Connection Reset Socket Exception Attempting a SOAP Connection
Problem
A connection reset socket exception is thrown when attempting to connect to SOAP.
INFO | jvm 1 | 2018/08/01 10:58:48 | SEVERE: Connection reset
INFO | jvm 1 | 2018/08/01 10:58:48 | java.net.SocketException: Connection reset
This error indicates it is attempting to use a protocol that is not supported. USxS-R will not allow SSL connections.
Solution
Add a line to the agent configuration file that configures the JVM to specify which TLS protocol version(s) should be used during https connections.
USxS SIF Agents
For the USAS and USPS SIF Agents, update the usas.conf
and usps.conf
files to include the following line
wrapper.java.additional.1=-Dhttps.protocols=TLSv1,TLSv1.1,TLSv1.2
Java 8 and SIFWorks ZIS
Installing Java 8 would also resolve this issue (Java 8 update 31+ disables SSL by default), however, at this time the certificate used by the SIFWorks ZIS is too weak for Java 8. If the SIFWorks ZIS is on the same server as the USxS SIF Agents, attempting to install Java 8 will result in handshake/certificate issues for the ZIS. Using the above configuration to define the protocols to be used with Java 7 is the preferred solution. ODE does plan to move the Data Collector and ZIS to Java 8 and redo their certificates. However, a time frame as to when to expect this to be completed is unknown.
It is recommended to use Java 8 update 152 if you intend to install Java 8 on your SIF Agent server. Higher updates of Java 8 have been known to cause communication issues with the ZIS even when the ZIS is on a separate server running Java 7.