitialContext.java:244)
        at javax.naming.InitialContext.<init>(InitialContext.java:216)
        at com.telcordia.csw.commonutil.configuration.ConfigurationAccessProvider.initiateInitialContext(ConfigurationAccessProvider.java:141)
        ... 5 more
Caused by: java.net.ConnectException: t3s://granitemtlb.int.in.nmc.ericsson.se:7299: Destination unreachable; nested exception is:
        javax.net.ssl.SSLException: Received fatal alert: unexpected_message; No available router to destination
        at weblogic.rjvm.RJVMFinder.findOrCreateInternal(RJVMFinder.java:216)
        at weblogic.rjvm.RJVMFinder.findOrCreate(RJVMFinder.java:170)
        at weblogic.rjvm.ServerURL.findOrCreateRJVM(ServerURL.java:165)
        at weblogic.jndi.WLInitialContextFactoryDelegate.getInitialContext(WLInitialContextFactoryDelegate.java:353)
        ... 13 more
Caused by: java.rmi.ConnectException: Destination unreachable; nested exception is:
        javax.net.ssl.SSLException: Received fatal alert: unexpected_message; No available router to destination
        at weblogic.rjvm.ConnectionManager.bootstrap(ConnectionManager.java:470)
        at weblogic.rjvm.ConnectionManager.bootstrap(ConnectionManager.java:321)
        at weblogic.rjvm.RJVMManager.findOrCreateRemoteInternal(RJVMManager.java:260)
        at weblogic.rjvm.RJVMManager.findOrCreate(RJVMManager.java:197)
        at weblogic.rjvm.RJVMFinder.findOrCreateRemoteServer(RJVMFinder.java:238)
        at weblogic.rjvm.RJVMFinder.findOrCreateInternal(RJVMFinder.java:200)
        ... 16 more





I am new to SSL configuration, Can anyone please suggest, what mistake I am doing and how can this be fixed.

Looking forward for prompt response.

Answer 1

使用openssl调试问题

openssl s_client -connect host:port

“Destination unreachable”看起来像是网络/连接问题，上面的命令应该清楚地显示出来。

检查您的 url、端口和防火墙，尝试:

ping granitemtlb.int.in.nmc.ericsson.se
telnet granitemtlb.int.in.nmc.ericsson.se 7299
openssl s_client -connect granitemtlb.int.in.nmc.ericsson.se:7299

请记住，ping 可能会被阻止，DNS 可能无法正常工作，因此请尝试使用 IP。