Hi,
What could be the root cause for this error in Aerogear UPS: Error sending payload to APNs server: javax.net.ssl.SSLException: Received fatal alert: internal_error ? Certs were managed by another group in the company. How can I prove to them that this is a certificate issue (not generated in Apple for push correctly)? It failed when Apple does not like this .p12 cert. (it's freshly generated so it should not expire) TIA. |
Is there any stacktrace? The javax.net.debug property can be used to enable debug logging within JSSE. Examples: -Djavax.net.debug=all or -Djavax.net.debug=ssl:handshake:verbose Please note that this could produce large amount of logs so you may use it wisely. On Wed, 16 Aug 2017 at 18:30, jeff01 <[hidden email]> wrote: Hi, _______________________________________________ Aerogear-users mailing list [hidden email] https://lists.jboss.org/mailman/listinfo/aerogear-users |
This post was updated on .
Thanks Tolis.
Here is part of messages, let me know if you need more detailed info: ( BTW, this is UPS 1.1.0-final on JBoss AS 6.4) 2017-08-11 13:52:24,584 ERROR [com.notnoop.apns.internal.ApnsConnectionImpl] (Thread-3359 (HornetQ-client-global-threads-939513534)) Couldn't send message after 3 retries.Message(Id=1; Token=9410609E...C463; Payload={"aps":{"alert":{"body":"testing2","title":null,"action":null,"title-loc-key":null},"sound":"default","url-args":null},"aerogear-push-id":"41...aa-f3b7f13fcbe4"}): javax.net.ssl.SSLException: Received fatal alert: internal_error at sun.security.ssl.Alerts.getSSLException(Alerts.java:208) [jsse.jar:1.7.0_141] at sun.security.ssl.Alerts.getSSLException(Alerts.java:154) [jsse.jar:1.7.0_141] at sun.security.ssl.SSLSocketImpl.recvAlert(SSLSocketImpl.java:1989) [jsse.jar:1.7.0_141] at sun.security.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:1096) [jsse.jar:1.7.0_141] at sun.security.ssl.SSLSocketImpl.performInitialHandshake(SSLSocketImpl.java:1342) [jsse.jar:1.7.0_141] at sun.security.ssl.SSLSocketImpl.writeRecord(SSLSocketImpl.java:719) [jsse.jar:1.7.0_141] at sun.security.ssl.AppOutputStream.write(AppOutputStream.java:122) [jsse.jar:1.7.0_141] at java.io.OutputStream.write(OutputStream.java:75) [rt.jar:1.7.0_141] at com.notnoop.apns.internal.ApnsConnectionImpl.sendMessage(ApnsConnectionImpl.java:328) [apns-1.0.0.Beta6.jar:] at com.notnoop.apns.internal.ApnsConnectionImpl.sendMessage(ApnsConnectionImpl.java:312) [apns-1.0.0.Beta6.jar:] at com.notnoop.apns.internal.ApnsServiceImpl.push(ApnsServiceImpl.java:46) [apns-1.0.0.Beta6.jar:] at com.notnoop.apns.internal.AbstractApnsService.push(AbstractApnsService.java:102) [apns-1.0.0.Beta6.jar:] at com.notnoop.apns.internal.ApnsServiceImpl.push(ApnsServiceImpl.java:36) [apns-1.0.0.Beta6.jar:] at org.jboss.aerogear.unifiedpush.message.sender.APNsPushNotificationSender.sendPushMessage(APNsPushNotificationSender.java:171) [unifiedpush-push-sender-1.1.0.Final.jar:1.1.0.Final] at org.jboss.aerogear.unifiedpush.message.NotificationDispatcher.sendMessagesToPushNetwork(NotificationDispatcher.java:72) [unifiedpush-push-sender-1.1.0.Final.jar:1.1.0.Final] at sun.reflect.GeneratedMethodAccessor550.invoke(Unknown Source) [:1.7.0_141] at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) [rt.jar:1.7.0_141] at java.lang.reflect.Method.invoke(Method.java:606) [rt.jar:1.7.0_141] at org.jboss.as.ee.component.ManagedReferenceMethodInterceptor.processInvocation(ManagedReferenceMethodInterceptor.java:52) [jboss-as-ee-7.5.0.Final-redhat-21.jar:7.5.0.Final-redhat-21] at org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:288) [jboss-invocation-1.1.2.Final-redhat-1.jar:1.1.2.Final-redhat-1] at org.jboss.invocation.WeavedInterceptor.processInvocation(WeavedInterceptor.java:53) [jboss-invocation-1.1.2.Final-redhat-1.jar:1.1.2.Final-redhat-1] at org.jboss.as.ee.component.interceptors.UserInterceptorFactory$1.processInvocation(UserInterceptorFactory.java:63) [jboss-as-ee-7.5.0.Final-redhat-21.jar:7.5.0.Final-redhat-21] at org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:288) [jboss-invocation-1.1.2.Final-redhat-1.jar:1.1.2.Final-redhat-1] at org.jboss.invocation.InterceptorContext$Invocation.proceed(InterceptorContext.java:374) [jboss-invocation-1.1.2.Final-redhat-1.jar:1.1.2.Final-redhat-1] at org.jboss.as.weld.ejb.Jsr299BindingsInterceptor.doMethodInterception(Jsr299BindingsInterceptor.java:86) [jboss-as-weld-7.5.0.Final-redhat-21.jar:7.5.0.Final-redhat-21] at org.jboss.as.weld.ejb.Jsr299BindingsInterceptor.processInvocation(Jsr299BindingsInterceptor.java:97) [jboss-as-weld-7.5.0.Final-redhat-21.jar:7.5.0.Final-redhat-21] at org.jboss.as.ee.component.interceptors.UserInterceptorFactory$1.processInvocation(UserInterceptorFactory.java:63) [jboss-as-ee-7.5.0.Final-redhat-21.jar:7.5.0.Final-redhat-21] at org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:288) [jboss-invocation-1.1.2.Final-redhat-1.jar:1.1.2.Final-redhat-1] at org.jboss.invocation.WeavedInterceptor.processInvocation(WeavedInterceptor.java:53) [jboss-invocation-1.1.2.Final-redhat-1.jar:1.1.2.Final-redhat-1] at org.jboss.as.ee.component.interceptors.UserInterceptorFactory$1.processInvocation(UserInterceptorFactory.java:63) [jboss-as-ee-7.5.0.Final-redhat-21.jar:7.5.0.Final-redhat-21] at org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:288) [jboss-invocation-1.1.2.Final-redhat-1.jar:1.1.2.Final-redhat-1] at org.jboss.as.ejb3.component.invocationmetrics.ExecutionTimeInterceptor.processInvocation(ExecutionTimeInterceptor.java:43) [jboss-as-ejb3-7.5.0.Final-redhat-21.jar:7.5.0.Final-redhat-21] at org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:288) [jboss-invocation-1.1.2.Final-redhat-1.jar:1.1.2.Final-redhat-1] at org.jboss.as.jpa.interceptor.SBInvocationInterceptor.processInvocation(SBInvocationInterceptor.java:47) [jboss-as-jpa-7.5.0.Final-redhat-21.jar:7.5.0.Final-redhat-21] at org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:288) [jboss-invocation-1.1.2.Final-redhat-1.jar:1.1.2.Final-redhat-1] at org.jboss.as.weld.ejb.EjbRequestScopeActivationInterceptor.processInvocation(EjbRequestScopeActivationInterceptor.java:73) [jboss-as-weld-7.5.0.Final-redhat-21.jar:7.5.0.Final-redhat-21] at org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:288) [jboss-invocation-1.1.2.Final-redhat-1.jar:1.1.2.Final-redhat-1] at org.jboss.invocation.InitialInterceptor.processInvocation(InitialInterceptor.java:21) [jboss-invocation-1.1.2.Final-redhat-1.jar:1.1.2.Final-redhat-1] at org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:288) [jboss-invocation-1.1.2.Final-redhat-1.jar:1.1.2.Final-redhat-1] at org.jboss.invocation.ChainedInterceptor.processInvocation(ChainedInterceptor.java:61) [jboss-invocation-1.1.2.Final-redhat-1.jar:1.1.2.Final-redhat-1] at org.jboss.as.ee.component.interceptors.ComponentDispatcherInterceptor.processInvocation(ComponentDispatcherInterceptor.java:53) [jboss-as-ee-7.5.0.Final-redhat-21.jar:7.5.0.Final-redhat-21] |
In reply to this post by jeff01
Hello!
How to ask something here, guys? Maybe something like slack channel have? 2017-08-16 21:26 GMT+06:00 jeff01 <[hidden email]>: Hi, _______________________________________________ Aerogear-users mailing list [hidden email] https://lists.jboss.org/mailman/listinfo/aerogear-users |
In reply to this post by jeff01
com.notnoop.apns.internal. Ah, that's an "older" APNs lib we use, what version are you on ? On Wed, Aug 16, 2017 at 11:57 PM, jeff01 <[hidden email]> wrote: Thanks Tolis. Matthias Wessendorf blog: http://matthiaswessendorf.wordpress.com/ twitter: http://twitter.com/mwessendorf _______________________________________________ Aerogear-users mailing list [hidden email] https://lists.jboss.org/mailman/listinfo/aerogear-users |
IRC see aerogear.org On Thu, Aug 17, 2017 at 7:42 AM, Matthias Wessendorf <[hidden email]> wrote:
Matthias Wessendorf blog: http://matthiaswessendorf.wordpress.com/ twitter: http://twitter.com/mwessendorf _______________________________________________ Aerogear-users mailing list [hidden email] https://lists.jboss.org/mailman/listinfo/aerogear-users |
This post was updated on .
In reply to this post by Matthias Wessendorf
Thanks for the reply. We are using Aerogear UPS 1.1.0-final on JBoss AS 6.4.
|
Is there a quick and dirty way to test apns using .p12 cert? In Aerogear UPS, when it tries to send push to apns, does it actually use .p12 cert to apns, or convert it to .crt or .cer when communicating to apns?
I found some easy test tool from AppStore in mac, it uses only .crt or .cer to send push to apns. Can anyone here confirm? Thank you. |
Hey Jeff,
On Tue, Aug 29, 2017 at 4:19 AM, jeff01 <[hidden email]> wrote: Is there a quick and dirty way to test apns using .p12 cert? as in code ? Sure, you can directly implement a quick test, using the lib we use: In Aerogear UPS, we use the exported .p12, like explained here:
Matthias Wessendorf blog: http://matthiaswessendorf.wordpress.com/ twitter: http://twitter.com/mwessendorf _______________________________________________ Aerogear-users mailing list [hidden email] https://lists.jboss.org/mailman/listinfo/aerogear-users |
Thanks Matthias for your reply and time. I do appreciate that.
We ran into a situation that when an app changed its app id and enterprise certs from apple, it threw the above error. No other changes to the app. Since Aerogear 1.1.0.Final uses java-apns so I used this tool to test .p12 cert. Here is what I find: In Eclipse, if I run the test program I wrote to test .p12 by sending a msg to an iphone via java-apns lib, it seems to be working, I received the message on the device - only when the JDK is 1.6. If I switch it to JDK 1.7, or 1.8, I can replicate the same error. (But the cert should be ok, I think) I ported the same test program into a server that hosts our Aerogear with JDK 1.7 installed, it failed with the same error. But I am not sure is it because JDK handles Java resouce files such as cert differently, or because of other reasons, like SSL/TLS support. .withCert("c:\\temp\\testApns\\mycert.p12",PASSWORD) For the above code, if I tweak a bit, like using .withCert("/mycert.p12",PASSWORD) even with JDK 1.6, it fails with the same error, even if I put the cert in the root folder of the jar. (so basically if it cannot find the cert, it will throw the internal error. My question is, in Aerogear UPS 1.1.0-Final, what does it exactly mean if Aerogear/java-apns spit out this error message: Error sending payload to APNs server: javax.net.ssl.SSLException: Received fatal alert: internal_error? How should we go about and troubleshoot this issue? I really appreciate it if you can shed more light on this. -- Sent from: http://aerogear-users.1116366.n5.nabble.com/ _______________________________________________ Aerogear-users mailing list [hidden email] https://lists.jboss.org/mailman/listinfo/aerogear-users |
In reply to this post by Matthias Wessendorf
Or, does this have anything to do with TLS/SSL version as discussed here?
http://aerogear-users.1116366.n5.nabble.com/Aerogear-users-AeroGear-unified-push-notification-td243.html#a247 Thank you. -- Sent from: http://aerogear-users.1116366.n5.nabble.com/ _______________________________________________ Aerogear-users mailing list [hidden email] https://lists.jboss.org/mailman/listinfo/aerogear-users |
possible, the .p12 expired? mind posting full stack trace? On Thu, 31 Aug 2017 at 06:26, jeff01 <[hidden email]> wrote: Or, does this have anything to do with TLS/SSL version as discussed here? -- Sent from Gmail Mobile
_______________________________________________ Aerogear-users mailing list [hidden email] https://lists.jboss.org/mailman/listinfo/aerogear-users |
The stack trace was included in third post here
<http://aerogear-users.1116366.n5.nabble.com/Error-sending-payload-to-APNs-server-javax-net-ssl-SSLException-Received-fatal-alert-internal-error-tp1148p1151.html> . As mentioned above, I wrote a java test program using java-apns. I used the same .p12 file and sent the push notifications to iphones successfully. So it looks the certs are ok, only it did not work from within Aerogear UPS 1.1.0.Final, which also uses java-apns to send messages to APNs. I also looked in Apple developer account and the certs all look valid. So it boils down to this, why Aerogrear threw this error but java-apns test program worked fine? What could have caused Aerogear to throw this error? I ran the Java test program successfully from Eclipse running JDK 1.6, but it fails with the same error if I swiched JDK to 1.7 or 1.8, in case this matters. -- Sent from: http://aerogear-users.1116366.n5.nabble.com/ _______________________________________________ Aerogear-users mailing list [hidden email] https://lists.jboss.org/mailman/listinfo/aerogear-users |
Just wanted to provide an update: The root cause in our case is that the p12
is incorrect, which included a personal cert in it. After it was recreated without personal cert, all is fine now. -- Sent from: http://aerogear-users.1116366.n5.nabble.com/ _______________________________________________ Aerogear-users mailing list [hidden email] https://lists.jboss.org/mailman/listinfo/aerogear-users |
Free forum by Nabble | Edit this page |