[NET-687] [FTPS] javax.net.ssl.SSLException: Unsupported or unrecognized SSL message

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 3.7
• Fix Version/s: 3.7.1
• Component/s: FTP

Environment

Tested with JDK 8, 11, 13, 14

• External issue ID: NET-408
• Assignee: Unassigned
• Reporter: Mikael
• Created: 27/Aug/20 10:36
• Updated: 03/Oct/21 15:39
• Resolved: 20/Sep/20 16:29

Description

After adding the self signed polynesie.cer certificate to JVM security (jdk-x.x.x/lib/security) :

keytool.exe -import -storepass "changeit" -keystore "./cacerts" -alias polynesie.cer -file ./polynesie.cer -noprompt

 polynesie.cer obtained by copying certificate part from this command line result :

openssl s_client -connect ftp0.gov.pf:21 -starttls ftp

Trying to retrieve a file with ftpes :

java -cp commons-net-examples-3.5.jar;commons-net-3.5.jar examples/ftp/FTPClientExample -A -p TLS,false -e -b ftp0.gov.pf DataVRS/fiche_Station_VRS_VAI1.pdf fiche_Station_VRS_VAI1.pdf

Produce this exception :

javax.net.ssl.SSLException: Unsupported or unrecognized SSL message
        at java.base/sun.security.ssl.SSLSocketInputRecord.handleUnknownRecord(Unknown Source)
        at java.base/sun.security.ssl.SSLSocketInputRecord.decode(Unknown Source)
        at java.base/sun.security.ssl.SSLSocketImpl.readRecord(Unknown Source)
        at java.base/sun.security.ssl.SSLSocketImpl.readRecord(Unknown Source)
        at java.base/sun.security.ssl.SSLSocketImpl.performInitialHandshake(Unknown Source)
        at java.base/sun.security.ssl.SSLSocketImpl.startHandshake(Unknown Source)
        at java.base/sun.security.ssl.SSLSocketImpl.startHandshake(Unknown Source)
        at org.apache.commons.net.ftp.FTPSClient._openDataConnection_(FTPSClient.java:642)
        at org.apache.commons.net.ftp.FTPClient._retrieveFile(FTPClient.java:1907)
        at org.apache.commons.net.ftp.FTPClient.retrieveFile(FTPClient.java:1893)
        at testFTP2.FTPClientExample.main(FTPClientExample.java:513)

It is probably the same error of ssl_reuse session as NET-408.

Same try with ftp4j library reports this error :

code=522, message= SSL connection failed; session reuse required: see require_ssl_reuse option in vsftpd.conf man page

 

Issue Links

• links to: GitHub Pull Request #59