Avamar: Remote Mccli Command Fails After Upgrade to Java Higher Than 1.8.0_481
Summary: This article explains the failure of remote mccli commands after upgrading Java to version 1.8.0_492 and provides a workaround to restore functionality.
This article applies to
This article does not apply to
This article is not tied to any specific product.
Not all product versions are identified in this article.
Symptoms
The remote mccli commands fail to connect to MCS after upgrade to Java higher than 1.8.0_481 version on the remote server.
Working version of Java on remote mccli server:
root@remote-linux:~/>: java -version openjdk version "1.8.0_472" OpenJDK Runtime Environment (build 1.8.0_472-b08) OpenJDK 64-Bit Server VM (build 25.472-b08, mixed mode) root@remote-linux:~/>:
Once upgrade the Java version higher than 1.8.0_481:
root@remote-linux:~/>: java -version openjdk version "1.8.0_492" OpenJDK Runtime Environment (build 1.8.0_492-b09) OpenJDK 64-Bit Server VM (build 25.492-b09, mixed mode) root@remote-linux:~/>:
root@remote-linux:~/>: ./mccli server show-prop 1,23996,CLI failed to connect to MCS. Attribute Value --------- ------------------------------------------------------------------------------------------------------------------------------------------------- reason FIPS 140-2 mode is not supported on Java 7. Please install supported version of Java on the client machine, or turn off this mode on the server. option non-JRMP server at remote endpoint root@remote-linux:~/>:
The
/usr/local/avamar/var/mc/server_log/mcserver.log.0 shows:
javax.net.ssl.SSLException: Fatal Alert received: Certificate Unknown at com.rsa.sslj.x.aI.a(Unknown Source) at com.rsa.sslj.x.aI.a(Unknown Source) at com.rsa.sslj.x.aI.a(Unknown Source) at com.rsa.sslj.x.ap.c(Unknown Source) at com.rsa.sslj.x.ap.b(Unknown Source) at com.rsa.sslj.x.ap.b(Unknown Source) at com.rsa.sslj.x.al.read(Unknown Source) at java.io.BufferedInputStream.fill(BufferedInputStream.java:246) at java.io.BufferedInputStream.read(BufferedInputStream.java:265) at java.io.DataInputStream.readInt(DataInputStream.java:387) at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run0(TCPTransport.java:727) at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.lambda$run$0(TCPTransport.java:688) at java.security.AccessController.doPrivileged(Native Method) at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run(TCPTransport.java:687) at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149) at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624) at java.lang.Thread.run(Thread.java:750) 05/07-13:38:05.00969 [RMI TCP Connection(504846)-192.168.1.113#10954236] sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run0 FINE: RMI TCP Connection(504846)-192.168.1.113: terminated with exception: javax.net.ssl.SSLException: Fatal Alert received: Certificate Unknown at com.rsa.sslj.x.aI.a(Unknown Source) at com.rsa.sslj.x.aI.a(Unknown Source) at com.rsa.sslj.x.aI.a(Unknown Source) at com.rsa.sslj.x.ap.c(Unknown Source) at com.rsa.sslj.x.ap.b(Unknown Source) at com.rsa.sslj.x.ap.b(Unknown Source) at com.rsa.sslj.x.al.read(Unknown Source) at java.io.BufferedInputStream.fill(BufferedInputStream.java:246) at java.io.BufferedInputStream.read(BufferedInputStream.java:265) at java.io.DataInputStream.readInt(DataInputStream.java:387) at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run0(TCPTransport.java:727) at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.lambda$run$0(TCPTransport.java:688) at java.security.AccessController.doPrivileged(Native Method) at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run(TCPTransport.java:687) at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149) at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624) at java.lang.Thread.run(Thread.java:750) 05/07-13:38:06.00011 [RMI TCP Connection(504847)-192.168.1.113#10954236] sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run0 FINE: RMI TCP Connection(504847)-192.168.1.113: terminated with exception: javax.net.ssl.SSLException: Fatal Alert received: Certificate Unknown at com.rsa.sslj.x.aI.a(Unknown Source) at com.rsa.sslj.x.aI.a(Unknown Source) at com.rsa.sslj.x.aI.a(Unknown Source) at com.rsa.sslj.x.ap.c(Unknown Source) at com.rsa.sslj.x.ap.b(Unknown Source) at com.rsa.sslj.x.ap.b(Unknown Source) at com.rsa.sslj.x.al.read(Unknown Source) at java.io.BufferedInputStream.fill(BufferedInputStream.java:246) at java.io.BufferedInputStream.read(BufferedInputStream.java:265) at java.io.DataInputStream.readInt(DataInputStream.java:387) at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run0(TCPTransport.java:727) at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.lambda$run$0(TCPTransport.java:688) at java.security.AccessController.doPrivileged(Native Method) at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run(TCPTransport.java:687) at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149) at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624) at java.lang.Thread.run(Thread.java:750) 05/07-13:38:06.00094 [RMI TCP Connection(504848)-192.168.1.113#10954236] sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run0 FINE: RMI TCP Connection(504848)-192.168.1.113: terminated with exception: javax.net.ssl.SSLException: Fatal Alert received: Certificate Unknown at com.rsa.sslj.x.aI.a(Unknown Source) at com.rsa.sslj.x.aI.a(Unknown Source) at com.rsa.sslj.x.aI.a(Unknown Source) at com.rsa.sslj.x.ap.c(Unknown Source) at com.rsa.sslj.x.ap.b(Unknown Source) at com.rsa.sslj.x.ap.b(Unknown Source) at com.rsa.sslj.x.al.read(Unknown Source) at java.io.BufferedInputStream.fill(BufferedInputStream.java:246) at java.io.BufferedInputStream.read(BufferedInputStream.java:265) at java.io.DataInputStream.readInt(DataInputStream.java:387) at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run0(TCPTransport.java:727) at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.lambda$run$0(TCPTransport.java:688) at java.security.AccessController.doPrivileged(Native Method) at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run(TCPTransport.java:687) at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149) at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624) at java.lang.Thread.run(Thread.java:750) 05/07-13:38:06.00127 [RMI TCP Connection(504849)-192.168.1.113#10954236] sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run0 FINE: RMI TCP Connection(504849)-192.168.1.113: terminated with exception: javax.net.ssl.SSLException: Fatal Alert received: Certificate Unknown at com.rsa.sslj.x.aI.a(Unknown Source) at com.rsa.sslj.x.aI.a(Unknown Source) at com.rsa.sslj.x.aI.a(Unknown Source) at com.rsa.sslj.x.ap.c(Unknown Source) at com.rsa.sslj.x.ap.b(Unknown Source) at com.rsa.sslj.x.ap.b(Unknown Source) at com.rsa.sslj.x.al.read(Unknown Source) at java.io.BufferedInputStream.fill(BufferedInputStream.java:246) at java.io.BufferedInputStream.read(BufferedInputStream.java:265) at java.io.DataInputStream.readInt(DataInputStream.java:387) at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run0(TCPTransport.java:727) at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.lambda$run$0(TCPTransport.java:688) at java.security.AccessController.doPrivileged(Native Method) at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run(TCPTransport.java:687) at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149) at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624) at java.lang.Thread.run(Thread.java:750) 05/07-13:38:06.00156 [RMI TCP Connection(504850)-192.168.1.113#10954236] sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run0 FINE: RMI TCP Connection(504850)-192.168.1.113: terminated with exception: javax.net.ssl.SSLException: Fatal Alert received: Certificate Unknown at com.rsa.sslj.x.aI.a(Unknown Source) at com.rsa.sslj.x.aI.a(Unknown Source) at com.rsa.sslj.x.aI.a(Unknown Source) at com.rsa.sslj.x.ap.c(Unknown Source) at com.rsa.sslj.x.ap.b(Unknown Source) at com.rsa.sslj.x.ap.b(Unknown Source) at com.rsa.sslj.x.al.read(Unknown Source) at java.io.BufferedInputStream.fill(BufferedInputStream.java:246) at java.io.BufferedInputStream.read(BufferedInputStream.java:265) at java.io.DataInputStream.readInt(DataInputStream.java:387) at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run0(TCPTransport.java:727) at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.lambda$run$0(TCPTransport.java:688) at java.security.AccessController.doPrivileged(Native Method) at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run(TCPTransport.java:687) at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149) at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624) at java.lang.Thread.run(Thread.java:750) 05/07-13:38:06.00174 [Web Services monitor thread#186] com.avamar.mc.dpn.ExecuteCommand.createTimer FINE: Creating timer for com.avamar.mc.mon.WebServicesMonitor 05/07-13:38:06.00216 [RMI TCP Connection(504851)-192.168.1.113#10954236] sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run0 FINE: RMI TCP Connection(504851)-192.168.1.113: terminated with exception: javax.net.ssl.SSLException: Fatal Alert received: Certificate Unknown at com.rsa.sslj.x.aI.a(Unknown Source) at com.rsa.sslj.x.aI.a(Unknown Source) at com.rsa.sslj.x.aI.a(Unknown Source) at com.rsa.sslj.x.ap.c(Unknown Source) at com.rsa.sslj.x.ap.b(Unknown Source) at com.rsa.sslj.x.ap.b(Unknown Source) at com.rsa.sslj.x.al.read(Unknown Source) at java.io.BufferedInputStream.fill(BufferedInputStream.java:246) at java.io.BufferedInputStream.read(BufferedInputStream.java:265) at java.io.DataInputStream.readInt(DataInputStream.java:387) at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run0(TCPTransport.java:727) at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.lambda$run$0(TCPTransport.java:688) at java.security.AccessController.doPrivileged(Native Method) at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run(TCPTransport.java:687) at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149) at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624) at java.lang.Thread.run(Thread.java:750) 05/07-13:38:06.00220 [RMI TCP Connection(504852)-192.168.1.113#10954236] sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run0 FINE: RMI TCP Connection(504852)-192.168.1.113: terminated with exception: javax.net.ssl.SSLException: Ciphertext is too large in received TLS record at com.rsa.sslj.x.aI.b(Unknown Source) at com.rsa.sslj.x.aI.a(Unknown Source) at com.rsa.sslj.x.aI.a(Unknown Source) at com.rsa.sslj.x.ap.c(Unknown Source) at com.rsa.sslj.x.ap.b(Unknown Source) at com.rsa.sslj.x.ap.b(Unknown Source) at com.rsa.sslj.x.al.read(Unknown Source) at java.io.BufferedInputStream.fill(BufferedInputStream.java:246) at java.io.BufferedInputStream.read(BufferedInputStream.java:265) at java.io.DataInputStream.readInt(DataInputStream.java:387) at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run0(TCPTransport.java:727) at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.lambda$run$0(TCPTransport.java:688) at java.security.AccessController.doPrivileged(Native Method) at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run(TCPTransport.java:687)
Cause
Changes introduced in Java versions higher than 1.8.0_481 affect this functionality. Engineering is investigating this issue.
Resolution
Follow the guidance from the article Avamar: Unable to Launch Avamar Administrator JNLP with Java 1.8.0_481 to implement the workaround setting the parameter
rmi_over_ssl to false in the file /usr/local/avamar/var/mc/server_data/mcserver.xml and then restart the Management Console Service (MCS).
Affected Products
AvamarArticle Properties
Article Number: 000466865
Article Type: Solution
Last Modified: 02 ذو الحجة 1447
Version: 2
Find answers to your questions from other Dell users
Support Services
Check if your device is covered by Support Services.