NetApp Community Update
This site will enter Read Only mode on July 23 as we prepare to move to a new platform.
You will still be able to view content, but posting and replying will be temporarily disabled.
To learn more, please review the information in this blog post.

Software Development Kit (SDK) and API Discussions

8.3.1 SSLHandshakeException

michael_england
3,675 Views

I'm running into a problem after upgrading to 8.3.1 where my API code (java based) is getting an SSL Handshake Exception as follows:

 

javax.net.ssl.SSLException: Connection has been shutdown: javax.net.ssl.SSLHandshakeException: Remote host closed connection during handshake

 

I had a look at the available connections which now has SSLv3 disabled.  I enabled this and that allowed the 'old' system manager to connect again (not that it's required) but not my API code.

 

::*> system services web show

 

External Web Services: true

             HTTP Port: 80

            HTTPs Port: 443

         TLSv1 Enabled: true

         SSLv3 Enabled: false

SSL FIPS 140-2 Enabled: false

       Protocol Status: online

 

I've also checked my certificates for any that have expired, also seems fine.

 

Anyone with a solution?

1 REPLY 1

michael_england
3,612 Views

In case someone else has this problem I did two things to solve it:

1) Upgrade to managedontap-5.4.jar

2) Enabled the server certificate.  I'm not sure why this was disabled...

 

lab-cluster1::> security ssl show
               Serial                                         Server  Client
Vserver   Number Common Name             Enabled Enabled
--------- ------ --------------------------------------- ------- -------
lab-cluster1
          86B28BF4
                 lab-labcluster.cert                     true    false
Certificate Authority: eac-labcluster.cert
 
lab-fs1
          -      -                                       false   false
Certificate Authority: -
 
lab-vm1
          -      -                                       false   false
Certificate Authority: -
 
3 entries were displayed.
 
lab-cluster1::> security ssl modify -vserver lab-fs1 -server-enabled true

 

Public