My Oracle Support Banner

SSL Connection Is Not Getting Terminated When Calling Web Service From Oracle API Gateway (Doc ID 1671976.1)

Last updated on SEPTEMBER 08, 2017

Applies to:

Oracle API Gateway - Version 11.1.2 and later
Information in this document applies to any platform.

Symptoms

 

Using the 11.1.2 version of Oracle API Gateway.

OAG is accessing a web service virtualized using the Connection Filter which is connecting to an end service through SSL.
The appropriate certificate is imported, but sometimes connectivity works,and other times, it fails similar to what is indicated in the next trace section:

ERROR

DEBUG  new server transaction 0x7fca497d8790
DEBUG  add header Date:Mon, 10 Mar 2014 14:02:19 GMT
DEBUG  add header Content-Type:text/xml; charset=utf-8
DEBUG  add header SOAPAction:"/Processes/UserAgentProvAssn_WS/Starter/UserAgentProvAssn_Starter"
DEBUG  add header User-Agent:Java1.6.0_29
DEBUG  add header Host:host:7777
DEBUG  add header Accept:text/html, image/gif, image/jpeg, */*; q=.2
DEBUG  add header Connection:Keep-Alive
DEBUG  Incoming HTTP request: method=POST, host=(unset), port=(unset), path=/MITS/UserAgentProv, query=(unset), version=1.1
DEBUG  using handler at UserAgentProvAssnWS
DEBUG  attaching current thread to VM
DEBUG  done: env=0x3c831d0
DEBUG  Adding MessageListener: com.vordel.circuit.FilterPathTracker@4b0ab323
DEBUG  Adding MessageListener: com.vordel.reporting.rtm.RealtimeMonitoring$1$1@53069707
DEBUG  handle type text/xml with factory class com.vordel.mime.XMLBody$Factory
DEBUG  Adding MessageListener: com.vordel.dwe.TrafficMonitorMessageListener@71fca778
DEBUG  Circuit reference [Global Request Policy] empty - ignoring
DEBUG  Circuit reference [Custom Request Policy] is not enabled - ignoring
DEBUG  Circuit reference [Path Specific Policy] valid and enabled - calling
DEBUG  run circuit "/MITS/UserAgentProv"...
DEBUG  run filter [Service Handler for 'UserAgentProvAssnWS'] {
DEBUG  Set the service name to be UserAgentProvAssnWS
DEBUG  Adding MessageListener: com.vordel.circuit.ws.ServiceContextProcessor$1@55a57726
DEBUG  Setting webservice context
DEBUG  Set the Web Service context to be UserAgentProvAssnWS
DEBUG  parsing XML body from input stream of type com.vordel.dwe.InputStream. ContentSource is of type HTTP server transaction
DEBUG  Setting SOAP Version to SOAP 1.1
DEBUG  Calling the Operation Processor Chain [1. Request from Client]...
DEBUG  run filter [1. Request from Client] {
DEBUG  Found match for Operation '{http://testing.com/UserAgentProvAssnRequestResponse}UserAgentProvAssnRequest'
DEBUG  Doing Schema Validation...
DEBUG  [Schema Validation Filter] {
DEBUG  Looking up 'http://testing.com/UserAgentProvAssnRequestResponse' in schema container
DEBUG  Found schema : http://testing.com/UserAgentProvAssnRequestResponse
DEBUG  Setting the following Xerces features:
DEBUG  [ http://apache.org/xml/features/calculate-src-ofs : 0 ]
DEBUG  [ http://apache.org/xml/features/continue-after-fatal-error : 0 ]
DEBUG  [ http://apache.org/xml/features/disable-default-entity-resolution : 0 ]
DEBUG  [ http://apache.org/xml/features/generate-synthetic-annotations : 0 ]
DEBUG  [ http://apache.org/xml/features/nonvalidating/load-external-dtd : 1 ]
DEBUG  [ http://apache.org/xml/features/schema/ignore-annotations : 0 ]
DEBUG  [ http://apache.org/xml/features/standard-uri-conformant : 0 ]
DEBUG  [ http://apache.org/xml/features/validate-annotations : 0 ]
DEBUG  [ http://apache.org/xml/features/validating/load-schema : 0 ]
DEBUG  [ http://apache.org/xml/features/validation-error-as-fatal : 1 ]
DEBUG  [ http://apache.org/xml/features/validation/cache-grammarFromParse : 1 ]
DEBUG  [ http://apache.org/xml/features/validation/dynamic : 0 ]
DEBUG  [ http://apache.org/xml/features/validation/identity-constraint-checking : 1 ]
DEBUG  [ http://apache.org/xml/features/validation/ignoreCachedDTD : 0 ]
DEBUG  [ http://apache.org/xml/features/validation/schema : 1 ]
DEBUG  [ http://apache.org/xml/features/validation/schema-full-checking : 0 ]
DEBUG  [ http://apache.org/xml/features/validation/schema/skip-dtd-validation : 0 ]
DEBUG  [ http://apache.org/xml/features/validation/use-cachedGrammarInParse : 1 ]
DEBUG  [ http://xml.org/sax/features/namespace-prefixes : 1 ]
DEBUG  [ http://xml.org/sax/features/namespaces : 1 ]
DEBUG  [ http://xml.org/sax/features/validation : 1 ]
DEBUG  Loaded grammar, about to parse document...
DEBUG  ErrorCount after schema validation: 0
DEBUG  sysmem: 589832, allocs: 1557, system mallocs: 1184, deallocs=652, system frees: 0
DEBUG  } = 1, filter [Schema Validation Filter]
DEBUG  Filter [Schema Validation Filter] completes in 1 milliseconds.
DEBUG  Circuit reference [{http://testing.com/UserAgentProvAssnRequestResponse}GetUserAgentProvAssnData(SOAP 1.1)] empty - ignoring
DEBUG  } = 1, filter [1. Request from Client]
DEBUG  Filter [1. Request from Client] completes in 2 milliseconds.
DEBUG  Calling the Operation Processor Chain [3. Request to Service]...
DEBUG  run filter [3. Request to Service] {
DEBUG  Found match for Operation '{http://testing.com/UserAgentProvAssnRequestResponse}UserAgentProvAssnRequest'
DEBUG  Circuit reference [{http://testing.com/UserAgentProvAssnRequestResponse}GetUserAgentProvAssnData(SOAP 1.1)] empty - ignoring
DEBUG  } = 1, filter [3. Request to Service]
DEBUG  Filter [3. Request to Service] completes in 0 milliseconds.
DEBUG  Routing using User-specified URL...
DEBUG  URI has been set to https://myhost.com:7777/Processes/UserAgentProvAssn_WS/Starter/UserAgentProvAssn_Starter
DEBUG  Routing to endpoint with URL 'https://myhost.com:7777/Processes/UserAgentProvAssn_WS/Starter/UserAgentProvAssn_Starter'...
DEBUG  run filter [Integrated Connection Filter] {
DEBUG  get connection to host myhost.com port 7777 scheme https
DEBUG  delete client connection cache 0x66e02f0 to tibuatmod5.mits.odjfs.state.oh.us:2095
DEBUG  reuse idle SSL session 0x7fca340d4618
DEBUG  connected to xxx.xxx.xxx.xxx:7777
DEBUG  new connection 0x705d6f0, settings source service-wide defaults (allow 1.1=yes, idleTimeout=15000, activeTimeout=30000, contentLength: req=no, res=no)
DEBUG  push SSL protocol on to connection
ERROR  [SSL alert read 0x20a, 0x1120]: unexpected_message [fatal].
ERROR  [SSL_connect, 0x1120]: failed - SSLv3 read server hello A.
ERROR  transient failure connecting to remote: SSL protocol error
DEBUG  Adding MessageListener: com.vordel.circuit.net.ConnectionProcessor$1@22cbcdbe
DEBUG  connection processor made 1 attempts to transact
DEBUG  } = 0, filter [Integrated Connection Filter]
DEBUG  Filter [Integrated Connection Filter] completes in 84 milliseconds.
DEBUG  } = 0, filter [Service Handler for 'UserAgentProvAssnWS']
DEBUG  Filter [Service Handler for 'UserAgentProvAssnWS'] completes in 87 milliseconds.
ERROR  The message [Id-953c1aa6531dc5eb01400000] logged Failure at 99.99.2099 10:02:19,986 with log description: Filter failed
DEBUG  run filter [SOAP Fault] {
DEBUG  Creating a soap 1.1 fault.
DEBUG  using fault creator: class com.vordel.circuit.soap.SOAP11FaultDocumentCreator
DEBUG  policy /MITS/UserAgentProv
DEBUG  policy /MITS/UserAgentProv
DEBUG  policy /MITS/UserAgentProv
DEBUG  Pass: Schema Validation Filter
DEBUG  Pass: 1. Request from Client
DEBUG  Pass: 3. Request to Service
DEBUG  Fail: Integrated Connection Filter
DEBUG  Fail: Service Handler for 'UserAgentProvAssnWS'
DEBUG  Fail: SOAP Fault
DEBUG  } = 1, filter [SOAP Fault]
DEBUG  Filter [SOAP Fault] completes in 5 milliseconds.
DEBUG  ..."/MITS/UserAgentProv" complete.
DEBUG  Circuit reference [Custom Response Policy] is not enabled - ignoring
DEBUG  Circuit reference [Global Response Policy] empty - ignoring
DEBUG  add header Server:
DEBUG  response code: 500
DEBUG  send prologue: content length -1
DEBUG  peer can do chunking
DEBUG  add header Transfer-Encoding:chunked
DEBUG  reused connection 0x3e9df60 1 times
DEBUG  connection keepalive? 1
DEBUG  add header Connection:keep-alive
DEBUG  add header X-CorrelationID:Id-953c1aa6531dc5eb01400000 0
DEBUG  push chunked output buffer on output stack
DEBUG  server transaction 0x7fca497d8790 complete
DEBUG  delete transaction 0x7fca497d8790 on connection 0x3e9df60, audit: 0x6ff1530



Cause

To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!


In this Document
Symptoms
Cause
Solution


My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.