ERR_HTTP2_PROTOCOL_ERROR when using custom certificates in OCR

Products

• Data Loss Prevention Core Package
• Data Loss Prevention
• Data Loss Prevention Sensitive Image Recognition

Issue/Introduction

When using a custom OCR certificate, you receive the following error:
"ERR_HTTP2_PROTOCOL_ERROR"

Environment

OCR on windows 

Detection Server on Windows or Linux 

Cause

Browser is expecting to http2 protocol and is not supported by OCR services. 

 

Resolution

Check that the ocr public certificate is in the correct truststore. 

for Linux: 

1. Check the SymantecDLPDetector.conf for the wrapper.working.dir
2. Run find command to locate ocr_grpc_client_truststore.jks
   1. NOTE: if mutliples are found use the OcrDetection.properties to determine the correct folder)
3. Next import the public key from the OCR server into ocr_grpc_client_keystore.jks.
4. Restart services
5. To verify check the FileReader0.log and check for any PKI errors. 

How to verify:

Using the curl the command to test the new OCR certificate. 

curl -v --insecure https://<url of ocr server>:8555

Or using openssl client

openssl s_client -connect <ipaddress>:8555