ODSEE - "Inbound Closed Before Receiving Peer's Close_notify: Possible Truncation Attack?"
(Doc ID 1645925.1)
Last updated on MAY 16, 2023
Applies to:
Oracle Directory Server Enterprise Edition - Version 6.3 SP1 to 11.1.1.7.1 [Release 6.0 to 11gR1]Information in this document applies to any platform.
Symptoms
On a busy server many connections show an error upon closing an SSL or StartTLS connection.
For example the following was seen on DPS 11.1.1.7.0 but any version can be affected up to 11.1.1.7.1:
[31/Jan/2014:11:13:33 -0500] - PROFILE - INFO - conn=nnnnnn assigned to connection handler cn=Example_conn_handler,cn=connection handlers,cn=config
[31/Jan/2014:11:13:33 -0500] - CONNECT - INFO - conn=nnnnnn client=<CLIENT_IP>:<PORT> server=<SERVER_IP>:<PORT> protocol=LDAP
[31/Jan/2014:11:13:33 -0500] - OPERATION - INFO - conn=nnnnnn op=0 EXTENDED oid="1.3.6.1.4.1.1466.20037" [Thread Worker Thread 94]
[31/Jan/2014:11:13:33 -0500] - OPERATION - INFO - conn=nnnnnn op=0 EXTENDED RESPONSE err=0 msg="" etime=1 [Thread Worker Thread 94]
[31/Jan/2014:11:13:33 -0500] - OPERATION - INFO - conn=nnnnnn op=1 msgid=2 SEARCH base="dc=<SUFFIX_DN>" scope=2 controls="" filter="(uid=<USER.1>)" attrs="dn " [Thread Worker Thread 48]
[31/Jan/2014:11:13:33 -0500] - SERVER_OP - INFO - conn=nnnnnn op=1 SEARCH base="dc=<SUFFIX_DN>" scope=2 filter="(uid=<USER.1>)" attrs="dn "
[31/Jan/2014:11:13:33 -0500] - SERVER_OP - INFO - conn=nnnnnn op=1 SEARCH RESPONSE err=0 msg="" nentries=1 s_msgid=388 s_conn=<DS> etime=0 [Thread Worker Thread 48]
[31/Jan/2014:11:13:33 -0500] - OPERATION - INFO - conn=nnnnnn op=1 SEARCH RESPONSE err=0 msg="" nentries=1 etime=3 [Thread Worker Thread 48]
[31/Jan/2014:11:13:33 -0500] - OPERATION - INFO - conn=nnnnnn DISCONNECT [Thread Worker Thread 32]
[31/Jan/2014:11:13:33 -0500] - DISCONNECT - INFO - conn=nnnnnn reason="other" msg="Exception caught while polling client connection LDAPS.127.0.0.1.62188 -- java.io.IOException: Received CLOSED during initial handshaking".
Changes
Cause
To view full details, sign in with your My Oracle Support account. |
|
Don't have a My Oracle Support account? Click to get started! |
In this Document
Symptoms |
Changes |
Cause |
Solution |