25,081 questions
javax.net.ssl.SSLHandshakeException: Remote host closed connection during handshake on getting OAuth2.0 token
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(67.2, 32%, 16%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EBS%3C/text%3E%3C/svg%3E)
Bala Smart
51
Reputation points
I am using Microsoft Reporting API to get Azure AD Logon Activity. When i request access token,I am getting SSL handshake exception sometime. Sometime working fine without an issue
Url to get access token : https://login.microsoftonline.com/test.onmicrooft.com/oauth2/token?api-version=1.0
Stacktrace
[10:03:48:293]|[12-23-2020]|[SYSERR]|[INFO]|[931]: javax.net.ssl.SSLHandshakeException: Remote host closed connection during handshake|
[10:03:48:293]|[12-23-2020]|[SYSERR]|[INFO]|[931]: at sun.security.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:992)|
[10:03:48:293]|[12-23-2020]|[SYSERR]|[INFO]|[931]: at sun.security.ssl.SSLSocketImpl.performInitialHandshake(SSLSocketImpl.java:1375)|
[10:03:48:293]|[12-23-2020]|[SYSERR]|[INFO]|[931]: at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1403)|
[10:03:48:293]|[12-23-2020]|[SYSERR]|[INFO]|[931]: at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1387)|
[10:03:48:293]|[12-23-2020]|[SYSERR]|[INFO]|[931]: at sun.net.www.protocol.https.HttpsClient.afterConnect(HttpsClient.java:563)|
[10:03:48:293]|[12-23-2020]|[SYSERR]|[INFO]|[931]: at sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.connect(AbstractDelegateHttpsURLConnection.java:185)|
[10:03:48:293]|[12-23-2020]|[SYSERR]|[INFO]|[931]: at sun.net.www.protocol.http.HttpURLConnection.getOutputStream0(HttpURLConnection.java:1282)|
[10:03:48:293]|[12-23-2020]|[SYSERR]|[INFO]|[931]: at sun.net.www.protocol.http.HttpURLConnection.getOutputStream(HttpURLConnection.java:1257)|
[10:03:48:293]|[12-23-2020]|[SYSERR]|[INFO]|[931]: at sun.net.www.protocol.https.HttpsURLConnectionImpl.getOutputStream(HttpsURLConnectionImpl.java:250)|
[10:03:48:293]|[12-23-2020]|[SYSERR]|[INFO]|[931]: at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142)|
[10:03:48:293]|[12-23-2020]|[SYSERR]|[INFO]|[931]: at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617)|
[10:03:48:293]|[12-23-2020]|[SYSERR]|[INFO]|[931]: at java.lang.Thread.run(Thread.java:745)|
[10:03:48:293]|[12-23-2020]|[SYSERR]|[INFO]|[931]: Caused by: java.io.EOFException: SSL peer shut down incorrectly|
[10:03:48:293]|[12-23-2020]|[SYSERR]|[INFO]|[931]: at sun.security.ssl.InputRecord.read(InputRecord.java:505)|
[10:03:48:293]|[12-23-2020]|[SYSERR]|[INFO]|[931]: at sun.security.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:973)|
[10:03:48:293]|[12-23-2020]|[SYSERR]|[INFO]|[931]: ... 14 more|
Microsoft Security Microsoft Entra Microsoft Entra ID
{count} votes
-
JamesTran-MSFT 36,906 Reputation points Microsoft Employee Moderator2021-01-04T23:43:16.07+00:00 @Bala Smart
Thank you for your post and detailed error message!- Did this issue recently start occurring?
- You mentioned that your API call works on and off, can you share some more details on that?
- Have you changed or updated anything within your environment recently?
Based off your issue, I'd recommend following our Troubleshooting SSL related issues (Server Certificate) documentation, this will help us find where the issue is happening.
If you're still having issues after following the documentation, please let me know.
Thank you for your time and patience throughout this issue. -
Bala Smart 51 Reputation points
2021-01-05T05:11:39.243+00:00 - Yes, It's occurred from last 2 months
- Yes it works o and off based
when i run API on 10.30 it works
11.00 it's producing handshake issue
11.30 working fine
3.No, There is no change
It works sometime, So i think there is no certificate issue on my environment
Below are the SSL debug logs
th-3, setSoTimeout(0) called|
Ignoring unsupported cipher suite: TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384 for TLSv1|
.............
%% No cached client session|
*** ClientHello, TLSv1.2|
Cipher Suites: [TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384,....]|
th-3, WRITE: TLSv1.2 Handshake, length = 237|
th-3, received EOFException: error|
th-3, handling exception: javax.net.ssl.SSLHandshakeException: Remote host closed connection during handshake|
th-3|
, SEND TLSv1.2 ALERT: |
fatal, |
description = handshake_failure|
th-3, WRITE: TLSv1.2 Alert, length = 2|
th-3 closeSocket()|
th-3 close()|
th-3 closeInternal(true)|Server not returning ServerHelloDone for handshake
-
JamesTran-MSFT 36,906 Reputation points Microsoft Employee Moderator
2021-01-08T17:05:13.023+00:00 @Bala Smart
I just wanted to check in and see if you had any other questions or if you were able to resolve this issue? If you require additional support can you please respond to the private message I sent you.Thank you for your time and patience throughout this issue.
Sign in to comment
Sign in to answer