Forum Discussion

Tracy's avatar
Tracy
Occasional Contributor
17 years ago

SSLException bad_record_mac error when using SSLv3

Our web application is a client which communicates with a web service maintained by an external system.  When this web service upgraded their server to use SSL version 3, the client application is unable to obtain a connection.  When testing this connection using SoapUI, we are getting the same error that we are receiving in the application (Error Getting response; javax.net.ssl.SSLException: Received fatal alert: bad_record_mac.)  Would you have any idea why this would occur in SoapUI?  Any insights you can provide us will be a big help in diagnosing the connection problem in our client application.

Thanks in advance.

10 Replies

  • omatzura's avatar
    omatzura
    Super Contributor
    17 years ago
    Hi!

    hmm.. which JRE are you using with which soapUI version?

    regards,

    /Ole
    eviware.com
  • Tracy's avatar
    Tracy
    Occasional Contributor
    17 years ago
    SoapUI 2.0.2 and Java version 1.5.0_12
  • omatzura's avatar
    omatzura
    Super Contributor
    17 years ago
    Hi Tracy,

    hmm.. could you try a newer JRE just to see if that is the cause?

    regards!

    /Ole
    eviware.com
  • Tracy's avatar
    Tracy
    Occasional Contributor
    17 years ago
    Ole,

    I tried it again with JRE6 and SoapUI 2.5.1, though I am still getting the same error  .

    Tracy
  • Tracy's avatar
    Tracy
    Occasional Contributor
    17 years ago
    Ole,

    Any insights what on the problem could be?  Could it be that a new certificate is needed when the protocol on the server side is changed?

    Thanks in advance.

    Tracy
  • omatzura's avatar
    omatzura
    Super Contributor
    17 years ago
    Hi Tracy,

    I'm sorry, I don't have any deeper insights at the moment, but recreating the certificate for SSL3 sounds like a good shot!? Let me know if it helps!

    regards,

    /Ole
    eviware.com
  • omatzura's avatar
    omatzura
    Super Contributor
    17 years ago
    Hi Tracy,

    The upcoming build might fix this, I've forced enabling of SSLv3 (if it is internally supported) and all associated ciphers.. let me know!

    regards,

    /Ole
    eviware.com
  • Tracy's avatar
    Tracy
    Occasional Contributor
    17 years ago
    Hi Ole,

    What version of SSL does the current version of soapUI use and it is configurable?

    Thanks!
    Tracy
  • JimL's avatar
    JimL
    Contributor
    17 years ago
    Tracy wrote:

    Our web application is a client which communicates with a web service maintained by an external system.  When this web service upgraded their server to use SSL version 3, the client application is unable to obtain a connection.  When testing this connection using SoapUI, we are getting the same error that we are receiving in the application (Error Getting response; javax.net.ssl.SSLException: Received fatal alert: bad_record_mac.)  Would you have any idea why this would occur in SoapUI?  Any insights you can provide us will be a big help in diagnosing the connection problem in our client application.

    Thanks in advance.




    Hi,

    Sorry to jump in, but is there any chance that other end is using OpenSSL 0.97b:

    http://www.apsis.ch/pound/pound_list/ar ... 2759894000

    ??

    Jim
  • vibhu's avatar
    vibhu
    New Contributor
    13 years ago
    I also have same issue on SOAPUI Pro 4.5.1.1-SNAPSHOT. To me it looks like a bug..

    Tue Aug 14 14:21:29 IST 2012:ERROR:javax.net.ssl.SSLException: Received fatal alert: bad_record_mac
    javax.net.ssl.SSLException: Received fatal alert: bad_record_mac
    at sun.security.ssl.Alerts.getSSLException(Unknown Source)
    at sun.security.ssl.Alerts.getSSLException(Unknown Source)
    at sun.security.ssl.SSLSocketImpl.recvAlert(Unknown Source)
    at sun.security.ssl.SSLSocketImpl.readRecord(Unknown Source)
    at sun.security.ssl.SSLSocketImpl.performInitialHandshake(Unknown Source)
    at sun.security.ssl.SSLSocketImpl.writeRecord(Unknown Source)
    at sun.security.ssl.AppOutputStream.write(Unknown Source)