Avamar: Remote Mccli Command Fails After Upgrade to Java Higher Than 1.8.0_481

Oversigt: This article explains the failure of remote mccli commands after upgrading Java to version 1.8.0_492 and provides a workaround to restore functionality.

Denne artikel gælder for Denne artikel gælder ikke for Denne artikel er ikke knyttet til et bestemt produkt. Det er ikke alle produktversioner, der er identificeret i denne artikel.
Udforsk andre ressourcer

Symptomer

The remote mccli commands fail to connect to MCS after upgrade to Java higher than 1.8.0_481 version on the remote server.

Working version of Java on remote mccli server:

root@remote-linux:~/>: java -version
openjdk version "1.8.0_472"
OpenJDK Runtime Environment (build 1.8.0_472-b08)
OpenJDK 64-Bit Server VM (build 25.472-b08, mixed mode)
root@remote-linux:~/>:

Once upgrade the Java version higher than 1.8.0_481:

root@remote-linux:~/>: java -version
openjdk version "1.8.0_492"
OpenJDK Runtime Environment (build 1.8.0_492-b09)
OpenJDK 64-Bit Server VM (build 25.492-b09, mixed mode)
root@remote-linux:~/>:  
root@remote-linux:~/>:  ./mccli server show-prop
1,23996,CLI failed to connect to MCS.
Attribute Value
--------- -------------------------------------------------------------------------------------------------------------------------------------------------
reason    FIPS 140-2 mode is not supported on Java 7.  Please install supported version of Java on the client machine, or turn off this mode on the server.
option    non-JRMP server at remote endpoint
root@remote-linux:~/>:
The /usr/local/avamar/var/mc/server_log/mcserver.log.0 shows: 
javax.net.ssl.SSLException: Fatal Alert received: Certificate Unknown
    at com.rsa.sslj.x.aI.a(Unknown Source)
    at com.rsa.sslj.x.aI.a(Unknown Source)
    at com.rsa.sslj.x.aI.a(Unknown Source)
    at com.rsa.sslj.x.ap.c(Unknown Source)
    at com.rsa.sslj.x.ap.b(Unknown Source)
    at com.rsa.sslj.x.ap.b(Unknown Source)
    at com.rsa.sslj.x.al.read(Unknown Source)
    at java.io.BufferedInputStream.fill(BufferedInputStream.java:246)
    at java.io.BufferedInputStream.read(BufferedInputStream.java:265)
    at java.io.DataInputStream.readInt(DataInputStream.java:387)
    at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run0(TCPTransport.java:727)
    at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.lambda$run$0(TCPTransport.java:688)
    at java.security.AccessController.doPrivileged(Native Method)
    at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run(TCPTransport.java:687)
    at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)
    at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)
    at java.lang.Thread.run(Thread.java:750)
05/07-13:38:05.00969 [RMI TCP Connection(504846)-192.168.1.113#10954236] sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run0
FINE: RMI TCP Connection(504846)-192.168.1.113: terminated with exception:
javax.net.ssl.SSLException: Fatal Alert received: Certificate Unknown
    at com.rsa.sslj.x.aI.a(Unknown Source)
    at com.rsa.sslj.x.aI.a(Unknown Source)
    at com.rsa.sslj.x.aI.a(Unknown Source)
    at com.rsa.sslj.x.ap.c(Unknown Source)
    at com.rsa.sslj.x.ap.b(Unknown Source)
    at com.rsa.sslj.x.ap.b(Unknown Source)
    at com.rsa.sslj.x.al.read(Unknown Source)
    at java.io.BufferedInputStream.fill(BufferedInputStream.java:246)
    at java.io.BufferedInputStream.read(BufferedInputStream.java:265)
    at java.io.DataInputStream.readInt(DataInputStream.java:387)
    at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run0(TCPTransport.java:727)
    at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.lambda$run$0(TCPTransport.java:688)
    at java.security.AccessController.doPrivileged(Native Method)
    at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run(TCPTransport.java:687)
    at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)
    at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)
    at java.lang.Thread.run(Thread.java:750)
05/07-13:38:06.00011 [RMI TCP Connection(504847)-192.168.1.113#10954236] sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run0
FINE: RMI TCP Connection(504847)-192.168.1.113: terminated with exception:
javax.net.ssl.SSLException: Fatal Alert received: Certificate Unknown
    at com.rsa.sslj.x.aI.a(Unknown Source)
    at com.rsa.sslj.x.aI.a(Unknown Source)
    at com.rsa.sslj.x.aI.a(Unknown Source)
    at com.rsa.sslj.x.ap.c(Unknown Source)
    at com.rsa.sslj.x.ap.b(Unknown Source)
    at com.rsa.sslj.x.ap.b(Unknown Source)
    at com.rsa.sslj.x.al.read(Unknown Source)
    at java.io.BufferedInputStream.fill(BufferedInputStream.java:246)
    at java.io.BufferedInputStream.read(BufferedInputStream.java:265)
    at java.io.DataInputStream.readInt(DataInputStream.java:387)
    at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run0(TCPTransport.java:727)
    at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.lambda$run$0(TCPTransport.java:688)
    at java.security.AccessController.doPrivileged(Native Method)
    at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run(TCPTransport.java:687)
    at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)
    at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)
    at java.lang.Thread.run(Thread.java:750)
05/07-13:38:06.00094 [RMI TCP Connection(504848)-192.168.1.113#10954236] sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run0
FINE: RMI TCP Connection(504848)-192.168.1.113: terminated with exception:
javax.net.ssl.SSLException: Fatal Alert received: Certificate Unknown
    at com.rsa.sslj.x.aI.a(Unknown Source)
    at com.rsa.sslj.x.aI.a(Unknown Source)
    at com.rsa.sslj.x.aI.a(Unknown Source)
    at com.rsa.sslj.x.ap.c(Unknown Source)
    at com.rsa.sslj.x.ap.b(Unknown Source)
    at com.rsa.sslj.x.ap.b(Unknown Source)
    at com.rsa.sslj.x.al.read(Unknown Source)
    at java.io.BufferedInputStream.fill(BufferedInputStream.java:246)
    at java.io.BufferedInputStream.read(BufferedInputStream.java:265)
    at java.io.DataInputStream.readInt(DataInputStream.java:387)
    at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run0(TCPTransport.java:727)
    at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.lambda$run$0(TCPTransport.java:688)
    at java.security.AccessController.doPrivileged(Native Method)
    at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run(TCPTransport.java:687)
    at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)
    at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)
    at java.lang.Thread.run(Thread.java:750)
05/07-13:38:06.00127 [RMI TCP Connection(504849)-192.168.1.113#10954236] sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run0
FINE: RMI TCP Connection(504849)-192.168.1.113: terminated with exception:
javax.net.ssl.SSLException: Fatal Alert received: Certificate Unknown
    at com.rsa.sslj.x.aI.a(Unknown Source)
    at com.rsa.sslj.x.aI.a(Unknown Source)
    at com.rsa.sslj.x.aI.a(Unknown Source)
    at com.rsa.sslj.x.ap.c(Unknown Source)
    at com.rsa.sslj.x.ap.b(Unknown Source)
    at com.rsa.sslj.x.ap.b(Unknown Source)
    at com.rsa.sslj.x.al.read(Unknown Source)
    at java.io.BufferedInputStream.fill(BufferedInputStream.java:246)
    at java.io.BufferedInputStream.read(BufferedInputStream.java:265)
    at java.io.DataInputStream.readInt(DataInputStream.java:387)
    at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run0(TCPTransport.java:727)
    at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.lambda$run$0(TCPTransport.java:688)
    at java.security.AccessController.doPrivileged(Native Method)
    at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run(TCPTransport.java:687)
    at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)
    at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)
    at java.lang.Thread.run(Thread.java:750)
05/07-13:38:06.00156 [RMI TCP Connection(504850)-192.168.1.113#10954236] sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run0
FINE: RMI TCP Connection(504850)-192.168.1.113: terminated with exception:
javax.net.ssl.SSLException: Fatal Alert received: Certificate Unknown
    at com.rsa.sslj.x.aI.a(Unknown Source)
    at com.rsa.sslj.x.aI.a(Unknown Source)
    at com.rsa.sslj.x.aI.a(Unknown Source)
    at com.rsa.sslj.x.ap.c(Unknown Source)
    at com.rsa.sslj.x.ap.b(Unknown Source)
    at com.rsa.sslj.x.ap.b(Unknown Source)
    at com.rsa.sslj.x.al.read(Unknown Source)
    at java.io.BufferedInputStream.fill(BufferedInputStream.java:246)
    at java.io.BufferedInputStream.read(BufferedInputStream.java:265)
    at java.io.DataInputStream.readInt(DataInputStream.java:387)
    at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run0(TCPTransport.java:727)
    at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.lambda$run$0(TCPTransport.java:688)
    at java.security.AccessController.doPrivileged(Native Method)
    at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run(TCPTransport.java:687)
    at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)
    at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)
    at java.lang.Thread.run(Thread.java:750)
05/07-13:38:06.00174 [Web Services monitor thread#186] com.avamar.mc.dpn.ExecuteCommand.createTimer
FINE: Creating timer for com.avamar.mc.mon.WebServicesMonitor
05/07-13:38:06.00216 [RMI TCP Connection(504851)-192.168.1.113#10954236] sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run0
FINE: RMI TCP Connection(504851)-192.168.1.113: terminated with exception:
javax.net.ssl.SSLException: Fatal Alert received: Certificate Unknown
    at com.rsa.sslj.x.aI.a(Unknown Source)
    at com.rsa.sslj.x.aI.a(Unknown Source)
    at com.rsa.sslj.x.aI.a(Unknown Source)
    at com.rsa.sslj.x.ap.c(Unknown Source)
    at com.rsa.sslj.x.ap.b(Unknown Source)
    at com.rsa.sslj.x.ap.b(Unknown Source)
    at com.rsa.sslj.x.al.read(Unknown Source)
    at java.io.BufferedInputStream.fill(BufferedInputStream.java:246)
    at java.io.BufferedInputStream.read(BufferedInputStream.java:265)
    at java.io.DataInputStream.readInt(DataInputStream.java:387)
    at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run0(TCPTransport.java:727)
    at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.lambda$run$0(TCPTransport.java:688)
    at java.security.AccessController.doPrivileged(Native Method)
    at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run(TCPTransport.java:687)
    at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)
    at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)
    at java.lang.Thread.run(Thread.java:750)
05/07-13:38:06.00220 [RMI TCP Connection(504852)-192.168.1.113#10954236] sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run0
FINE: RMI TCP Connection(504852)-192.168.1.113: terminated with exception:
javax.net.ssl.SSLException: Ciphertext is too large in received TLS record
    at com.rsa.sslj.x.aI.b(Unknown Source)
    at com.rsa.sslj.x.aI.a(Unknown Source)
    at com.rsa.sslj.x.aI.a(Unknown Source)
    at com.rsa.sslj.x.ap.c(Unknown Source)
    at com.rsa.sslj.x.ap.b(Unknown Source)
    at com.rsa.sslj.x.ap.b(Unknown Source)
    at com.rsa.sslj.x.al.read(Unknown Source)
    at java.io.BufferedInputStream.fill(BufferedInputStream.java:246)
    at java.io.BufferedInputStream.read(BufferedInputStream.java:265)
    at java.io.DataInputStream.readInt(DataInputStream.java:387)
    at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run0(TCPTransport.java:727)
    at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.lambda$run$0(TCPTransport.java:688)
    at java.security.AccessController.doPrivileged(Native Method)
    at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run(TCPTransport.java:687)

Årsag

Changes introduced in Java versions higher than 1.8.0_481 affect this functionality. Engineering is investigating this issue.

Løsning

Follow the guidance from the article Avamar: Unable to Launch Avamar Administrator JNLP with Java 1.8.0_481 to implement the workaround setting the parameter rmi_over_ssl to false in the file /usr/local/avamar/var/mc/server_data/mcserver.xml and then restart the Management Console Service (MCS).

Berørte produkter

Avamar
Artikelegenskaber
Artikelnummer: 000466865
Artikeltype: Solution
Senest ændret: 19 maj 2026
Version:  2
Find svar på dine spørgsmål fra andre Dell-brugere
Supportservices
Kontrollér, om din enhed er dækket af supportservices.