Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-8062019

javax.net.ssl.SSLException: bad record MAC error downloading applet from https

    XMLWordPrintable

Details

    Description

      FULL PRODUCT VERSION :
      Java Plug-in 11.25.2.18
      Using JRE version 1.8.0_25-b18 Java HotSpot(TM) Client VM

      ADDITIONAL OS VERSION INFORMATION :
      Windows 7

      A DESCRIPTION OF THE PROBLEM :
      Error while downloading an applet from https web sites. Preventing applets from downloaded and run.

      This is a log of one session:

      basic: Added progress listener: sun.plugin.util.ProgressMonitorAdapter@fc1836
      security: Expected Main URL: https://apps.state.or.us/crystal_prod/core/ReportViewer.jar
      basic: Plugin2ClassLoader.addURL parent called for https://apps.state.or.us/crystal_prod/core/ReportViewer.jar
      security: Blacklist revocation check is enabled
      security: blacklist: created: NEED_LOAD, lastModified: 1413568873119
      security: blacklist: hasBeenModifiedSince 1413568873472 (we have 1413568873119)
      security: Trusted libraries list check is enabled
      network: Cache entry found [url: https://apps.state.or.us/crystal_prod/core/ReportViewer.jar, version: null] prevalidated=false/0
      cache: Adding MemoryCache entry: https://apps.state.or.us/crystal_prod/core/ReportViewer.jar
      cache: Resource https://apps.state.or.us/crystal_prod/core/ReportViewer.jar has expired.
      network: Connecting https://apps.state.or.us/crystal_prod/core/ReportViewer.jar with proxy=DIRECT
      network: Cache entry not found [url: file:/C:/Program%20Files/Java/jre1.8.0_25/lib/ext/sunec.jar, version: null]
      network: Cache entry not found [url: file:/C:/Program%20Files/Java/jre1.8.0_25/lib/ext/sunjce_provider.jar, version: null]
      network: Connecting http://apps.state.or.us:443/ with proxy=DIRECT
      security: Loading SSL Root CA certificates from C:\Program Files\Java\jre1.8.0_25\lib\security\cacerts
      security: Loaded SSL Root CA certificates from C:\Program Files\Java\jre1.8.0_25\lib\security\cacerts
      security: Obtain certificate collection in SSL Root CA certificate store
      security: Obtain certificate collection in SSL Root CA certificate store
      security: Loading certificates from Deployment session certificate store
      security: Loaded certificates from Deployment session certificate store
      security: Loading certificates from Internet Explorer ROOT certificate store
      security: Loaded certificates from Internet Explorer ROOT certificate store
      security: Loading certificates from Internet Explorer DISALLOWED certificate store
      security: Loaded certificates from Internet Explorer DISALLOWED certificate store
      security: Loaded blacklisted.certs file: C:\Users\lngo\AppData\LocalLow\Sun\Java\Deployment\security\blacklisted.certs
      security: SHA-256Certificate finger print: 867921316160D3A130CA948254AD74F543CAB4571A00A922F45C116C44ADC631
      security: Checking if certificate is in Internet Explorer DISALLOWED certificate store
      security: SHA-256Certificate finger print: 6E21876CF16347201F637A178CB42B171D52379AF7E5F5B6F6755B3EE9BB2ED4
      security: Checking if certificate is in Internet Explorer DISALLOWED certificate store
      security: SHA-256Certificate finger print: 9ACFAB7E43C8D880D06B262A94DEEEE4B4659989C3D0CAF19BAF6405E41AB7DF
      security: Checking if certificate is in Internet Explorer DISALLOWED certificate store
      security: Checking if SSL certificate is in Deployment permanent certificate store
      security: Loading certificates from Internet Explorer ROOT certificate store
      security: Loaded certificates from Internet Explorer ROOT certificate store
      security: Saving certificates in Deployment session certificate store
      security: Saved certificates in Deployment session certificate store
      network: Connecting https://apps.state.or.us/crystal_prod/core/ReportViewer.jar with proxy=DIRECT
      network: Connecting http://apps.state.or.us:443/ with proxy=DIRECT
      security: Obtain certificate collection in SSL Root CA certificate store
      security: Obtain certificate collection in SSL Root CA certificate store
      security: Loading certificates from Deployment session certificate store
      security: Loaded certificates from Deployment session certificate store
      security: SHA-256Certificate finger print: 867921316160D3A130CA948254AD74F543CAB4571A00A922F45C116C44ADC631
      security: Checking if certificate is in Internet Explorer DISALLOWED certificate store
      security: SHA-256Certificate finger print: 6E21876CF16347201F637A178CB42B171D52379AF7E5F5B6F6755B3EE9BB2ED4
      security: Checking if certificate is in Internet Explorer DISALLOWED certificate store
      security: SHA-256Certificate finger print: 9ACFAB7E43C8D880D06B262A94DEEEE4B4659989C3D0CAF19BAF6405E41AB7DF
      security: Checking if certificate is in Internet Explorer DISALLOWED certificate store
      javax.net.ssl.SSLException: bad record MAC
      at sun.security.ssl.Alerts.getSSLException(Unknown Source)
      at sun.security.ssl.SSLSocketImpl.fatal(Unknown Source)
      at sun.security.ssl.SSLSocketImpl.readRecord(Unknown Source)
      at sun.security.ssl.SSLSocketImpl.performInitialHandshake(Unknown Source)
      at sun.security.ssl.SSLSocketImpl.startHandshake(Unknown Source)
      at sun.security.ssl.SSLSocketImpl.startHandshake(Unknown Source)
      at sun.net.www.protocol.https.HttpsClient.afterConnect(Unknown Source)
      at sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.connect(Unknown Source)
      at sun.net.www.protocol.https.HttpsURLConnectionImpl.connect(Unknown Source)
      at sun.plugin.PluginURLJarFileCallBack.connect(Unknown Source)
      at sun.plugin.PluginURLJarFileCallBack.retrieve(Unknown Source)
      at sun.net.www.protocol.jar.URLJarFile.retrieve(Unknown Source)
      at sun.net.www.protocol.jar.URLJarFile.getJarFile(Unknown Source)
      at sun.net.www.protocol.jar.JarFileFactory.get(Unknown Source)
      at sun.net.www.protocol.jar.JarURLConnection.connect(Unknown Source)
      at sun.plugin.net.protocol.jar.CachedJarURLConnection.connect(Unknown Source)
      at sun.plugin.net.protocol.jar.CachedJarURLConnection.getJarFileInternal(Unknown Source)
      at sun.plugin.net.protocol.jar.CachedJarURLConnection.getJarFile(Unknown Source)
      at com.sun.deploy.security.DeployURLClassPath$JarLoader.getJarFile(Unknown Source)
      at com.sun.deploy.security.DeployURLClassPath$JarLoader.access$800(Unknown Source)
      at com.sun.deploy.security.DeployURLClassPath$JarLoader$1.run(Unknown Source)
      at java.security.AccessController.doPrivileged(Native Method)
      at com.sun.deploy.security.DeployURLClassPath$JarLoader.ensureOpen(Unknown Source)
      at com.sun.deploy.security.DeployURLClassPath$JarLoader.<init>(Unknown Source)
      at com.sun.deploy.security.DeployURLClassPath$3.run(Unknown Source)
      at java.security.AccessController.doPrivileged(Native Method)
      at com.sun.deploy.security.DeployURLClassPath.getLoader(Unknown Source)
      at com.sun.deploy.security.DeployURLClassPath.getLoader(Unknown Source)
      at com.sun.deploy.security.DeployURLClassPath.getResource(Unknown Source)
      at sun.plugin2.applet.Plugin2ClassLoader$2.run(Unknown Source)
      at sun.plugin2.applet.Plugin2ClassLoader$2.run(Unknown Source)
      at java.security.AccessController.doPrivileged(Native Method)
      at sun.plugin2.applet.Plugin2ClassLoader.findClassHelper(Unknown Source)
      at sun.plugin2.applet.Applet2ClassLoader.findClass(Unknown Source)
      at sun.plugin2.applet.Plugin2ClassLoader.loadClass0(Unknown Source)
      at sun.plugin2.applet.Plugin2ClassLoader.loadClass(Unknown Source)
      at sun.plugin2.applet.Plugin2ClassLoader.loadClass0(Unknown Source)
      at sun.plugin2.applet.Plugin2ClassLoader.loadClass(Unknown Source)
      at sun.plugin2.applet.Plugin2ClassLoader.loadClass(Unknown Source)
      at java.lang.ClassLoader.loadClass(Unknown Source)
      at sun.plugin2.applet.Plugin2ClassLoader.loadCode(Unknown Source)
      at sun.plugin2.applet.Plugin2Manager.initAppletAdapter(Unknown Source)
      at sun.plugin2.applet.Plugin2Manager$AppletExecutionRunnable.run(Unknown Source)
      at java.lang.Thread.run(Unknown Source)
      Caused by: javax.crypto.BadPaddingException: bad record MAC
      at sun.security.ssl.InputRecord.decrypt(Unknown Source)
      ... 42 more
      cache: registerReference: com.sun.deploy.cache.MemoryCache$CachedResourceReference@805ba4e4: 1
      cache: Resource https://apps.state.or.us/crystal_prod/core/ReportViewer.jar has expired.
      network: Connecting https://apps.state.or.us/crystal_prod/core/ReportViewer.jar with proxy=DIRECT
      network: Connecting http://apps.state.or.us:443/ with proxy=DIRECT
      security: Obtain certificate collection in SSL Root CA certificate store
      security: Obtain certificate collection in SSL Root CA certificate store
      security: Loading certificates from Deployment session certificate store
      security: Loaded certificates from Deployment session certificate store
      security: SHA-256Certificate finger print: 867921316160D3A130CA948254AD74F543CAB4571A00A922F45C116C44ADC631
      security: Checking if certificate is in Internet Explorer DISALLOWED certificate store
      security: SHA-256Certificate finger print: 6E21876CF16347201F637A178CB42B171D52379AF7E5F5B6F6755B3EE9BB2ED4
      security: Checking if certificate is in Internet Explorer DISALLOWED certificate store
      security: SHA-256Certificate finger print: 9ACFAB7E43C8D880D06B262A94DEEEE4B4659989C3D0CAF19BAF6405E41AB7DF
      security: Checking if certificate is in Internet Explorer DISALLOWED certificate store
      network: Connecting https://apps.state.or.us/crystal_prod/core/ReportViewer.jar with proxy=DIRECT
      network: Connecting http://apps.state.or.us:443/ with proxy=DIRECT
      security: Obtain certificate collection in SSL Root CA certificate store
      security: Obtain certificate collection in SSL Root CA certificate store
      security: Loading certificates from Deployment session certificate store
      security: Loaded certificates from Deployment session certificate store
      security: SHA-256Certificate finger print: 867921316160D3A130CA948254AD74F543CAB4571A00A922F45C116C44ADC631
      security: Checking if certificate is in Internet Explorer DISALLOWED certificate store
      security: SHA-256Certificate finger print: 6E21876CF16347201F637A178CB42B171D52379AF7E5F5B6F6755B3EE9BB2ED4
      security: Checking if certificate is in Internet Explorer DISALLOWED certificate store
      security: SHA-256Certificate finger print: 9ACFAB7E43C8D880D06B262A94DEEEE4B4659989C3D0CAF19BAF6405E41AB7DF
      security: Checking if certificate is in Internet Explorer DISALLOWED certificate store
      javax.net.ssl.SSLException: bad record MAC
      at sun.security.ssl.Alerts.getSSLException(Unknown Source)
      at sun.security.ssl.SSLSocketImpl.fatal(Unknown Source)
      at sun.security.ssl.SSLSocketImpl.readRecord(Unknown Source)
      at sun.security.ssl.SSLSocketImpl.performInitialHandshake(Unknown Source)
      at sun.security.ssl.SSLSocketImpl.startHandshake(Unknown Source)
      at sun.security.ssl.SSLSocketImpl.startHandshake(Unknown Source)
      at sun.net.www.protocol.https.HttpsClient.afterConnect(Unknown Source)
      at sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.connect(Unknown Source)
      at sun.net.www.protocol.https.HttpsURLConnectionImpl.connect(Unknown Source)
      at sun.plugin.PluginURLJarFileCallBack.connect(Unknown Source)
      at sun.plugin.PluginURLJarFileCallBack.retrieve(Unknown Source)
      at sun.net.www.protocol.jar.URLJarFile.retrieve(Unknown Source)
      at sun.net.www.protocol.jar.URLJarFile.getJarFile(Unknown Source)
      at sun.net.www.protocol.jar.JarFileFactory.get(Unknown Source)
      at sun.net.www.protocol.jar.JarURLConnection.connect(Unknown Source)
      at sun.plugin.net.protocol.jar.CachedJarURLConnection.connect(Unknown Source)
      at sun.plugin.net.protocol.jar.CachedJarURLConnection.getJarFileInternal(Unknown Source)
      at sun.plugin.net.protocol.jar.CachedJarURLConnection.getJarFile(Unknown Source)
      at com.sun.deploy.security.DeployURLClassPath$JarLoader.getJarFile(Unknown Source)
      at com.sun.deploy.security.DeployURLClassPath$JarLoader.access$800(Unknown Source)
      at com.sun.deploy.security.DeployURLClassPath$JarLoader$1.run(Unknown Source)
      at java.security.AccessController.doPrivileged(Native Method)
      at com.sun.deploy.security.DeployURLClassPath$JarLoader.ensureOpen(Unknown Source)
      at com.sun.deploy.security.DeployURLClassPath$JarLoader.<init>(Unknown Source)
      at com.sun.deploy.security.DeployURLClassPath$3.run(Unknown Source)
      at java.security.AccessController.doPrivileged(Native Method)
      at com.sun.deploy.security.DeployURLClassPath.getLoader(Unknown Source)
      at com.sun.deploy.security.DeployURLClassPath.getLoader(Unknown Source)
      at com.sun.deploy.security.DeployURLClassPath.getResource(Unknown Source)
      at sun.plugin2.applet.Plugin2ClassLoader$2.run(Unknown Source)
      at sun.plugin2.applet.Plugin2ClassLoader$2.run(Unknown Source)
      at java.security.AccessController.doPrivileged(Native Method)
      at sun.plugin2.applet.Plugin2ClassLoader.findClassHelper(Unknown Source)
      at sun.plugin2.applet.Applet2ClassLoader.findClass(Unknown Source)
      at sun.plugin2.applet.Plugin2ClassLoader.loadClass0(Unknown Source)
      at sun.plugin2.applet.Plugin2ClassLoader.loadClass(Unknown Source)
      at sun.plugin2.applet.Plugin2ClassLoader.loadClass(Unknown Source)
      at java.lang.ClassLoader.loadClass(Unknown Source)
      at sun.plugin2.applet.Plugin2ClassLoader.loadCode(Unknown Source)
      at sun.plugin2.applet.Plugin2Manager.initAppletAdapter(Unknown Source)
      at sun.plugin2.applet.Plugin2Manager$AppletExecutionRunnable.run(Unknown Source)
      at java.lang.Thread.run(Unknown Source)
      Caused by: javax.crypto.BadPaddingException: bad record MAC
      at sun.security.ssl.InputRecord.decrypt(Unknown Source)
      ... 40 more
      java.lang.ClassNotFoundException: com.inet.viewer.ViewerApplet
      at sun.plugin2.applet.Applet2ClassLoader.findClass(Unknown Source)
      at sun.plugin2.applet.Plugin2ClassLoader.loadClass0(Unknown Source)
      at sun.plugin2.applet.Plugin2ClassLoader.loadClass(Unknown Source)
      at sun.plugin2.applet.Plugin2ClassLoader.loadClass(Unknown Source)
      at java.lang.ClassLoader.loadClass(Unknown Source)
      at sun.plugin2.applet.Plugin2ClassLoader.loadCode(Unknown Source)
      at sun.plugin2.applet.Plugin2Manager.initAppletAdapter(Unknown Source)
      at sun.plugin2.applet.Plugin2Manager$AppletExecutionRunnable.run(Unknown Source)
      at java.lang.Thread.run(Unknown Source)
      basic: load: class com.inet.viewer.ViewerApplet not found.
      java.lang.ClassNotFoundException: com.inet.viewer.ViewerApplet
      at sun.plugin2.applet.Applet2ClassLoader.findClass(Unknown Source)
      at sun.plugin2.applet.Plugin2ClassLoader.loadClass0(Unknown Source)
      at sun.plugin2.applet.Plugin2ClassLoader.loadClass(Unknown Source)
      at sun.plugin2.applet.Plugin2ClassLoader.loadClass(Unknown Source)
      at java.lang.ClassLoader.loadClass(Unknown Source)
      at sun.plugin2.applet.Plugin2ClassLoader.loadCode(Unknown Source)
      at sun.plugin2.applet.Plugin2Manager.initAppletAdapter(Unknown Source)
      at sun.plugin2.applet.Plugin2Manager$AppletExecutionRunnable.run(Unknown Source)
      at java.lang.Thread.run(Unknown Source)
      security: Reset deny session certificate store
      basic: Removed progress listener: sun.plugin.util.ProgressMonitorAdapter@fc1836
      security: Reset deny session certificate store


      REGRESSION. Last worked in version 7u72

      STEPS TO FOLLOW TO REPRODUCE THE PROBLEM :
      Just download the newest version of Java and try

      EXPECTED VERSUS ACTUAL BEHAVIOR :
      EXPECTED -
      applet is downloaded and run in browser
      ACTUAL -
      applet cannot be download and run

      REPRODUCIBILITY :
      This bug can be reproduced always.

      CUSTOMER SUBMITTED WORKAROUND :
      No workaround

      Attachments

        Issue Links

          Activity

            People

              Unassigned Unassigned
              webbuggrp Webbug Group
              Votes:
              0 Vote for this issue
              Watchers:
              7 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: