vApp 14.4.1 JCS Log getting:[JCS] [WARN] org.mortbay.jetty:115 - EXCEPTION

Products

• CA Identity Suite

Issue/Introduction

It's getting this error in the JCS logs. No impact was felt until now, but need to get rid of it.

Aug 10 13:44:39 myserver  [JCS] [WARN] org.mortbay.jetty:115 - EXCEPTION
Aug 10 13:44:39 myserver javax.net.ssl.SSLHandshakeException: Remote host terminated the handshake
Aug 10 13:44:39 myserver     at sun.security.ssl.SSLSocketImpl.handleEOF(SSLSocketImpl.java:1570)[:1.8.0_312]
Aug 10 13:44:39 myserver     at sun.security.ssl.SSLSocketImpl.decode(SSLSocketImpl.java:1400)[:1.8.0_312]
Aug 10 13:44:39 myserver     at sun.security.ssl.SSLSocketImpl.readHandshakeRecord(SSLSocketImpl.java:1300)[:1.8.0_312]
Aug 10 13:44:39 myserver     at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:435)[:1.8.0_312]
Aug 10 13:44:39 myserver     at org.mortbay.jetty.security.SslSocketConnector$SslConnection.run(SslSocketConnector.java:708)[85:org.apache.servicemix.bundles.jetty:6.1.26.1-fuse]
Aug 10 13:44:39 myserver     at org.mortbay.thread.QueuedThreadPool$PoolThread.run(QueuedThreadPool.java:582)[85:org.apache.servicemix.bundles.jetty:6.1.26.1-fuse]
Aug 10 13:44:39 Caused by: java.io.EOFException: SSL peer shut down incorrectly
Aug 10 13:44:39 myserver     at sun.security.ssl.SSLSocketInputRecord.decode(SSLSocketInputRecord.java:167)[:1.8.0_312]
Aug 10 13:44:39 myserver     at sun.security.ssl.SSLTransport.decode(SSLTransport.java:109)[:1.8.0_312]
Aug 10 13:44:39 myserver     at sun.security.ssl.SSLSocketImpl.decode(SSLSocketImpl.java:1392)[:1.8.0_312]
Aug 10 13:44:39 myserver     ... 4 more

 

 

Environment

Release : 14.4.1 CHF2

Component :JCS

Environment INFO:
 This is a vApp version 14.4.1 - PRODUCTION mode with 7 nodes
 2 - IM/IG/IP
 2 - PS/JCS
 2 - Userstore
 1 - Central Logs
 4x model name      : Intel(R) Xeon(R) Gold 6238 CPU @ 2.10GHz
 MemTotal           : 26501728 kB
 
Patches:
Virtual Appliance CHF-VA-20220428091838
Identity Manager CHF-IMS-20220422120924
Identity Governance CHF-IG-20220422125802
Identity Portal CHF-IP-20220422142634
Connector Server CHF-CS-20220512130450
Provisioning Server CHF-PS-20220426135859
User Store -
Operating System CP-OS-20220629
HF:
Identity Governance HF-IG-14.4.1-20220530155103_DE536494_33114551_001 5/30/2022 14:09  
Identity Manager HF-IMS-14.4.1-20220502123611_DE534556 7/26/2022 10:16  
Identity Manager HF-IMS-14.4.1-20220721132051_DE538603 7/26/2022 10:15
 HF-UNIVERSAL-14.4.1-1_log4jUpdate20220121 8/10/2022 10:44 
 HF-UNIVERSAL-14.4.1-1_log4jUpdate 1/7/2022 14:08
 HF-UNIVERSAL-14.4.1-1_TZDATA2022a 8/10/2022 10:39
Virtual Appliance HF-VA-14.4.1-20211203091508_AOJDK18312 1/7/2022 14:06

Resolution

SSL error happening each 5 minutes. It is identified that a monitoring tool was monitoring JCS port 20411 each 5 minutes to check if port is active or inactive it is active.
The tool is making something like a curl command to JCS port 20411.
To work around the problem the client started to monitor non-ssl port preventing the SSL exceptions.