Unable to make SSL connection to the RL with error SSL23_GET_SERVER_HELLO

  • 7009223
  • 22-Aug-2011
  • 26-Apr-2012

Environment

Novell Identity Manager - Remote Loader
Novell Identity Manager 4.x
Novell Identity Manager 3.6.x
Novell Identity Manager 3.5.x

Situation

SSL connection between the IDM engine and Remote loader fails with the following errors :

Remote loader trace : java.io.IOException: Error during SSL handshake
Engine side trace      : 

<status level="error" type="remoteloader">java.io.IOException: SSL handshake failed, SSL_ERROR_SYSCALL, error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol

at com.novell.nds.ntls.NTLSSocket.SSL_connect(Native Method)

at com.novell.nds.ntls.NTLSSocket.connect(NTLSSocket.java:240)

at java.net.Socket.connect(Unknown Source)

at com.novell.nds.ntls.NTLSSocket.<init>(NTLSSocket.java:196)

at com.novell.nds.ntls.NTLSSocket.<init>(NTLSSocket.java:104)

at com.novell.nds.dirxml.driver.ssl.ntls.NTLSKmoFactory.createSocket(NTLSKmoFactory.java:149)

at com.novell.nds.dirxml.remote.SocketStream.connect(SocketStream.java:511)

at com.novell.nds.dirxml.remote.Connection.connectStream(Connection.java:694)

at com.novell.nds.dirxml.remote.Connection.connect(Connection.java:379)

at com.novell.nds.dirxml.remote.driver.PublicationShimImpl.start(PublicationShimImpl.java:113)

at com.novell.nds.dirxml.engine.Publisher.run(Publisher.java:519)

at java.lang.Thread.run(Unknown Source)

</status>

Resolution

Ensure in iManager that the remote loader configuration parameters are all specified in lower case
For Eg: hostname=1.2.3.4 port=8090 kmo=xxx



Additional Information

While trying to correct the case of the parameters to be all lowercase, iManager may not let you change it since it ignores the case of the parameters. So it may seem it took the change, however the case change will not be committed to eDirectory. So for eg: to change the case of PORT=8090 to port=8090, follow the below steps.

a) Change the case and parameter name from PORT=8090 to port1=8090 and save the changes
b) Change the parameter name from port1=8090 to port=8090 and save the changes