javax.net.ssl.SSLHandshakeException: Server chose TLSv1, but that protocol version is not enabled or not supported by the client. #1020

kkrgwbj · 2023-04-14T03:34:32Z

kkrgwbj
Apr 14, 2023

pushy version = 0.150

io.netty.handler.codec.DecoderException: javax.net.ssl.SSLHandshakeException: Server chose TLSv1, but that protocol version is not enabled or not supported by the client.
	at io.netty.handler.codec.ByteToMessageDecoder.callDecode(ByteToMessageDecoder.java:471) ~[netty-codec-4.1.49.Final.jar!/:4.1.49.Final]
	at io.netty.handler.codec.ByteToMessageDecoder.channelRead(ByteToMessageDecoder.java:276) ~[netty-codec-4.1.49.Final.jar!/:4.1.49.Final]
	at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:379) [netty-transport-4.1.49.Final.jar!/:4.1.49.Final]
	at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:365) [netty-transport-4.1.49.Final.jar!/:4.1.49.Final]
	at io.netty.channel.AbstractChannelHandlerContext.fireChannelRead(AbstractChannelHandlerContext.java:357) [netty-transport-4.1.49.Final.jar!/:4.1.49.Final]
	at io.netty.channel.DefaultChannelPipeline$HeadContext.channelRead(DefaultChannelPipeline.java:1410) [netty-transport-4.1.49.Final.jar!/:4.1.49.Final]
	at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:379) [netty-transport-4.1.49.Final.jar!/:4.1.49.Final]
	at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:365) [netty-transport-4.1.49.Final.jar!/:4.1.49.Final]
	at io.netty.channel.DefaultChannelPipeline.fireChannelRead(DefaultChannelPipeline.java:919) [netty-transport-4.1.49.Final.jar!/:4.1.49.Final]
	at io.netty.channel.nio.AbstractNioByteChannel$NioByteUnsafe.read(AbstractNioByteChannel.java:163) [netty-transport-4.1.49.Final.jar!/:4.1.49.Final]
	at io.netty.channel.nio.NioEventLoop.processSelectedKey(NioEventLoop.java:714) [netty-transport-4.1.49.Final.jar!/:4.1.49.Final]
	at io.netty.channel.nio.NioEventLoop.processSelectedKeysOptimized(NioEventLoop.java:650) [netty-transport-4.1.49.Final.jar!/:4.1.49.Final]
	at io.netty.channel.nio.NioEventLoop.processSelectedKeys(NioEventLoop.java:576) [netty-transport-4.1.49.Final.jar!/:4.1.49.Final]
	at io.netty.channel.nio.NioEventLoop.run(NioEventLoop.java:493) [netty-

Answered by kkrgwbj

Apr 18, 2023

thank,After upgrading to Netty 4.1.85, it's working fine

View full answer

jmason · 2023-04-14T10:31:15Z

jmason
Apr 14, 2023

It looks like APNs had an outage last night where TLS/SSL connections could not be negotiated -- we got plenty of those errors, and a few of these too:

SSL handshake failed with unexpected error
javax.net.ssl.SSLException: Server selected improper ciphersuite TLS_ECDH_anon_WITH_NULL_SHA
        at sun.security.ssl.Alerts.getSSLException(Alerts.java:219)
        at sun.security.ssl.SSLSocketImpl.fatal(SSLSocketImpl.java:1946)
        at sun.security.ssl.Handshaker.fatalSE(Handshaker.java:316)
        at sun.security.ssl.Handshaker.fatalSE(Handshaker.java:306)
        at sun.security.ssl.ClientHandshaker.serverHello(ClientHandshaker.java:547)
        at sun.security.ssl.ClientHandshaker.processMessage(ClientHandshaker.java:211)
        at sun.security.ssl.Handshaker.processLoop(Handshaker.java:1037)
        at sun.security.ssl.Handshaker.process_record(Handshaker.java:965)
        at sun.security.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:1064)
        at sun.security.ssl.SSLSocketImpl.performInitialHandshake(SSLSocketImpl.java:1367)
        at sun.security.ssl.SSLSocketImpl.writeRecord(SSLSocketImpl.java:750)
        at sun.security.ssl.AppOutputStream.write(AppOutputStream.java:123)
        at java.io.OutputStream.write(OutputStream.java:75)

0 replies

jmason · 2023-04-14T10:31:58Z

jmason
Apr 14, 2023

The outage spanned from about 20:40 UTC, then was resolved by 00:30 UTC. There's nothing on their official system status page, https://developer.apple.com/system-status/ .

0 replies

kkrgwbj · 2023-04-15T02:07:03Z

kkrgwbj
Apr 15, 2023
Author

I tried to introduce

<dependency>
    <groupId>io.netty</groupId>
    <artifactId>netty-tcnative-boringssl-static</artifactId>
    <version>2.0.54.Final</version>
    <scope>runtime</scope>
</dependency>

, but I encountered the same problem,

SSL handshake failed with unexpected error
javax.net.ssl.SSLException: Server selected improper ciphersuite TLS_ECDH_anon_WITH_NULL_SHA
        at sun.security.ssl.Alerts.getSSLException(Alerts.java:219)
        at sun.security.ssl.SSLSocketImpl.fatal(SSLSocketImpl.java:1946)
        at sun.security.ssl.Handshaker.fatalSE(Handshaker.java:316)
        at sun.security.ssl.Handshaker.fatalSE(Handshaker.java:306)
        at sun.security.ssl.ClientHandshaker.serverHello(ClientHandshaker.java:547)
        at sun.security.ssl.ClientHandshaker.processMessage(ClientHandshaker.java:211)
        at sun.security.ssl.Handshaker.processLoop(Handshaker.java:1037)
        at sun.security.ssl.Handshaker.process_record(Handshaker.java:965)
        at sun.security.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:1064)
        at sun.security.ssl.SSLSocketImpl.performInitialHandshake(SSLSocketImpl.java:1367)
        at sun.security.ssl.SSLSocketImpl.writeRecord(SSLSocketImpl.java:750)
        at sun.security.ssl.AppOutputStream.write(AppOutputStream.java:123)
        at java.io.OutputStream.write(OutputStream.java:75)

but the same code, I am normal in the Windows environment, and I report this error after deploying to a Linux server.

7 replies

kkrgwbj Apr 17, 2023
Author

 com.xwtec:xwtec-push-proxy:jar:2.1.1
[INFO] +- org.springframework.boot:spring-boot-starter-web:jar:2.3.0.RELEASE:compile
[INFO] |  +- org.springframework.boot:spring-boot-starter:jar:2.3.0.RELEASE:compile
[INFO] |  |  +- org.springframework.boot:spring-boot:jar:2.3.0.RELEASE:compile
[INFO] |  |  +- org.springframework.boot:spring-boot-autoconfigure:jar:2.3.0.RELEASE:compile
[INFO] |  |  +- jakarta.annotation:jakarta.annotation-api:jar:1.3.5:compile
[INFO] |  |  \- org.yaml:snakeyaml:jar:1.26:compile
[INFO] |  +- org.springframework.boot:spring-boot-starter-json:jar:2.3.0.RELEASE:compile
[INFO] |  |  +- com.fasterxml.jackson.datatype:jackson-datatype-jdk8:jar:2.11.0:compile
[INFO] |  |  +- com.fasterxml.jackson.datatype:jackson-datatype-jsr310:jar:2.11.0:compile
[INFO] |  |  \- com.fasterxml.jackson.module:jackson-module-parameter-names:jar:2.11.0:compile
[INFO] |  +- org.springframework.boot:spring-boot-starter-tomcat:jar:2.3.0.RELEASE:compile
[INFO] |  |  +- org.apache.tomcat.embed:tomcat-embed-core:jar:9.0.35:compile
[INFO] |  |  +- org.glassfish:jakarta.el:jar:3.0.3:compile
[INFO] |  |  \- org.apache.tomcat.embed:tomcat-embed-websocket:jar:9.0.35:compile
[INFO] |  +- org.springframework:spring-web:jar:5.2.6.RELEASE:compile
[INFO] |  |  \- org.springframework:spring-beans:jar:5.2.6.RELEASE:compile
[INFO] |  \- org.springframework:spring-webmvc:jar:5.2.6.RELEASE:compile
[INFO] |     +- org.springframework:spring-aop:jar:5.2.6.RELEASE:compile
[INFO] |     \- org.springframework:spring-expression:jar:5.2.6.RELEASE:compile
[INFO] +- org.springframework.kafka:spring-kafka:jar:2.5.0.RELEASE:compile
[INFO] |  +- org.springframework:spring-context:jar:5.2.6.RELEASE:compile
[INFO] |  +- org.springframework:spring-messaging:jar:5.2.6.RELEASE:compile
[INFO] |  +- org.springframework:spring-tx:jar:5.2.6.RELEASE:compile
[INFO] |  +- org.springframework.retry:spring-retry:jar:1.2.5.RELEASE:compile
[INFO] |  \- org.apache.kafka:kafka-clients:jar:2.5.0:compile
[INFO] |     +- com.github.luben:zstd-jni:jar:1.4.4-7:compile
[INFO] |     +- org.lz4:lz4-java:jar:1.7.1:compile
[INFO] |     \- org.xerial.snappy:snappy-java:jar:1.1.7.3:compile
[INFO] +- com.alibaba:fastjson:jar:1.2.83:compile
[INFO] +- com.eatthepath:pushy:jar:0.15.2:compile
[INFO] |  +- io.netty:netty-codec-http2:jar:4.1.49.Final:compile
[INFO] |  |  \- io.netty:netty-codec-http:jar:4.1.49.Final:compile
[INFO] |  +- io.netty:netty-handler-proxy:jar:4.1.49.Final:compile
[INFO] |  |  \- io.netty:netty-codec-socks:jar:4.1.49.Final:compile
[INFO] |  +- io.netty:netty-resolver-dns:jar:4.1.49.Final:compile
[INFO] |  |  +- io.netty:netty-resolver:jar:4.1.49.Final:compile
[INFO] |  |  \- io.netty:netty-codec-dns:jar:4.1.49.Final:compile
[INFO] |  +- com.eatthepath:fast-uuid:jar:0.2.0:compile
[INFO] |  \- org.slf4j:slf4j-api:jar:1.7.30:compile
[INFO] +- cn.hutool:hutool-all:jar:4.1.18:compile
[INFO] +- org.redisson:redisson:jar:3.11.1:compile
[INFO] |  +- io.netty:netty-common:jar:4.1.49.Final:compile
[INFO] |  +- io.netty:netty-codec:jar:4.1.49.Final:compile
[INFO] |  +- io.netty:netty-buffer:jar:4.1.49.Final:compile
[INFO] |  +- io.netty:netty-transport:jar:4.1.49.Final:compile
[INFO] |  +- io.netty:netty-handler:jar:4.1.49.Final:compile
[INFO] |  +- javax.cache:cache-api:jar:1.1.1:compile
[INFO] |  +- io.projectreactor:reactor-core:jar:3.3.5.RELEASE:compile
[INFO] |  |  \- org.reactivestreams:reactive-streams:jar:1.0.3:compile
[INFO] |  +- io.reactivex.rxjava2:rxjava:jar:2.2.19:compile
[INFO] |  +- de.ruedigermoeller:fst:jar:2.57:compile
[INFO] |  |  +- org.javassist:javassist:jar:3.21.0-GA:compile
[INFO] |  |  \- org.objenesis:objenesis:jar:2.5.1:compile
[INFO] |  +- com.fasterxml.jackson.dataformat:jackson-dataformat-yaml:jar:2.11.0:compile
[INFO] |  +- com.fasterxml.jackson.core:jackson-core:jar:2.11.0:compile
[INFO] |  +- com.fasterxml.jackson.core:jackson-databind:jar:2.11.0:compile
[INFO] |  |  \- com.fasterxml.jackson.core:jackson-annotations:jar:2.11.0:compile
[INFO] |  +- net.bytebuddy:byte-buddy:jar:1.10.10:compile
[INFO] |  \- org.jodd:jodd-bean:jar:5.0.10:compile
[INFO] |     \- org.jodd:jodd-core:jar:5.0.10:compile
[INFO] +- io.swagger:swagger-annotations:jar:1.5.20:compile
[INFO] +- io.springfox:springfox-swagger2:jar:2.9.2:compile
[INFO] |  +- io.swagger:swagger-models:jar:1.5.20:compile
[INFO] |  +- io.springfox:springfox-spi:jar:2.9.2:compile
[INFO] |  |  \- io.springfox:springfox-core:jar:2.9.2:compile
[INFO] |  +- io.springfox:springfox-schema:jar:2.9.2:compile
[INFO] |  +- io.springfox:springfox-swagger-common:jar:2.9.2:compile
[INFO] |  +- io.springfox:springfox-spring-web:jar:2.9.2:compile
[INFO] |  +- com.google.guava:guava:jar:21.0:compile
[INFO] |  +- com.fasterxml:classmate:jar:1.5.1:compile
[INFO] |  +- org.springframework.plugin:spring-plugin-core:jar:1.2.0.RELEASE:compile
[INFO] |  +- org.springframework.plugin:spring-plugin-metadata:jar:1.2.0.RELEASE:compile
[INFO] |  \- org.mapstruct:mapstruct:jar:1.2.0.Final:compile
[INFO] +- com.github.xiaoymin:swagger-bootstrap-ui:jar:1.9.1:compile
[INFO] +- org.hibernate.validator:hibernate-validator:jar:6.1.2.Final:compile
[INFO] |  +- jakarta.validation:jakarta.validation-api:jar:2.0.2:compile
[INFO] |  \- org.jboss.logging:jboss-logging:jar:3.4.1.Final:compile
[INFO] +- com.xiaomi.push:MiPush_SDK_Server:jar:1.0.8:compile
[INFO] +- com.xiaomi.push:json-simple:jar:1.1:compile
[INFO] +- com.vivo.push:vpush-server-sdk:jar:2.2:compile
[INFO] +- com.meizu.flyme:push-server-sdk:jar:1.2.8.20190114_release:compile
[INFO] +- com.googlecode.json-simple:json-simple:jar:1.1.1:compile
[INFO] |  \- junit:junit:jar:4.13:compile
[INFO] |     \- org.hamcrest:hamcrest-core:jar:2.2:compile
[INFO] +- org.springframework.boot:spring-boot-starter-test:jar:2.3.0.RELEASE:test
[INFO] |  +- org.springframework.boot:spring-boot-test:jar:2.3.0.RELEASE:test
[INFO] |  +- org.springframework.boot:spring-boot-test-autoconfigure:jar:2.3.0.RELEASE:test
[INFO] |  +- com.jayway.jsonpath:json-path:jar:2.4.0:test
[INFO] |  |  \- net.minidev:json-smart:jar:2.3:test
[INFO] |  |     \- net.minidev:accessors-smart:jar:1.2:test
[INFO] |  |        \- org.ow2.asm:asm:jar:5.0.4:test
[INFO] |  +- jakarta.xml.bind:jakarta.xml.bind-api:jar:2.3.3:test
[INFO] |  |  \- jakarta.activation:jakarta.activation-api:jar:1.2.2:test
[INFO] |  +- org.assertj:assertj-core:jar:3.16.1:test
[INFO] |  +- org.hamcrest:hamcrest:jar:2.2:compile
[INFO] |  +- org.junit.jupiter:junit-jupiter:jar:5.6.2:test
[INFO] |  |  +- org.junit.jupiter:junit-jupiter-api:jar:5.6.2:test
[INFO] |  |  |  +- org.opentest4j:opentest4j:jar:1.2.0:test
[INFO] |  |  |  \- org.junit.platform:junit-platform-commons:jar:1.6.2:test
[INFO] |  |  +- org.junit.jupiter:junit-jupiter-params:jar:5.6.2:test
[INFO] |  |  \- org.junit.jupiter:junit-jupiter-engine:jar:5.6.2:test
[INFO] |  +- org.junit.vintage:junit-vintage-engine:jar:5.6.2:test
[INFO] |  |  +- org.apiguardian:apiguardian-api:jar:1.1.0:test
[INFO] |  |  \- org.junit.platform:junit-platform-engine:jar:1.6.2:test
[INFO] |  +- org.mockito:mockito-core:jar:3.3.3:test
[INFO] |  |  \- net.bytebuddy:byte-buddy-agent:jar:1.10.10:test
[INFO] |  +- org.mockito:mockito-junit-jupiter:jar:3.3.3:test
[INFO] |  +- org.skyscreamer:jsonassert:jar:1.5.0:test
[INFO] |  |  \- com.vaadin.external.google:android-json:jar:0.0.20131108.vaadin1:test
[INFO] |  +- org.springframework:spring-core:jar:5.2.6.RELEASE:compile
[INFO] |  |  \- org.springframework:spring-jcl:jar:5.2.6.RELEASE:compile
[INFO] |  +- org.springframework:spring-test:jar:5.2.6.RELEASE:test
[INFO] |  \- org.xmlunit:xmlunit-core:jar:2.7.0:test
[INFO] +- com.xwtec:xwtec-support-api:jar:2.1.1:compile
[INFO] +- com.xwtec:xwtec-common:jar:2.1.1:compile
[INFO] |  \- javax.validation:validation-api:jar:2.0.1.Final:compile
[INFO] +- org.apache.httpcomponents:httpclient:jar:4.5.12:compile
[INFO] |  +- org.apache.httpcomponents:httpcore:jar:4.4.13:compile
[INFO] |  \- commons-codec:commons-codec:jar:1.14:compile
[INFO] +- org.apache.commons:commons-lang3:jar:3.10:compile
[INFO] +- com.squareup.okhttp3:okhttp:jar:3.14.8:compile
[INFO] |  \- com.squareup.okio:okio:jar:1.17.2:compile
[INFO] +- org.apache.httpcomponents:httpmime:jar:4.5.12:compile
[INFO] +- org.apache.logging.log4j:log4j-slf4j-impl:jar:2.17.0:compile
[INFO] +- org.apache.logging.log4j:log4j-core:jar:2.17.0:compile
[INFO] +- org.apache.logging.log4j:log4j-jul:jar:2.17.0:compile
[INFO] +- org.apache.logging.log4j:log4j-api:jar:2.17.0:compile
[INFO] +- org.slf4j:jul-to-slf4j:jar:1.7.32:compile
[INFO] +- com.xwtec.auth:manage-security:jar:1.2.5.RELEASE:compile
[INFO] +- com.xwtec:ecp:jar:5.8:compile
[INFO] +- com.xwtec:logic_common:jar:5.8:compile
[INFO] +- opush:opush-server-sdk-1.0.6.jar:jar:1.0.6:system
[INFO] +- com.github.binarywang:weixin-java-cp:jar:4.1.0:compile
[INFO] |  \- com.github.binarywang:weixin-java-common:jar:4.1.0:compile
[INFO] |     +- com.thoughtworks.xstream:xstream:jar:1.4.10:compile
[INFO] |     |  +- xmlpull:xmlpull:jar:1.1.3.1:compile
[INFO] |     |  \- xpp3:xpp3_min:jar:1.1.4c:compile
[INFO] |     +- org.slf4j:jcl-over-slf4j:jar:1.7.30:compile
[INFO] |     +- com.google.code.gson:gson:jar:2.8.6:compile
[INFO] |     +- commons-io:commons-io:jar:2.7:compile
[INFO] |     \- org.dom4j:dom4j:jar:2.1.3:compile
[INFO] +- org.projectlombok:lombok:jar:1.18.12:provided
[INFO] \- org.springframework.boot:spring-boot-starter-log4j2:jar:2.3.0.RELEASE:compile

kkrgwbj Apr 17, 2023
Author

@jchambers no use proyx;

jchambers Apr 17, 2023
Maintainer

You're using Pushy 0.15.2, which depends on Netty 4.1.85. The version of Netty that's actually on your classpath is 4.1.49, and that's very likely the problem. This is almost certainly some kind of version conflict with another one of your dependencies.

kkrgwbj Apr 18, 2023
Author

thank,After upgrading to Netty 4.1.85, it's working fine

Answer selected by jchambers

kkrgwbj · 2023-04-15T02:40:58Z

kkrgwbj
Apr 15, 2023
Author

@jchambers would you can help me

0 replies

jchambers · 2023-04-15T13:51:18Z

jchambers
Apr 15, 2023
Maintainer

@kkrgwbj It sounds like we're trying to cover a few distinct issues here.

The first issue sounds like it was caused by an upstream outage—thanks, @jmason, for calling that out (and it's good to hear from you!).

I'm not sure what's going on in the second case, but it sounds like this is more of a general request for technical support than it is a specific bug report. With that in mind, I'm going to move this to a "discussion" rather than an "issue."

0 replies

kkrgwbj · 2023-04-16T03:27:40Z

kkrgwbj
Apr 16, 2023
Author

@jchambers


javax.net.ssl.SSLHandshakeException: error:100000f2:SSL routines:OPENSSL_internal:WRONG_CIPHER_RETURNED |  

now, all push message not work

0 replies

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

javax.net.ssl.SSLHandshakeException: Server chose TLSv1, but that protocol version is not enabled or not supported by the client. #1020

{{title}}

{{editor}}'s edit

{{editor}}'s edit

Replies: 6 comments 7 replies

{{title}}

{{title}}

{{editor}}'s edit

{{editor}}'s edit

{{title}}

{{editor}}'s edit

{{editor}}'s edit

{{title}}

{{editor}}'s edit

{{editor}}'s edit

{{title}}

{{title}}

{{title}}

{{title}}

{{title}}

{{title}}

Select a reply

javax.net.ssl.SSLHandshakeException: Server chose TLSv1, but that protocol version is not enabled or not supported by the client. #1020

kkrgwbj Apr 14, 2023

Replies: 6 comments · 7 replies

jmason Apr 14, 2023

jmason Apr 14, 2023

kkrgwbj Apr 15, 2023 Author

kkrgwbj Apr 17, 2023 Author

kkrgwbj Apr 17, 2023 Author

jchambers Apr 17, 2023 Maintainer

kkrgwbj Apr 18, 2023 Author

kkrgwbj Apr 15, 2023 Author

jchambers Apr 15, 2023 Maintainer

kkrgwbj Apr 16, 2023 Author

kkrgwbj
Apr 14, 2023

Replies: 6 comments 7 replies

jmason
Apr 14, 2023

jmason
Apr 14, 2023

kkrgwbj
Apr 15, 2023
Author

kkrgwbj Apr 17, 2023
Author

kkrgwbj Apr 17, 2023
Author

jchambers Apr 17, 2023
Maintainer

kkrgwbj Apr 18, 2023
Author

kkrgwbj
Apr 15, 2023
Author

jchambers
Apr 15, 2023
Maintainer

kkrgwbj
Apr 16, 2023
Author