[technote] Deployment manager becomes unresponsive after starting and SSLC0008E errors are found in the SystemOut.log file

Deployment manager becomes unresponsive after starting and SSLC0008E errors are found in the SystemOut.log file

Problem(Abstract)

Immediately after the deployment manager starts, and is open for e-business, you are unable to access the administrative console and you are unable to check the status of the deployment manager using the serverStatus command.

Symptom

After looking in the SystemOut.log file, the last entries written contain the following exception:

SSLHandshakeE E SSLC0008E: Unable to initialize SSL connection. Unauthorized access was denied or security settings have expired. Exception is javax.net.ssl.SSLHandshakeException: Client requested protocol Unknown 0.2 not enabled or not supported.​

Here is the description of the error in the Information Center:

SSLC0008E: Unable to initialize SSL connection. Unauthorized access was denied or security settings have expired. Exception is {0}. ​ Explanation: A new connection failed to complete a successful secure handshake.​ ​ Action: Check security settings. The certificate may have expired. Alternatively, an unauthorized client connection may have been denied. ​

Cause

After requesting a JSSE trace and the keystore and truststore used for the SSL configuration, all certificates and signers were checked and confirmed to be valid. However, the keystore did not contain a personal certificate and this caused the SSLC0008E exception.

Resolving the problem

1. A personal certificate is needed in the keystore for client SSL connections, so add the personal certificate to the keystore. The signer for this personal certificate should be added to the appropriate truststores. Manually disable security using the technote, Disabling global security.
   
2. After disabling security, the technote below will provide instructions for creating a new self-signed certificate which will address the problem of the missing personal certificate.
   Manually Replacing SSL Certificates in IBM WebSphere Application Server V6.1
   
3. After completing the preceding, enable security again.