Connection Reset Socket Exception Attempting a SOAP Connection

Problem

A connection reset socket exception is thrown when attempting to connect to SOAP.

INFO | jvm 1 | 2018/08/01 10:58:48 | SEVERE: Connection reset INFO | jvm 1 | 2018/08/01 10:58:48 | java.net.SocketException: Connection reset

This error indicates it is attempting to use a protocol that is not supported. USxS-R will not allow SSL connections. 

Solution

Add a line to the agent configuration file that configures the JVM to specify which TLS protocol version(s) should be used during https connections. 

USxS SIF Agents

For the USAS and USPS SIF Agents, update the usas.conf and usps.conf files to include the following line

wrapper.java.additional.1=-Dhttps.protocols=TLSv1,TLSv1.1,TLSv1.2



Java 8 and SIFWorks ZIS

Installing Java 8 would also resolve this issue (Java 8 update 31+ disables SSL by default), however, at this time the certificate used by the SIFWorks ZIS is too weak for Java 8.  If the SIFWorks ZIS is on the same server as the USxS SIF Agents, attempting to install Java 8 will result in handshake/certificate issues for the ZIS.  Using the above configuration to define the protocols to be used with Java 7 is the preferred solution.  ODE does plan to move the Data Collector and ZIS to Java 8 and redo their certificates.  However, a time frame as to when to expect this to be completed is unknown.

It is recommended to use Java 8 update 152 if you intend to install Java 8 on your SIF Agent server.  Higher updates of Java 8 have been known to cause communication issues with the ZIS even when the ZIS is on a separate server running Java 7.