It's all about the answers!

Ask a question

ERR_SSL_VERSION_OR_CIPHER_MISMATCH After migrate CLM 5.0.2 to 6.0.2


Cláudio de Sá Rodrigues (28819) | asked Jul 02 '16, 11:38 p.m.
edited Jul 02 '16, 11:39 p.m.

I runs the server.startup.bat without erros during the processs,  

but i cant access public URL applications from any browser (https://caelum.pmenos.com.br:9443/jts/admin).

My intention was test the first startup of the new version before configure tomcat as windows server but not work.

The browser return this:

Could not establish a secure connection to this site
caelum.pmenos.com.br uses an incompatible protocol

ERR_SSL_VERSION_OR_CIPHER_MISMATCH

In the console the unique exception displayed is this:

INFO: Server startup in 40275 ms
java.net.ConnectException: Connection timed out: connect
        at java.net.DualStackPlainSocketImpl.connect0(Native Method)
        at java.net.DualStackPlainSocketImpl.socketConnect(DualStackPlainSocketImpl.java:91)
        at java.net.AbstractPlainSocketImpl.doConnect(AbstractPlainSocketImpl.java:370)
        at java.net.AbstractPlainSocketImpl.connectToAddress(AbstractPlainSocketImpl.java:231)
        at java.net.AbstractPlainSocketImpl.connect(AbstractPlainSocketImpl.java:213)
        at java.net.PlainSocketImpl.connect(PlainSocketImpl.java:192)
        at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:404)
        at java.net.Socket.connect(Socket.java:643)
        at java.net.Socket.connect(Socket.java:590)
        at sun.net.NetworkClient.doConnect(NetworkClient.java:193)
        at sun.net.www.http.HttpClient.openServer(HttpClient.java:462)
        at sun.net.www.http.HttpClient.openServer(HttpClient.java:557)
        at sun.net.www.http.HttpClient.<init>(HttpClient.java:226)
        at sun.net.www.http.HttpClient.New(HttpClient.java:329)
        at sun.net.www.http.HttpClient.New(HttpClient.java:347)
        at sun.net.www.protocol.http.HttpURLConnection.getNewHttpClient(HttpURLConnection.java:1011)
        at sun.net.www.protocol.http.HttpURLConnection.plainConnect(HttpURLConnection.java:990)
        at sun.net.www.protocol.http.HttpURLConnection.connect(HttpURLConnection.java:865)
        at sun.net.www.protocol.http.HttpURLConnection.getInputStream(HttpURLConnection.java:1314)
        at java.net.HttpURLConnection.getResponseCode(HttpURLConnection.java:480)
        at com.ibm.ut.help.common.web.ProxyUtil.followRedirects(ProxyUtil.java:215)
        at com.ibm.ut.help.common.web.ProxyUtil.getConnection(ProxyUtil.java:239)
        at com.ibm.ut.help.common.web.URLUtil.getConnection(URLUtil.java:44)
        at com.ibm.ut.help.common.web.URLUtil.getStream(URLUtil.java:49)
        at com.ibm.ccl.ut.help.info.entry.NavTree.categorizeTocXML(NavTree.java:246)
        at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
        at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:95)
        at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:56)
        at java.lang.reflect.Method.invoke(Method.java:620)
        at com.ibm.ccl.ut.help.info.IndexThread.run(IndexThread.java:105)

How do I solve this problem?


2 answers



permanent link
Ralph Schoon (63.4k33646) | answered Jul 03 '16, 12:57 p.m.
FORUM ADMINISTRATOR / FORUM MODERATOR / JAZZ DEVELOPER
edited Jul 03 '16, 12:57 p.m.
Install a proper self sighned certificate. there are several fixes due to SSL problems that impact old browsers and users if no valid certificate is used. SSL versions are no longer supported by browsers or servers, ciphers have been revoked.

permanent link
Donald Nong (14.5k614) | answered Jul 03 '16, 9:57 p.m.
I believe you've got the same problem as mentioned in this post.
https://jazz.net/forum/questions/204544/how-to-solve-err_ssl_version_or_cipher_mismatch-in-chrome-version-4402403155-m

All new applications (JRE, browsers and etc) come with stricter security settings and you will need to make adjustments accordingly.

The connection error that you saw is quite common, which indicates that the CLMHelp application cannot connect to ibm.com. And it has nothing to do with the issue in hand.

Your answer


Register or to post your answer.


Dashboards and work items are no longer publicly available, so some links may be invalid. We now provide similar information through other means. Learn more here.