Intermittent SSL Exceptions with fatal alert from SOAP calls in Authentication Manager 8.4 Patch 9

[#1]

Article Number

000045118

Applies To

RSA Product Set: RSA SecurID
RSA Product/Service Type: Authentication Manager
RSA Version/Condition: 8.4.0 P1-9
O/S Version: SUSE Linux 12

Issue

The application sometimes randomly failing when running an SDK command. This only occurs intermittently, and even right after the error, other commands are running without any issues. It’s not specific to any command either, and it occurs with almost all of the commands in use. Several commands were tested if these errors happen. These errors will appear whenever SearchPrincipalsIterativeCommand is run.
 

com.rsa.common.SystemException: Unexpected remote exception from SOAP call: javax.net.ssl.SSLException: Received fatal alert: internal_error
 at com.rsa.webservice.SOAPCommandTarget.makeSystemException(SOAPCommandTarget.java:189)
 at com.rsa.webservice.SOAPCommandTarget.remoteMethod(SOAPCommandTarget.java:178)
 at com.rsa.webservice.SOAPCommandTarget.executeCommand(SOAPCommandTarget.java:138)
 at com.rsa.command.DelegatingCommandTarget.executeCommand(DelegatingCommandTarget.java:66)
 at com.rsa.authn.AuthenticatedTargetImpl$1.run(AuthenticatedTargetImpl.java:118)
 at com.rsa.authn.AuthenticatedTargetImpl$1.run(AuthenticatedTargetImpl.java:1)
 at com.rsa.ims.security.spi.SimpleSecurityContextImpl.doAs(SimpleSecurityContextImpl.java:113)
 at com.rsa.security.SecurityContext.doAs(SecurityContext.java:439)
 at com.rsa.authn.AuthenticatedTargetImpl.executeCommand(AuthenticatedTargetImpl.java:122)
 at com.rsa.command.TargetableCommand.execute(TargetableCommand.java:297)
 at com.rsa.registry.GetSiteStatusCommand.execute(GetSiteStatusCommand.java:174)
 at com.rsa.command.ConnectionFactory$ConnectionImpl.executeCommand(ConnectionFactory.java:732)
 at ms.sec.securid.connection.BasicAuthAMConnection.executeCommand(BasicAuthAMConnection.java:67)
 at ms.sec.securid.connection.CommandRunner.execute(CommandRunner.java:62)
 at ms.sec.securid.connection.AuthenticationManagerServerContext.execute(AuthenticationManagerServerContext.java:58)
 at ms.sec.securid.connection.ServerContextTest.test2(ServerContextTest.java:90)
 at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
 at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
 at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
 at java.lang.reflect.Method.invoke(Method.java:498)
 at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:50)
 at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
 at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:47)
 at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
 at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
 at org.junit.rules.ExpectedException$ExpectedExceptionStatement.evaluate(ExpectedException.java:239)
 at org.junit.rules.RunRules.evaluate(RunRules.java:20)
 at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:325)
 at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:78)
 at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:57)
 at org.junit.runners.ParentRunner$3.run(ParentRunner.java:290)
 at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:71)
 at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:288)
 at org.junit.runners.ParentRunner.access$000(ParentRunner.java:58)
 at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:268)
 at org.junit.runners.ParentRunner.run(ParentRunner.java:363)
 at org.junit.runner.JUnitCore.run(JUnitCore.java:137)
 at com.intellij.junit4.JUnit4IdeaTestRunner.startRunnerWithArgs(JUnit4IdeaTestRunner.java:68)
 at com.intellij.rt.execution.junit.IdeaTestRunner$Repeater.startRunnerWithArgs(IdeaTestRunner.java:47)
 at com.intellij.rt.execution.junit.JUnitStarter.prepareStreamsAndStart(JUnitStarter.java:242)
 at com.intellij.rt.execution.junit.JUnitStarter.main(JUnitStarter.java:70)
 Caused by: javax.net.ssl.SSLException: Received fatal alert: internal_error
 at sun.security.ssl.Alerts.getSSLException(Alerts.java:208)
 at sun.security.ssl.Alerts.getSSLException(Alerts.java:154)
 at sun.security.ssl.SSLSocketImpl.recvAlert(SSLSocketImpl.java:2020)
 at sun.security.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:1127)
 at sun.security.ssl.SSLSocketImpl.performInitialHandshake(SSLSocketImpl.java:1367)
 at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1395)
 at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1379)
 at org.apache.axis.components.net.JSSESocketFactory.create(JSSESocketFactory.java:186)
 at org.apache.axis.transport.http.HTTPSender.getSocket(HTTPSender.java:191)
 at org.apache.axis.transport.http.HTTPSender.writeToSocket(HTTPSender.java:404)
 at org.apache.axis.transport.http.HTTPSender.invoke(HTTPSender.java:138)
 at org.apache.axis.strategies.InvocationStrategy.visit(InvocationStrategy.java:32)
 at org.apache.axis.SimpleChain.doVisiting(SimpleChain.java:118)
 at org.apache.axis.SimpleChain.invoke(SimpleChain.java:83)
 at org.apache.axis.client.AxisClient.invoke(AxisClient.java:165)
 at org.apache.axis.client.Call.invokeEngine(Call.java:2784)
 at org.apache.axis.client.Call.invoke(Call.java:2767)
 at org.apache.axis.client.Call.invoke(Call.java:2443)
 at org.apache.axis.client.Call.invoke(Call.java:2366)
 at org.apache.axis.client.Call.invoke(Call.java:1812)
 at com.rsa.webservice.SOAPCommandTarget.remoteMethod(SOAPCommandTarget.java:170)
 ... 39 more

The above errors do not appear in AM 8.3  and occur only in AM 8.4 patch 1 -9.

Resolution

A hotfix is available with RSA Customer Support. Replacing the new sslj-6.2.7.jar file resolves the issue. This issue has been resolved in patch 3 for Authentication Manager 8.5.

Contact RSA Customer Support to obtain the hotfix for the defect AM-37058.