Loading...
Loading...
The remote mccli commands fail to connect to Management Console Service (MCS) after upgrade to Java higher than 1.8.0_481 version on the remote server.Working version of Java on remote mccli server: root@remote-linux:~/>: java -version openjdk version "1.8.0_472" OpenJDK Runtime Environment (build 1.8.0_472-b08) OpenJDK 64-Bit Server VM (build 25.472-b08, mixed mode) root@remote-linux:~/>: Once upgrade the Java version higher than 1.8.0_481: root@remote-linux:~/>: java -version openjdk version "1.8.0_492" OpenJDK Runtime Environment (build 1.8.0_492-b09) OpenJDK 64-Bit Server VM (build 25.492-b09, mixed mode) root@remote-linux:~/>: root@remote-linux:~/>: ./mccli server show-prop 1,23996,CLI failed to connect to MCS. Attribute Value --------- ------------------------------------------------------------------------------------------------------------------------------------------------- reason FIPS 140-2 mode is not supported on Java 7. Please install supported version of Java on the client machine, or turn off this mode on the server. option non-JRMP server at remote endpoint root@remote-linux:~/>: The /usr/local/avamar/var/mc/server_log/mcserver.log.0 shows: javax.net.ssl.SSLException: Fatal Alert received: Certificate Unknown at com.rsa.sslj.x.aI.a(Unknown Source) at com.rsa.sslj.x.aI.a(Unknown Source) at com.rsa.sslj.x.aI.a(Unknown Source) at com.rsa.sslj.x.ap.c(Unknown Source) at com.rsa.sslj.x.ap.b(Unknown Source) at com.rsa.sslj.x.ap.b(Unknown Source) at com.rsa.sslj.x.al.read(Unknown Source) at java.io.BufferedInputStream.fill(BufferedInputStream.java:246) at java.io.BufferedInputStream.read(BufferedInputStream.java:265) at java.io.DataInputStream.readInt(DataInputStream.java:387) at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run0(TCPTransport.java:727) at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.lambda$run$0(TCPTransport.java:688) at java.security.AccessController.doPrivileged(Native Method) at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run(TCPTransport.java:687) at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149) at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624) at java.lang.Thread.run(Thread.java:750) 05/07-13:38:05.00969 [RMI TCP Connection(504846)-192.168.1.113#10954236] sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run0 FINE: RMI TCP Connection(504846)-192.168.1.113: terminated with exception: javax.net.ssl.SSLException: Fatal Alert received: Certificate Unknown at com.rsa.sslj.x.aI.a(Unknown Source) at com.rsa.sslj.x.aI.a(Unknown Source) at com.rsa.sslj.x.aI.a(Unknown Source) at com.rsa.sslj.x.ap.c(Unknown Source) at com.rsa.sslj.x.ap.b(Unknown Source) at com.rsa.sslj.x.ap.b(Unknown Source) at com.rsa.sslj.x.al.read(Unknown Source) at java.io.BufferedInputStream.fill(BufferedInputStream.java:246) at java.io.BufferedInputStream.read(BufferedInputStream.java:265) at java.io.DataInputStream.readInt(DataInputStream.java:387) at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run0(TCPTransport.java:727) at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.lambda$run$0(TCPTransport.java:688) at java.security.AccessController.doPrivileged(Native Method) at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run(TCPTransport.java:687) at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149) at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624) at java.lang.Thread.run(Thread.java:750) 05/07-13:38:06.00011 [RMI TCP Connection(504847)-192.168.1.113#10954236] sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run0 FINE: RMI TCP Connection(504847)-192.168.1.113: terminated with exception: javax.net.ssl.SSLException: Fatal Alert received: Certificate Unknown at com.rsa.sslj.x.aI.a(Unknown Source) at com.rsa.sslj.x.aI.a(Unknown Source) at com.rsa.sslj.x.aI.a(Unknown Source) at com.rsa.sslj.x.ap.c(Unknown Source) at com.rsa.sslj.x.ap.b(Unknown Source) at com.rsa.sslj.x.ap.b(Unknown Source) at com.rsa.sslj.x.al.read(Unknown Source) at java.io.BufferedInputStream.fill(BufferedInputStream.java:246) at java.io.BufferedInputStream.read(BufferedInputStream.java:265) at java.io.DataInputStream.readInt(DataInputStream.java:387) at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run0(TCPTransport.java:727) at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.lambda$run$0(TCPTransport.java:688) at java.security.AccessController.doPrivileged(Native Method) at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run(TCPTransport.java:687) at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149) at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624) at java.lang.Thread.run(Thread.java:750) 05/07-13:38:06.00094 [RMI TCP Connection(504848)-192.168.1.113#10954236] sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run0 FINE: RMI TCP Connection(504848)-192.168.1.113: terminated with exception: javax.net.ssl.SSLException: Fatal Alert received: Certificate Unknown at com.rsa.sslj.x.aI.a(Unknown Source) at com.rsa.sslj.x.aI.a(Unknown Source) at com.rsa.sslj.x.aI.a(Unknown Source) at com.rsa.sslj.x.ap.c(Unknown Source) at com.rsa.sslj.x.ap.b(Unknown Source) at com.rsa.sslj.x.ap.b(Unknown Source) at com.rsa.sslj.x.al.read(Unknown Source) at java.io.BufferedInputStream.fill(BufferedInputStream.java:246) at java.io.BufferedInputStream.read(BufferedInputStream.java:265) at java.io.DataInputStream.readInt(DataInputStream.java:387) at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run0(TCPTransport.java:727) at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.lambda$run$0(TCPTransport.java:688) at java.security.AccessController.doPrivileged(Native Method) at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run(TCPTransport.java:687) at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149) at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624) at java.lang.Thread.run(Thread.java:750) 05/07-13:38:06.00127 [RMI TCP Connection(504849)-192.168.1.113#10954236] sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run0 FINE: RMI TCP Connection(504849)-192.168.1.113: terminated with exception: javax.net.ssl.SSLException: Fatal Alert received: Certificate Unknown at com.rsa.sslj.x.aI.a(Unknown Source) at com.rsa.sslj.x.aI.a(Unknown Source) at com.rsa.sslj.x.aI.a(Unknown Source) at com.rsa.sslj.x.ap.c(Unknown Source) at com.rsa.sslj.x.ap.b(Unknown Source) at com.rsa.sslj.x.ap.b(Unknown Source) at com.rsa.sslj.x.al.read(Unknown Source) at java.io.BufferedInputStream.fill(BufferedInputStream.java:246) at java.io.BufferedInputStream.read(BufferedInputStream.java:265) at java.io.DataInputStream.readInt(DataInputStream.java:387) at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run0(TCPTransport.java:727) at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.lambda$run$0(TCPTransport.java:688) at java.security.AccessController.doPrivileged(Native Method) at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run(TCPTransport.java:687) at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149) at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624) at java.lang.Thread.run(Thread.java:750) 05/07-13:38:06.00156 [RMI TCP Connection(504850)-192.168.1.113#10954236] sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run0 FINE: RMI TCP Connection(504850)-192.168.1.113: terminated with exception: javax.net.ssl.SSLException: Fatal Alert received: Certificate Unknown at com.rsa.sslj.x.aI.a(Unknown Source) at com.rsa.sslj.x.aI.a(Unknown Source) at com.rsa.sslj.x.aI.a(Unknown Source) at com.rsa.sslj.x.ap.c(Unknown Source) at com.rsa.sslj.x.ap.b(Unknown Source) at com.rsa.sslj.x.ap.b(Unknown Source) at com.rsa.sslj.x.al.read(Unknown Source) at java.io.BufferedInputStream.fill(BufferedInputStream.java:246) at java.io.BufferedInputStream.read(BufferedInputStream.java:265) at java.io.DataInputStream.readInt(DataInputStream.java:387) at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run0(TCPTransport.java:727) at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.lambda$run$0(TCPTransport.java:688) at java.security.AccessController.doPrivileged(Native Method) at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run(TCPTransport.java:687) at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149) at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624) at java.lang.Thread.run(Thread.java:750) 05/07-13:38:06.00174 [Web Services monitor thread#186] com.avamar.mc.dpn.ExecuteCommand.createTimer FINE: Creating timer for com.avamar.mc.mon.WebServicesMonitor 05/07-13:38:06.00216 [RMI TCP Connection(504851)-192.168.1.113#10954236] sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run0 FINE: RMI TCP Connection(504851)-192.168.1.113: terminated with exception: javax.net.ssl.SSLException: Fatal Alert received: Certificate Unknown at com.rsa.sslj.x.aI.a(Unknown Source) at com.rsa.sslj.x.aI.a(Unknown Source) at com.rsa.sslj.x.aI.a(Unknown Source) at com.rsa.sslj.x.ap.c(Unknown Source) at com.rsa.sslj.x.ap.b(Unknown Source) at com.rsa.sslj.x.ap.b(Unknown Source) at com.rsa.sslj.x.al.read(Unknown Source) at java.io.BufferedInputStream.fill(BufferedInputStream.java:246) at java.io.BufferedInputStream.read(BufferedInputStream.java:265) at java.io.DataInputStream.readInt(DataInputStream.java:387) at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run0(TCPTransport.java:727) at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.lambda$run$0(TCPTransport.java:688) at java.security.AccessController.doPrivileged(Native Method) at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run(TCPTransport.java:687) at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149) at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624) at java.lang.Thread.run(Thread.java:750) 05/07-13:38:06.00220 [RMI TCP Connection(504852)-192.168.1.113#10954236] sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run0 FINE: RMI TCP Connection(504852)-192.168.1.113: terminated with exception: javax.net.ssl.SSLException: Ciphertext is too large in received TLS record at com.rsa.sslj.x.aI.b(Unknown Source) at com.rsa.sslj.x.aI.a(Unknown Source) at com.rsa.sslj.x.aI.a(Unknown Source) at com.rsa.sslj.x.ap.c(Unknown Source) at com.rsa.sslj.x.ap.b(Unknown Source) at com.rsa.sslj.x.ap.b(Unknown Source) at com.rsa.sslj.x.al.read(Unknown Source) at java.io.BufferedInputStream.fill(BufferedInputStream.java:246) at java.io.BufferedInputStream.read(BufferedInputStream.java:265) at java.io.DataInputStream.readInt(DataInputStream.java:387) at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run0(TCPTransport.java:727) at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.lambda$run$0(TCPTransport.java:688) at java.security.AccessController.doPrivileged(Native Method) at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run(TCPTransport.java:687)
Changes introduced in Java versions higher than 1.8.0_481 affect this functionality. Engineering is investigating this issue.
Follow the guidance in article Avamar: Unable to Launch Avamar Administrator JNLP with Java 1.8.0_481 to implement the workaround for setting the parameter rmi_over_ssl to false in the file /usr/local/avamar/var/mc/server_data/mcserver.xml, and then restart the Management Console Service.
Click on a version to see all relevant bugs
Dell Integration
Learn more about where this data comes from
BugZero Plan
Streamline upgrades with automated vendor bug scrubs
BugZero Prevent
Wish you caught this bug sooner? Get proactive today.