Exception in thread "main" javax.net.ssl.SSLException: readHandshakeRecord about tsunami-security-scanner HOT 9 CLOSED

Hi, I cannot reproduce it on my kali x86 box either. So this might be an ARM specific problem. I don't have an ARM device available now for triaging so I'll keep this open until we have a fix for ARM.

from tsunami-security-scanner.

Hi, thanks for reporting this issue. In order for us to reproduce this, can you please let us know the versions of gradle and java and the OS of your host?

gradle -v

java -version

from tsunami-security-scanner.

it seems Im missing gradle, I will install it and let you know if now it works fine

java -version
openjdk version "11.0.7-ea" 2020-04-14
OpenJDK Runtime Environment (build 11.0.7-ea+9-post-Debian-1)
OpenJDK Zero VM (build 11.0.7-ea+9-post-Debian-1, interpreted mode)

gradle -v
-bash: gradle: command not found

from tsunami-security-scanner.

Well, Im on Kali P4wnP1 ALOA
root@kali
'---------
OS: Kali GNU/Linux Rolling armv6l
Host: Raspberry Pi Zero W Rev 1.1
Kernel: 4.14.80-Re4son+
Uptime: 2 days, 2 hours, 33 mins
Packages: 1150 (dpkg)
Shell: bash 5.0.16
Terminal: /dev/pts/0
CPU: BCM2835 (1) @ 1.000GHz
Memory: 51MiB / 433MiB

and I just installed using this tutorial https://www.howtoforge.com/how-to-install-gradle-on-ubuntu-1804/
so my output for gradle -v

'------------------------------------------------------------
Gradle 4.4.1
'------------------------------------------------------------

Build time: 2012-12-21 00:00:00 UTC
Revision: none

Groovy: 2.4.17
Ant: Apache Ant(TM) version 1.10.8 compiled on January 8 1970
JVM: 11.0.7-ea (Debian 11.0.7-ea+9-post-Debian-1)
OS: Linux 4.14.80-Re4son+ arm

But im still having the same error:
Exception in thread "main" javax.net.ssl.SSLException: readHandshakeRecord

I guess, my gradle 4.4.1 is too old? (2012)

from tsunami-security-scanner.

Ok now i have Gradle 6.5

Welcome to Gradle 6.5!

Here are the highlights of this release:

• Experimental file-system watching
• Improved version ordering
• New samples

For more details see https://docs.gradle.org/6.5/release-notes.html
'------------------------------------------------------------
Gradle 6.5
'------------------------------------------------------------

Build time: 2020-06-02 20:46:21 UTC
Revision: a27f41e4ae5e8a41ab9b19f8dd6d86d7b384dad4

Kotlin: 1.3.72
Groovy: 2.5.11
Ant: Apache Ant(TM) version 1.10.7 compiled on September 1 2019
JVM: 11.0.7-ea (Debian 11.0.7-ea+9-post-Debian-1)
OS: Linux 4.14.80-Re4son+ arm

but im still having the same error message

Exception in thread "main" javax.net.ssl.SSLException: readHandshakeRecord
at java.base/sun.security.ssl.SSLSocketImpl.readHandshakeRecord(SSLSocketImpl.java:1064)
at java.base/sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:395)
at java.base/sun.net.www.protocol.https.HttpsClient.afterConnect(HttpsClient.java:567)
at java.base/sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.connect(AbstractDelegateHttpsURLConnection.java:185)
at java.base/sun.net.www.protocol.http.HttpURLConnection.getInputStream0(HttpURLConnection.java:1587)
at java.base/sun.net.www.protocol.http.HttpURLConnection.getInputStream(HttpURLConnection.java:1515)
at java.base/sun.net.www.protocol.https.HttpsURLConnectionImpl.getInputStream(HttpsURLConnectionImpl.java:250)
at org.gradle.wrapper.Download.downloadInternal(Download.java:67)
at org.gradle.wrapper.Download.download(Download.java:52)
at org.gradle.wrapper.Install$1.call(Install.java:62)
at org.gradle.wrapper.Install$1.call(Install.java:48)
at org.gradle.wrapper.ExclusiveFileAccessManager.access(ExclusiveFileAccessManager.java:69)
at org.gradle.wrapper.Install.createDist(Install.java:48)
at org.gradle.wrapper.WrapperExecutor.execute(WrapperExecutor.java:107)
at org.gradle.wrapper.GradleWrapperMain.main(GradleWrapperMain.java:62)
Suppressed: java.net.SocketException: Broken pipe (Write failed)
at java.base/java.net.SocketOutputStream.socketWrite0(Native Method)
at java.base/java.net.SocketOutputStream.socketWrite(SocketOutputStream.java:110)
at java.base/java.net.SocketOutputStream.write(SocketOutputStream.java:150)
at java.base/sun.security.ssl.SSLSocketOutputRecord.encodeAlert(SSLSocketOutputRecord.java:81)
at java.base/sun.security.ssl.TransportContext.fatal(TransportContext.java:351)
at java.base/sun.security.ssl.TransportContext.fatal(TransportContext.java:263)
at java.base/sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:398)
... 13 more
Caused by: java.net.SocketException: Broken pipe (Write failed)
at java.base/java.net.SocketOutputStream.socketWrite0(Native Method)
at java.base/java.net.SocketOutputStream.socketWrite(SocketOutputStream.java:110)
at java.base/java.net.SocketOutputStream.write(SocketOutputStream.java:150)
at java.base/sun.security.ssl.SSLSocketOutputRecord.encodeChangeCipherSpec(SSLSocketOutputRecord.java:221)
at java.base/sun.security.ssl.OutputRecord.changeWriteCiphers(OutputRecord.java:162)
at java.base/sun.security.ssl.ChangeCipherSpec$T10ChangeCipherSpecProducer.produce(ChangeCipherSpec.java:118)
at java.base/sun.security.ssl.Finished$T12FinishedProducer.onProduceFinished(Finished.java:395)
at java.base/sun.security.ssl.Finished$T12FinishedProducer.produce(Finished.java:379)
at java.base/sun.security.ssl.SSLHandshake.produce(SSLHandshake.java:436)
at java.base/sun.security.ssl.ServerHelloDone$ServerHelloDoneConsumer.consume(ServerHelloDone.java:182)
at java.base/sun.security.ssl.SSLHandshake.consume(SSLHandshake.java:392)
at java.base/sun.security.ssl.HandshakeContext.dispatch(HandshakeContext.java:443)
at java.base/sun.security.ssl.HandshakeContext.dispatch(HandshakeContext.java:421)
at java.base/sun.security.ssl.TransportContext.dispatch(TransportContext.java:177)
at java.base/sun.security.ssl.SSLTransport.decode(SSLTransport.java:164)
at java.base/sun.security.ssl.SSLSocketImpl.decode(SSLSocketImpl.java:1144)
at java.base/sun.security.ssl.SSLSocketImpl.readHandshakeRecord(SSLSocketImpl.java:1055)
... 14 more

from tsunami-security-scanner.

Ok, I got it running on my x86 kali machine with no problems, so it seems its a problem on my ARM kali machine.

I dont know what else can be

from tsunami-security-scanner.

I got the same exception. The reasion of my case is that the time difference between client and server is 22 years. Hope this can help you.

from tsunami-security-scanner.

Hi,

I am triaging the issue list and I think this might be obsolete. Feel free to reopen if this is still an issue.

~tooryx

from tsunami-security-scanner.

from tsunami-security-scanner.