Using JRE 1.6 and communicating over SSL with the LDAP server produces errors on using the domainutilitycmd to create domain or using the TIBCO Adapter for LDAP. Why?

Using JRE 1.6 and communicating over SSL with the LDAP server produces errors on using the domainutilitycmd to create domain or using the TIBCO Adapter for LDAP. Why?

book

Article ID: KB0094540

calendar_today

Updated On: 01-13-2017

Products Versions
TIBCO Administrator -
Not Applicable -

Description

Resolution:
Add the following parameter in the .tra file to get the SSL handshaking log:
java.property.javax.net.debug=SSL,all
If you find the following error in the SSL handshaking log:

javax.net.ssl.SSLException: Received fatal alert: bad_record_mac

You most probably encountered an known issue. Use the following workaround:
Add the property in the .tra file of the problematic utility:
java.property.TIBCO_SECURITY_VENDOR j2se

Issue/Introduction

Using JRE 1.6 and communicating over SSL with the LDAP server produces errors on using the domainutilitycmd to create domain or using the TIBCO Adapter for LDAP. Why?