SSL communication issue with JDK 1.6.0_19

Hi,
I am facing issue with JDK 1.6.0_19. I have a Java client which communicate with the Server in SSL communication.so, It is able to communicate properly with the JDK <=1.6.0_18 version.But I got handling exception: javax.net.ssl.SSLException: HelloRequest followed by an unexpected handshake message exception when the client is trying to communicate with the server in JDK 1.6.0_19.
We are using mutual authentication.The client and the server both have the signed certificate.The client certificate has to be validated by the server to establish the connection.
I have seen in forum that it is a renegotiation issue.So, if I enable the renegotiation flag by -Dsun.security.ssl.allowUnsafeRenegotiation=true it's working fine.But enabling renegotiation itself is a vulnerability.So, I can't enable renegotiation.
I am using httpclient 4.0 and JSSE in client side and IIS in the server side for this SSL connection.
I am not sure which side client or server initiating the renegotiation?
Please help me out.
I have tried Openssl command from console.
The command is : openssl s_client -connect X.X.X:443 -CAfile "xxxxx" -cert "xxxxxxxx" -key "xxxxxxxxxx" -state -verify 20 here is the output:
Loading 'screen' into random state - done
CONNECTED(00000748)
SSL_connect:before/connect initialization
SSL_connect:SSLv2/v3 write client hello A
SSL_connect:SSLv3 read server hello A
xxxxxxxxxxx.................
verify return:1
xxxxxxxxxxx.................
verify return:1
SSL_connect:SSLv3 read server certificate A
SSL_connect:SSLv3 read server done A
SSL_connect:SSLv3 write client key exchange A
SSL_connect:SSLv3 write change cipher spec A
SSL_connect:SSLv3 write finished A
SSL_connect:SSLv3 flush data
SSL_connect:SSLv3 read finished A
Certificate chain
xxxxxxxxxxx.................
Server certificate
-----BEGIN CERTIFICATE-----
xxxxxxxxxxx.................
-----END CERTIFICATE-----
xxxxxxxxxxx.................
No client certificate CA names sent
SSL handshake has read 1839 bytes and written 392 bytes
New, TLSv1/SSLv3, Cipher is RC4-MD5
Server public key is 1024 bit
Secure Renegotiation IS NOT supported
Compression: NONE
Expansion: NONE
SSL-Session:
    Protocol : TLSv1
    Cipher    : RC4-MD5
    Session-ID: xxxxxxxxxxx
    Session-ID-ctx:
    Master-Key: xxxxxxxxxxx
    Key-Arg   : None
    PSK identity: None
    PSK identity hint: None
    Start Time: 1275564626
    Timeout   : 300 (sec)
    Verify return code: 0 (ok)
read:errno=10054If you see the console output you can see that two statement is missing those are :
SSL_connect:SSLv3 read server certificate request A
SSL_connect:SSLv3 write client certificate ASo, I like to know if this is any clue which is asking for renegotiation.

Thank you for your response.
Yes I have set the particular proerty SSLAlwaysNegoClientCert to True and it is able to establish the ssl conneciton without initiating renegotiation from IIS server side.The property has to be set the metabase.xml file.
Thank you very much once again.
Edited by: arpitak on Jun 23, 2010 2:10 AM

Similar Messages

Any fix for the PC based network printer communication issue with Mavericks?

Any fix for the PC based network printer communication issue with Mavericks?

I just signed up for FIOS and am not experiencing your problem (had enough other ones instead).
Go to mail preferences ~ click on a mail account ~ click on the advanced tab. The only settings that worked for me were: port 110 SSL OFF, authentication: Authenticated POP (APOP). If I remember correctly when I first set this up another window opened and I typed in my password and never had to do that again.
Hope this helps.

SSL certificate issue with WLS 10.3

Hi All,
I am facing this issue with my WLS cluster.
<21-Apr-2010 10:42:00 o'clock BST> <Warning> <Security> <BEA-090482> <BAD_CERTIF
ICATE alert was received from system.core.com - 10.15.135.30.
Check the peer to determine why it rejected the certificate chain (trusted CA co
nfiguration, hostname verification). SSL debug tracing may be required to determ
ine the exact reason the certificate was rejected.>
<21-Apr-2010 10:42:00> <Warning> <Uncaught exception in server handler: javax.ne
t.ssl.SSLKeyException: [Security:090482]BAD_CERTIFICATE alert was received from
system.core.com - 10.15.135.30. Check the peer to determine wh
y it rejected the certificate chain (trusted CA configuration, hostname verifica
tion). SSL debug tracing may be required to determine the exact reason the certi
ficate was rejected.>
Please suggest. I have also tried the below settings.
Node Manager:
-Dweblogic.nodemanager.sslHostNameVerificationEnabled=false
Admin Server:
-Dweblogic.security.SSL.ignoreHostnameVerification=true
Many thanks in advance.

Hi Sandip,
I am facing this issue right after when I have configured the listen address to my system IP in Machine(NodeManager), earlier it was "localhost".
Also I have tried to generate the certificates e.g.
C:\bea\wlserver_10.3\server\bin>java utils.CertGen -cn system.core.com -keyfilepass DemoIdentityPassPhr
ase -certfile mycertificate -keyfile .keystore
Generating a certificate with common name system.core.com and key strength 1024
issued by CA with certificate from C:\bea\WLSERV~1.3\server\lib\CertGenCA.der file and key from C:\bea\WLSERV~1.3\server
\lib\CertGenCAKey.der file
C:\bea\wlserver_10.3\server\bin>java utils.ImportPrivateKey -keystore DemoIdentity.jks -storepass DemoIdentityKeyStorePa
ssPhrase -keyfile .keystore.pem -keyfilepass DemoIdentityPassPhrase -certfile mycertificate.pem -alias demoidentity
No password was specified for the key entry
Key file password will be used
Imported private key .keystore.pem and certificate mycertificate.pem
into a new keystore DemoIdentity.jks of type jks under alias demoidentity
Tried the above but not wokring. Please advise.
Edited by: R Vashi on 21-Apr-2010 03:38

Class loading issue with JDK 1.5

I have recently loaded JDK 1.5 on a laptop that previously had version 1.3. The java code I need to run stopped working and I getget a java.lang.NoClassDefFoundError. I am logging the classpath and I see the jar file with the offending class is there.
I checked my pathing even, since I know java will have a problem with slashes at the beginning of the path when it is called via command line. But all my pathing is absolute.
In the code, I am using C to start up the JVM and then use JNI to communicate between java and C. Because of this complexity, I have searched the forums for problems with JNI and JDK 1.5. I found a case where turning off the JIT compilation kept the JVM from crashing for some users having issues with 1.5, but this approach did not work for me. Not too surprising, though, since this is really a classloading issue.
Where do I go next? Anyone else having this problem?

[http://java.sun.com/javase/6/docs/technotes/guides/security/SunProviders.html]
Reminder: Cryptographic implementations in the Sun JDK are distributed through several different providers
("Sun", "SunJSSE", "SunJCE", "SunRsaSign")
for both historical reasons and by the types of services provided.
General purpose applications SHOULD NOT request cryptographic services from specific providers. That is:
    getInstance("...", "SunJCE"); // not recommended
     vs.
    getInstance("...");            // recommended
Otherwise, applications are tied to specific providers which may not be available on other Java implementations.
They also might not be able to take advantage of available optimized providers (for example, hardware
accelerators via PKCS11 or native OS implementations such as Microsoft's MSCAPI) that have a
higher preference order than the specific requested provider.

Xi3 companion box communication issues with X1 platform

Hopefully someone has had this issue as I haven't been able to find this one during my search.   Subject: Xi3 set top boxes will not connect to the X1 platform on the same outlet(s) that my RNG150 will.   Background: 4 weeks ago a very polite gentleman working with an Xfinity subcontractor arrived at 8am to install our Xfinity package and equipment. 8 hours later he finally left. During that time, there were multiple connectivity issues with the small Xi3 set top boxes. The X1 platform (DVR) and modem were easily set up and tested and worked perfectly (and still do) at the main location in our great room, however, when it came time to connect the other 3 rooms (all located upstairs), there were communication issues. As my wife set up services with Xfinity, she didn't realize we needed these extra set top boxes, so the technitian had to call and add them and only had (2) of the "new" Xi3 boxes, but had an "older" RNG150 set top box in his vehicle so we had him install that one as we didn't mind the older larger box in the rec room. After multiple calls to trouble shoot why these two boxes weren't communicating, he apparently resolved the issue, tested the boxes and we signed off and he left. That evening I went to turn on the bedroom tv and nothing but the red screen of death. Error code RDK 03030. So, I followed the troubleshooting guildlines, rebooting the platform in sequence, several times to make sure I got it right. Still red screen. I checked the other Xi3 box, same issue. Since the rec room tv was still working, I just jacked that box and moved it to our bedroom. BOOM. Full functionality. Only problem was the inability to access our saved programs. So, i've been doing this for the last 4 months. Moving the box from our room to the rec room for our little one to watch cartoons, then back to our room at night. Suffice it to say, my wife is growing tired of this so I put a call into the technician as he wanted to make sure I call him first so the install doesn't look negative on his record. No response. I've been researching this for the last week and have come to the following conclusions. - Possible wire/coax issue.This seemed the most plausible, however, I was able to confirm we have the COMMSCOPE Amp installed and the line to the X1 platform does in fact work based on the fact the older box works on the same line, so if it is some sort of wiring issue its lost at the Xi3 box or perhaps the older box requires a weaker signal to perform? I've also seen many comments suggesting the COMMSCOPE amps are garbage. Thats fine, but if it worked previously, and the older box works, would that still be the culprit?
- Moca issue.I'm not entirely sure how this works, but when checking diagnostics, the grid shows 0's across the matrix. Even with the older box active. I'm at work currently so I cannot post the rest of the diagnostics, can provide that once I get home.- Hardware issue. Even though these boxes worked when the technician installed and tested them, perhaps there is a hardware failure or these boxes are "bad".   Hopefully someone on here can help, I'd prefer not to have to contact customer service, follow all the trouble shooting steps I've perfomed ad nauseum and have a tech come out if possible. However, if it has to happen then so be it. Thanks for your help in advance.

Hopefully someone has had this issue as I haven't been able to find this one during my search.   Subject: Xi3 set top boxes will not connect to the X1 platform on the same outlet(s) that my RNG150 will.   Background: 4 weeks ago a very polite gentleman working with an Xfinity subcontractor arrived at 8am to install our Xfinity package and equipment. 8 hours later he finally left. During that time, there were multiple connectivity issues with the small Xi3 set top boxes. The X1 platform (DVR) and modem were easily set up and tested and worked perfectly (and still do) at the main location in our great room, however, when it came time to connect the other 3 rooms (all located upstairs), there were communication issues. As my wife set up services with Xfinity, she didn't realize we needed these extra set top boxes, so the technitian had to call and add them and only had (2) of the "new" Xi3 boxes, but had an "older" RNG150 set top box in his vehicle so we had him install that one as we didn't mind the older larger box in the rec room. After multiple calls to trouble shoot why these two boxes weren't communicating, he apparently resolved the issue, tested the boxes and we signed off and he left. That evening I went to turn on the bedroom tv and nothing but the red screen of death. Error code RDK 03030. So, I followed the troubleshooting guildlines, rebooting the platform in sequence, several times to make sure I got it right. Still red screen. I checked the other Xi3 box, same issue. Since the rec room tv was still working, I just jacked that box and moved it to our bedroom. BOOM. Full functionality. Only problem was the inability to access our saved programs. So, i've been doing this for the last 4 months. Moving the box from our room to the rec room for our little one to watch cartoons, then back to our room at night. Suffice it to say, my wife is growing tired of this so I put a call into the technician as he wanted to make sure I call him first so the install doesn't look negative on his record. No response. I've been researching this for the last week and have come to the following conclusions. - Possible wire/coax issue.This seemed the most plausible, however, I was able to confirm we have the COMMSCOPE Amp installed and the line to the X1 platform does in fact work based on the fact the older box works on the same line, so if it is some sort of wiring issue its lost at the Xi3 box or perhaps the older box requires a weaker signal to perform? I've also seen many comments suggesting the COMMSCOPE amps are garbage. Thats fine, but if it worked previously, and the older box works, would that still be the culprit?
- Moca issue.I'm not entirely sure how this works, but when checking diagnostics, the grid shows 0's across the matrix. Even with the older box active. I'm at work currently so I cannot post the rest of the diagnostics, can provide that once I get home.- Hardware issue. Even though these boxes worked when the technician installed and tested them, perhaps there is a hardware failure or these boxes are "bad".   Hopefully someone on here can help, I'd prefer not to have to contact customer service, follow all the trouble shooting steps I've perfomed ad nauseum and have a tech come out if possible. However, if it has to happen then so be it. Thanks for your help in advance.

Compatibility issues with JDK 1.6 Beta2

I have a program that stores objects in JE. We are currently using JDK1.5.0_07 and works quite well for our purpose. Using JDK 1.6 Beta2 resulted in silent incompatibilities. Though items are committed into the database, 0000000.jdb never grow more than 2KB in size (we have about 1000 records, usually taking up to 450KB in size). Closing the environment causes exceptions. Has anyone tested with JDK 6 yet?

We know of one Java 1.6 Beta issue resulting from a change in TreeSet, but it didn't cause the sort of problem you describe. We heard the following report from several users a few months ago about a new, transient exception seen from the log cleaner when running against 1.6. Although we added a simple check for nullness to JE to avoid the problem, I believe the TreeSet behavior was backed out of Java 1.6.
We haven't done extensive testing with Java 1.6, but we did run some tests sometime in the spring, and didn't notice any issues then. We know that some folks are at least trying 1.6 -- hopefully they can speak of their experience?
Here's the TreeSet issue as reported to us, and which we fixed in our current code line ...
In JDK1.6, the behavior of TreeSet changed slightly. Calling
TreeSet.remove(null) now throws a NullPointerException. When running
BDB-JE 3.0.12 and JDK 1.6 build 90, the cleaner logs these errors:
<Cleaner name="Cleaner-1"/> caught exception: java.lang.NullPointerException java.lang.NullPointerException
at java.util.TreeMap.getEntry(TreeMap.java:324)
at java.util.TreeMap.remove(TreeMap.java:580)
at java.util.TreeSet.remove(TreeSet.java:259)
at com.sleepycat.je.cleaner.FileSelector.selectFileForCleaning(FileSelector.java:236)
at
com.sleepycat.je.cleaner.FileProcessor.doClean(FileProcessor.java:201)
at
com.sleepycat.je.cleaner.FileProcessor.onWakeup(FileProcessor.java:143)
at com.sleepycat.je.utilint.DaemonThread.run(DaemonThread.java:189)
at java.lang.Thread.run(Thread.java:619)
Continuing
Here is the bug report requesting the change to TreeSet:
http://bugs.sun.com/bugdatabase/view_bug.do?bug_id=5045147
Is there the possibility that your application is hiding some exceptions? You say you see exceptions at Environment.close() time -- what are they? You may want to try the com.sleepycat.je.util.DbPrintLog utility (on a small log file) to see if there are any exception messages stored at the end of the log.
Regards,
Linda

AnyConnect SSL Client issue with Mac OS X

Hello this seems to be a very common issue with AnyConnect working on Mac OS X. A lot of random sites talk about this.
I have a Cisco 2801 running IOS 12.4(22)T (ADV ENT SRV) with AnyConnect 2.3 package installed.
From Windows I can connect without any issues.
From a Mac OS X after providing login credentials the AnyConnect log says its connecting... checking for updates... and then disconnects.
If this does work on Mac OS X what is needed (or needs to be configured) to get this to work properly on Mac OS X?
Thank you!

Hello All,
I recently experienced the same problem when my company upgraded to our entire company from the stone age to a VPN system using the Cisco AnyConnect. At first, I had the same problem as described above. Then my IT guy and I got on the phone with Cisco.
Here is the solution that worked for me. First, our IT department had to specifically load a MAC connection file into the VPN firewall to allow access for MacIntosh computers. Then I redownloaded the latest anyconnect files and updated whatever else through the vpn.yourcompany.com site. Finally, from www.citrix.com/download I downloaded (on the RH side under featured downloads) the appropriate Citrix ICA File.
Everything works fine now. I don't know if this will work for you, but it did the trick for us.

Communication Issues with Creative Webmaster

Hello,
Does anyone have an issue with trying to get a warrenty issue resolved with the Creative support staff? I bought a Creative MP3 last week and the cable was bad. I tried to bring this up to the Creative support staff and there webmaster, Galkowska Agata Ewa, keeps telling me that the warrenty has expired, even though I have proof I just bought the thing last week. I've had three generations of Creative Zen MP3s and this is my first experience with Creative customer service and I'm not impressed. I know I can buy another cable, but it seems that the Creative folks should be true to there policy.
Tom Marsh

Hello Qrtmoon,
If you have the proof of purchase, I'm sure they will honor your warranty. Did you try to get in touch with support over the phone? If not, give them a ring. Sent you a PM with the contact details. Let us know how it goes.

Java Core Dump Issue with jdk 1.4.1

I have an application which is run as a batch process. it handles data ranging from 100 thousand to 3 million. This process was running without any problem with jdk1.3 , but with 1.4.1 i am not able to finish this process , it generates core dump every time and the process stops. The process is asyncronus , it spons two threads to do the processing. Is there any way to handle this ?

JDK 1.4.1 is not supported anymore by Sun. See also http://java.sun.com/products/archive/
"... These products are down-revision products that may have various bugs, Y2000, and possibly security issues associated with them. Sun in no way recommends these products be used in a live, production environment ..."
Try the latest 1.4.2 release. Go to http://java.sun.com/j2se/1.4.2/download.html or even better, try 5.0 at http://java.sun.com/j2se/1.5.0/download.jsp
-jonelo

SCCM 2012 Client Communication Issue with SCCM 2007

My Clients was installed SCCM 2007 client version but somehow those clients reporting to SCCM 2012 Server
Note : My SCCM 2007 Server still active mode . and the SCCM 2007 client IP boundaries was not added into SCCM 2012 server
But still communicating to SCCM 2012 , what is the root cause ?
Best Regard's Krishna

Either, during the client installation the client was manually assigned to the ConfigMgr 2012 site (by specifying the site code), or during the client installation the client was auto assigned to the ConfigMgr 2012 site (that can only happen when there
is an overlap in the boundaries and that doesn't have to be the same type of boundary).
My Blog: http://www.petervanderwoude.nl/
Follow me on twitter: pvanderwoude

Ford mondo communication issue with iPod touch

my ipod touch 5th generation wont work with my ford mondeo, have fitted genuine ford iPod radio harness but still not working, my old iPod Classic works great on the cars system?

Does Ford say it will work with a 5G iPod with iOS 7?
You using s Lightning to 30 pin adopter?
What year is the car system?
Is there a firmware update available for the car system?
Sometimes this works
- Reset the iOS device. Nothing will be lost
Reset iOS device: Hold down the On/Off button and the Home button at the same time for at
least ten seconds, until the Apple logo appears.
- Reset all settings
Go to Settings > General > Reset and tap Reset All Settings.
All your preferences and settings are reset. Information (such as contacts and calendars) and media (such as songs and videos) aren’t affected.
- Restore from backup. See:
iOS: Back up and restore your iOS device with iCloud or iTunes
- Restore to factory settings/new iOS device.

FOCUS issues with JDK 1.4

Just developed my first application in JDK 1.3, i explicitly direct the focus of my fields to some other fields / panels etc , the application is not working as expected in 1.4.
does everyone else have the same problem

Just developed my first application in JDK 1.3, i
explicitly direct the focus of my fields to some other
fields / panels etc , the application is not working
as expected in 1.4.
does everyone else have the same problemNormally it shud not happen , as most of methods/code which are in 1.3
are usually in 1.4 too .But can u be a bit more specific.

CF7 and JDK 1.4.2 - EV SSL Certificate Issue

Let me start off by telling the group that we do not use CF for any of our applications. We are a payments company that hosts a .NET API in IIS that 100's of thousands of customer use. We have one particular customer using CF7 and JDK 1.4.2 who is currently unable to process against our API. About a week ago we upgraded our SSL certificates to EV (Extended Validation) and since that time our once happy customer is now unhappy. I have spent hours working with him, going through FAQs and walk throughs, knowledge bases and forums and have had no luck. Here are the details:
EV Certificate issued by DigiCert (4096-bit).
Customer is on CF7 and JDK 1.4.2.
When he attempts to process against our API with the new certificate he gets 'Connection Failure: Status code unavailable' message from his CF application. He is using cfhttp to post his requests. We found a work around that indicated that the only issue with JDK 1.4.2 was importing the high-bit certificates. Our customer installed JDK 1.6, imported the certificate (and all intermediate certificates) successfully into the cacerts file, but when attempting to list using JDK 1.4.2 is returns an invalid certificate error and still will not work.
Please help as we are currently in a work around state for this customer (not long term) and we have exhausted the resources we have access to for solving this issue.
Thanks in advance to those gurus that reply. I have attached a sample post from our customers logs with non-essential data removed.
I can be reached by phone at 801-341-5620 if anyone feels like reaching out to talk.
- Dave

Dave,
I am having a similar issue with CF7 and PayPal's Reporting API which also uses EV SSL.
I can offer that in my testing, both CF 8 and CF 9 do seem to be able to work when using CFHTTP and EV SSL,
so the only solution I can offer at this time is to make the suggestion to your customer that they need to upgrade
to either CF 8 or CF 9 to get the issue quickly resolved.
I'm still working to see if I can find a solution for CF7 and I've been asking around in the CF community for help, so
if I do find a solution, I'll definitely post it there for you.
Cheers

Issue with SSL in web service.

Hi All,
We are having synchronous web service to proxy scenario in XI. We are trying to send a binary data using the SOAP web service to SAP via XI. Initially, we were posting large binary data using HTTP connection via XI from the SOAP client. The scenario was working without any issues.
Since the data is sensitive changed the web service from HTTP to HTTPS.The interface works without issues when we test it using the SOAP client for testing. When the data is sent using the Dot Net application (the end application) using the same webservice, URL (HTTPS connection) the message errors out. The connection is borken and the message fails. In this scenario, XI does not even receive the message which I can make out looking into the SOAP adapter communication channel.
The interesting fact here is the same Dot Net application is able to connect and send smaller binary data using HTTPS connection.
Could you please let us know if this could be the issue with HTTPS connection on XI side? I doubt it to be an issue on XI side because the adapter does not even receive any message when the scenario fails. But we used some HTTPS monitoring tools and found that the Dot Net Application receives some encrypted response from the server which the application is not able to decrypt and the handshake breaks.
Could you please throw some inputs into this issue.
Thanks,
Manohar.

Hi Manohar
You have posted the same question with two different subject text
anyway follow these SAP notes your problem will be short out
Note 856597 - FAQ: XI 3.0 / PI 7.0 / PI 7.1 SOAP Adapter
https://websmp102.sap-ag.de/~form/handler?_APP=01100107900000000342&_EVENT=REDIR&_NNUM=856597&_NLANG=E
Note 856599 - FAQ: XI 3.0 / PI 7.0 / PI 7.1 Mail Adapter
https://websmp102.sap-ag.de/~form/handler?_APP=01100107900000000342&_EVENT=REDIR&_NNUM=856599&_NLANG=E
Note 870845 - XI 3.0 SOAP adapter SSL client certificate problem
https://websmp130.sap-ag.de/sap(bD1lbiZjPTAwMQ==)/bc/bsp/spn/sapnotes/index2.htm?numm=916664&nlang=EN&smpsrv=https%3a%2f%2fwebsmp102%2esap-ag%2ede
https://websmp130.sap-ag.de/sap(bD1lbiZjPTAwMQ==)/bc/bsp/spn/sapnotes/index2.htm?numm=870845&nlang=EN&smpsrv=https%3a%2f%2fwebsmp102%2esap-ag%2ede
check the OSS Note 554174 & see if it helps
Note 645357 - SAPHTTP: SSL error
https://websmp130.sap-ag.de/sap(bD1lbiZjPTAwMQ==)/bc/bsp/spn/sapnotes/index2.htm?numm=645357&nlang=EN&smpsrv=https%3a%2f%2fwebsmp102%2esap-ag%2ede
https://websmp130.sap-ag.de/sap(bD1lbiZjPTAwMQ==)/bc/bsp/spn/sapnotes/index2.htm?numm=1150980&nlang=EN&smpsrv=https%3a%2f%2fwebsmp102%2esap-ag%2ede
one alternative may be Restart ICM (Internet Communication Manager) .This will solve your HTTP issue
Cheers!!!!
Regards
sandeep
if helpful kindly reward points

Request management service issue with SSL Sites

Hi guys,
I've configured up the request management service, but after start the service on our wfe servers (even before to configure specific web applications), our ssl sites begin to fail and the event viewer start to alert several errors, by the other hand,
sites over 80 port with no SSL works as expected.
I've found some similiar scenarios without a happy ending. Below you can find some of the main errors in event viewer and ULS Logs. In
this post solved a very similar issue using ssl host headers with a unique ip but we are using fqdn certificates so it is not an option for us.
I've already checked the
good posts from Spencer Harbar and He says that is good idea to use host named site collection, but this is not an option for me because we need to use Self Service Creation and mixed authetnication, besides, None of the Technet literature that i've reviewed
says something about don't support path based site collection.
So far, the only way to avoid this errors is not using the service(discouraging finding), These are some errors we got on Event viewer and logs:
Machine 'MACHINENAME (AppPool(_LM_W3SVC_515444293_ROOT))' failed ping validation and has been unavailable since '3/28/2014 3:55:48 PM'. (Just starting the service Event viewer begis to have a bunch of this errors)
03/28/2014 13:34:01.96 w3wp.exe (0x1184)
0x154C SharePoint Foundation
Request Management ai2q3
High Reached maximum number of failed machines based on ping results for this routing group
53c2819c-8216-20f3-68c0-c0a3e55c92d5
03/28/2014 13:34:01.96 w3wp.exe (0x1184)
0x154C SharePoint Foundation
Request Management ai2q4
Medium Unavailable machines based on ping results: MACHINENAME
53c2819c-8216-20f3-68c0-c0a3e55c92d5
03/28/2014 13:34:01.97 w3wp.exe (0x1184)
0x1C2C SharePoint Foundation
Request Management adc7u
Medium Mapping URI from 'https://HOSTNAME:443/Style Library/somos-sura-css/inicio/inicio.css' to 'https://MACHINENAME/Style%20Library/somos-sura-css/inicio/inicio.css'
53c2819c-8217-20f3-68c0-cb2f392c388b
Seems like it tries to find a site with the machine name, not the host name registered in the Alter access mappings (like portal.acme.com) .
I would appreciate some feedback about this. Another posts with similar issues:
http://amolmeshe.blogspot.com/2013/05/sharepoint-2013-request-management.html
http://www.akspug.org/Blog/Post/4/Request-Management-and-Error-8316
Regards,

Hi,
According to your post, my understanding is that you had an issue about the Request management service with SSL sites.
It’s a known issue that the request management service could not work with the SSL site.
We had already reported the issue to the product team, as a workaround, if you want to use the request management service, you can change the https site back to http.
What’s more, the SharePoint 2013 SP1 has been relased, you can install it to check whether it works.
http://support.microsoft.com/kb/2817429/en-us
Thanks & Regards,
Jason
Jason Guo
TechNet Community Support

SSL communication issue with JDK 1.6.0_19

Similar Messages

Maybe you are looking for