My Oracle Support Banner

ODSEE - "Inbound Closed Before Receiving Peer's Close_notify: Possible Truncation Attack?" (Doc ID 1645925.1)

Last updated on NOVEMBER 06, 2019

Applies to:

Oracle Directory Server Enterprise Edition - Version 6.3 SP1 to 11.1.1.7.1 [Release 6.0 to 11gR1]
Information in this document applies to any platform.

Symptoms

 On a busy server many connections show an error upon closing an SSL or StartTLS connection.

For example the following was seen on DPS 11.1.1.7.0 but any version can be affected up to 11.1.1.7.1:


 [31/Jan/2014:11:13:33 -0500] - PROFILE    - INFO  - conn=nnnnnn assigned to connection handler cn=Example_conn_handler,cn=connection handlers,cn=config
 [31/Jan/2014:11:13:33 -0500] - CONNECT    - INFO  - conn=nnnnnn  client=<CLIENT_IP>:<PORT> server=<SERVER_IP>:<PORT> protocol=LDAP
 [31/Jan/2014:11:13:33 -0500] - OPERATION  - INFO  - conn=nnnnnn op=0 EXTENDED oid="1.3.6.1.4.1.1466.20037" [Thread Worker Thread 94]
 [31/Jan/2014:11:13:33 -0500] - OPERATION  - INFO  - conn=nnnnnn op=0 EXTENDED RESPONSE err=0 msg="" etime=1 [Thread Worker Thread 94]
 [31/Jan/2014:11:13:33 -0500] - OPERATION  - INFO  - conn=nnnnnn op=1 msgid=2 SEARCH base="dc=<SUFFIX_DN>" scope=2 controls="" filter="(uid=<USER.1>)" attrs="dn " [Thread Worker Thread 48]
 [31/Jan/2014:11:13:33 -0500] - SERVER_OP  - INFO  - conn=nnnnnn op=1 SEARCH base="dc=<SUFFIX_DN>" scope=2 filter="(uid=<USER.1>)" attrs="dn "
 [31/Jan/2014:11:13:33 -0500] - SERVER_OP  - INFO  - conn=nnnnnn op=1 SEARCH RESPONSE err=0 msg="" nentries=1 s_msgid=388 s_conn=<DS> etime=0 [Thread Worker Thread 48]
 [31/Jan/2014:11:13:33 -0500] - OPERATION  - INFO  - conn=nnnnnn op=1 SEARCH RESPONSE err=0 msg="" nentries=1 etime=3 [Thread Worker Thread 48]
 [31/Jan/2014:11:13:33 -0500] - OPERATION  - INFO  - conn=nnnnnn DISCONNECT [Thread Worker Thread 32]
 [31/Jan/2014:11:13:33 -0500] - DISCONNECT - INFO  - conn=nnnnnn reason="other" msg="Exception caught while polling client connection LDAPS.127.0.0.1.62188 -- java.io.IOException: Received CLOSED during initial handshaking".

Changes

 

Cause

To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!


In this Document
Symptoms
Changes
Cause
Solution


My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.