IZ59836: CORRUPTED SSL HEADER/DATA IS READ ON A SSL SOCKET, IF SOCKET TIMEOUTEXCEPTION OCCURRED DURING THE PREVIOUS READ

APAR status

• Closed as program error.

Error description

• Error Message: Got error: "javax.net.ssl.SSLException:
  Unsupported record version Unknown 66.123".
  .
  Stack Trace: javax.net.ssl.SSLProtocolException: Bad InputRecord
  size, count = 41412, buf.length = 16665
          at com.ibm.jsse2.a.b(a.java:186)
          at com.ibm.jsse2.a.a(a.java:167)
          at com.ibm.jsse2.jc.a(jc.java:325)
          at com.ibm.jsse2.jc.a(jc.java:554)
          at com.ibm.jsse2.e.read(e.java:16)
          at java.io.InputStream.read(InputStream.java:113)
          at xxx.run(xxx.java:86)
          at java.lang.Thread.run(Thread.java:810)
  .
  

Local fix

Problem summary

• Corrupted SSL header/data is read on a SSL Socket, if
  SocketTimeoutException occurred during the previous read on the
  socket. This is the Sun bug:
  http://bugs.sun.com/bugdatabase/view_bug.do?bug_id=4836493.  Fix
  to be integrated into JSSE2.
  

Problem conclusion

• This defect will be fixed in:
  6.0.0 SR7
  5.0.0 SR11
  1.4.2 SR14
  .
  Fixed in ibmjsse2.jar build 9/1/09. Hursley Defect 155545 Tivoli
  APAR IZ59215
  .
  To obtain the fix:
  Install build 20090930 or later
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

  IZ59831

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  JAVA 5 SECURITY

• Fixed component ID

  620500125

Applicable component levels

• R500 PSN

     UP