Unrecognized SSL message, plaintext connection?
プラットフォームについて: Server および Data Center のみ。この記事は、Server および Data Center プラットフォームのアトラシアン製品にのみ適用されます。
Support for Server* products ended on February 15th 2024. If you are running a Server product, you can visit the Atlassian Server end of support announcement to review your migration options.
*Fisheye および Crucible は除く
症状
atlassian-crowd.log に次のメッセージが表示される。
2014-04-21 11:43:31,503 http-bio-8095-exec-4 INFO [service.soap.client.SecurityServerClientImpl] Existing application token is null, authenticating ...
2014-04-21 11:43:31,517 http-bio-8095-exec-4 ERROR [xfire.transport.http.HttpChannel] javax.net.ssl.SSLException: Unrecognized SSL message, plaintext connection?
2014-04-21 11:43:31,524 http-bio-8095-exec-4 ERROR [crowd.console.action.Login] Failed to connect to the authentication server, please check your crowd.properties
org.springframework.security.authentication.AuthenticationServiceException: Could not invoke service.. Nested exception is org.codehaus.xfire.fault.XFireFault: Couldn't send message.
Caused by: org.codehaus.xfire.XFireRuntimeException: Could not invoke service.. Nested exception is org.codehaus.xfire.fault.XFireFault: Couldn't send message.
Caused by: org.codehaus.xfire.fault.XFireFault: Couldn't send message.
Caused by: javax.net.ssl.SSLException: Unrecognized SSL message, plaintext connection?
原因
Java 7 introduced SNI support which is enabled by default. Certain misconfigured servers send an "Unrecognized Name" warning in the SSL handshake which is ignored by most clients, except for Java.
ソリューション
- Add the following to the JAVA_OPTS environment variable:
-Djsse.enableSNIExtension=false
- Restart your Crowd instance.
最終更新日: 2018 年 12 月 31 日
Powered by Confluence and Scroll Viewport.