Emails are not longer send - protocol is disabled or cipher suites are inappropriate

[pmarx]

Hi, 

we work with Fisheye 4.8.7 but since 3/7/2021 our users receiving no email notification from fisheye. We think that is a problem with TLS 1.2.

The email test result: 

"problem sending email

No appropriate protocol (protocol is disabled or cipher suites are inappropriate)
at sun.security.ssl.HandshakeContext.(HandshakeContext.java:171)
at sun.security.ssl.ClientHandshakeContext.(ClientHandshakeContext.java:98)
at sun.security.ssl.TransportContext.kickstart(TransportContext.java:220)
at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:428)
at sun.security.ssl.SSLSocketImpl.ensureNegotiated(SSLSocketImpl.java:804)"

We put the following in the fisheye OPTS already:

export FISHEYE_OPTS="-javaagent:/opt/current/tools/byteman/lib/byteman.jar=boot:/opt/current/tools/byteman/lib/byteman.jar,listener:true,script:/disksdb/fisheye-data/tls1.2/use-tls12.btm"

The result of the load rules is:

Failed to process request: java.net.ConnectException: Connection refused (Connection refused)
java.net.ConnectException: Connection refused (Connection refused)
at java.net.PlainSocketImpl.socketConnect(Native Method)
at java.net.AbstractPlainSocketImpl.doConnect(AbstractPlainSocketImpl.java:350)
at java.net.AbstractPlainSocketImpl.connectToAddress(AbstractPlainSocketImpl.java:206)
at java.net.AbstractPlainSocketImpl.connect(AbstractPlainSocketImpl.java:188)
at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:392)
at java.net.Socket.connect(Socket.java:607)
at java.net.Socket.connect(Socket.java:556)
at java.net.Socket.<init>(Socket.java:452)
at java.net.Socket.<init>(Socket.java:229)
at org.jboss.byteman.agent.submit.Submit$Comm.<init>(Submit.java:881)
at org.jboss.byteman.agent.submit.Submit.submitRequest(Submit.java:787)
at org.jboss.byteman.agent.submit.Submit.listAllRules(Submit.java:176)
at org.jboss.byteman.agent.submit.Submit.main(Submit.java:1121)

Any idea?

Thanks and regards

Phil

[Steffen Stamprath]

Please check the $JAVA_HOME/conf/security/java.security file. Search for the key "jdk.tls.disabledAlgorithms". Maybe there is a protocol you need.

In one update Java add "TLSv1, TLSv1.1". Remove this, restart.

Hope it helps!