Delphix Reporting 1.5 Cannot Communicate with Delphix Engines if SHA Ciphers Have Been Disabled (KBA8255)
KBA
KBA# 8255
Issue
Delphix Reporting 1.5 cannot communicate with Delphix engines if SHA ciphers have been disabled.
The UI shows a TLS handshake_failure as per example below:
It is also possible to confirm the issue by checking the collector log file in /var/log/delphix/collector.log for the following error message/stack:
2021-11-03 07:34:14,852 [collector-<ENGINE ADDRESS>] WARN com.delphix.cm.LiveEngineCollector - Error posting to path /resources/json/delphix/session on sandro610.dcol2.delphix.com: javax.net.ssl.SSLHandshakeException: Received fatal alert: handshake_failure javax.net.ssl.SSLHandshakeException: Received fatal alert: handshake_failure at sun.security.ssl.Alerts.getSSLException(Alerts.java:192) ~[?:1.7.0_121] at sun.security.ssl.Alerts.getSSLException(Alerts.java:154) ~[?:1.7.0_121] at sun.security.ssl.SSLSocketImpl.recvAlert(SSLSocketImpl.java:1989) ~[?:1.7.0_121] at sun.security.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:1096) ~[?:1.7.0_121] at sun.security.ssl.SSLSocketImpl.performInitialHandshake(SSLSocketImpl.java:1342) ~[?:1.7.0_121] at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1369) ~[?:1.7.0_121] at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1353) ~[?:1.7.0_121] ... suppressed 14 lines at com.delphix.cm.LiveEngineCollector.postJSON(LiveEngineCollector.java:1045) [controller-collector.jar:?] at com.delphix.cm.LiveEngineCollector.createSession(LiveEngineCollector.java:1170) [controller-collector.jar:?] at com.delphix.cm.LiveEngineCollector.connect(LiveEngineCollector.java:1092) [controller-collector.jar:?] at com.delphix.cm.LiveEngineCollector.collect(LiveEngineCollector.java:511) [controller-collector.jar:?] at com.delphix.cm.LiveEngineCollector.access$100(LiveEngineCollector.java:73) [controller-collector.jar:?] at com.delphix.cm.LiveEngineCollector$1.run(LiveEngineCollector.java:378) [controller-collector.jar:?] 2021-11-03 07:34:14,871 [collector-<ENGINE ADDRESS>] WARN com.delphix.cm.LiveEngineCollector - Failed to pull data: javax.net.ssl.SSLHandshakeException: Received fatal alert: handshake_failure at sun.security.ssl.Alerts.getSSLException(Alerts.java:192) ~[?:1.7.0_121] at sun.security.ssl.Alerts.getSSLException(Alerts.java:154) ~[?:1.7.0_121] at sun.security.ssl.SSLSocketImpl.recvAlert(SSLSocketImpl.java:1989) ~[?:1.7.0_121] at sun.security.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:1096) ~[?:1.7.0_121] at sun.security.ssl.SSLSocketImpl.performInitialHandshake(SSLSocketImpl.java:1342) ~[?:1.7.0_121] at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1369) ~[?:1.7.0_121] at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1353) ~[?:1.7.0_121] ... suppressed 14 lines at com.delphix.cm.LiveEngineCollector.postJSON(LiveEngineCollector.java:1045) ~[controller-collector.jar:?] at com.delphix.cm.LiveEngineCollector.createSession(LiveEngineCollector.java:1170) ~[controller-collector.jar:?] at com.delphix.cm.LiveEngineCollector.connect(LiveEngineCollector.java:1092) ~[controller-collector.jar:?] at com.delphix.cm.LiveEngineCollector.collect(LiveEngineCollector.java:511) [controller-collector.jar:?] at com.delphix.cm.LiveEngineCollector.access$100(LiveEngineCollector.java:73) [controller-collector.jar:?] at com.delphix.cm.LiveEngineCollector$1.run(LiveEngineCollector.java:378) [controller-collector.jar:?]
Prerequisites
Delphix Reporting 1.5
Any Delphix Engine with SHA ciphers disabled
Applicable Delphix Versions
- Click here to view the versions of the Delphix engine to which this article applies
-
Major Release All Sub Releases 6.0 6.0.0.0, 6.0.1.0, 6.0.1.1, 6.0.2.0, 6.0.2.1, 6.0.3.0, 6.0.3.1, 6.0.4.0, 6.0.4.1, 6.0.4.2, 6.0.5.0, 6.0.6.0, 6.0.6.1, 6.0.7.0, 6.0.8.0, 6.0.8.1, 6.0.9.0, 6.0.10.0, 6.0.10.1 5.3
5.3.0.0, 5.3.0.1, 5.3.0.2, 5.3.0.3, 5.3.1.0, 5.3.1.1, 5.3.1.2, 5.3.2.0, 5.3.3.0, 5.3.3.1, 5.3.4.0, 5.3.5.0, 5.3.6.0, 5.3.7.0, 5.3.7.1, 5.3.8.0, 5.3.8.1, 5.3.9.0 5.2
5.2.2.0, 5.2.2.1, 5.2.3.0, 5.2.4.0, 5.2.5.0, 5.2.5.1, 5.2.6.0, 5.2.6.1
Resolution
Enable a SHA cipher to re-establish communications.
For example: TLS RSA with AES 256 CBC SHA
The issue is not present on Delphix reporting 2.0.