cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
988
Views
0
Helpful
2
Replies

Can not connect to webex site

Junichi Yoshida
Level 1
Level 1

Hello WebEX tech forum staffs,

We are having a problem seeing message in below with accessing WebEX from our one click button to start linked  WebEX meeting.

https://xxxxxxxx.webex.com/WBXService/XMLService

About above URL, we are NOT able to access anymore with following error message in below.

Note that we have been able to access via through our CUCM and WebEX savvy software PACD until this August by “openConnection()”.

However we have been unable to access as we used since last August with following error message.

Would someone please give us help to answer following 3 questions?

1)Similar error message happens?

2)Why this error happens?

3)Is there any work around to avoid seeing this message?

Best regards, Kyosuke Agekura

The error message we have seen since last August is as follows.

*******************************************************************

javax.net.ssl.SSLException: Received fatal alert: protocol_version

        at sun.security.ssl.Alerts.getSSLException(Alerts.java:208)

        at sun.security.ssl.Alerts.getSSLException(Alerts.java:154)

        at sun.security.ssl.SSLSocketImpl.recvAlert(SSLSocketImpl.java:2023)

        at sun.security.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:1125)

        at sun.security.ssl.SSLSocketImpl.performInitialHandshake(SSLSocketImpl.java:1375)

        at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1403)

        at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1387)

        at sun.net.www.protocol.https.HttpsClient.afterConnect(HttpsClient.java:563)

        at sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.connect(AbstractDelegateHttpsURLConnection.java:185)

        at sun.net.www.protocol.http.HttpURLConnection.getOutputStream0(HttpURLConnection.java:1282)

        at sun.net.www.protocol.http.HttpURLConnection.getOutputStream(HttpURLConnection.java:1257)

        at sun.net.www.protocol.https.HttpsURLConnectionImpl.getOutputStream(HttpsURLConnectionImpl.java:250)

        at jp.transa.util.WebExMeetingUtility.startWebExMeeting(WebExMeetingUtility.java:49)

        at jp.transa.action.general.destination.StartWebExMeetingAction.executeTemplate(StartWebExMeetingAction.java:87)

        at jp.transa.action.AbstractBaseAction.execute(AbstractBaseAction.java:304)

        at org.apache.struts.chain.commands.servlet.ExecuteAction.execute(ExecuteAction.java:58)

        at org.apache.struts.chain.commands.AbstractExecuteAction.execute(AbstractExecuteAction.java:67)

        at org.apache.struts.chain.commands.ActionCommandBase.execute(ActionCommandBase.java:51)

        at org.apache.commons.chain.impl.ChainBase.execute(ChainBase.java:191)

        at org.apache.commons.chain.generic.LookupCommand.execute(LookupCommand.java:305)

        at org.apache.commons.chain.impl.ChainBase.execute(ChainBase.java:191)

        at org.apache.struts.chain.ComposableRequestProcessor.process(ComposableRequestProcessor.java:283)

        at org.apache.struts.action.ActionServlet.process(ActionServlet.java:1913)

        at org.apache.struts.action.ActionServlet.doPost(ActionServlet.java:462)

        at javax.servlet.http.HttpServlet.service(HttpServlet.java:650)

        at javax.servlet.http.HttpServlet.service(HttpServlet.java:731)

        at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:303)

        at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:208)

        at org.apache.tomcat.websocket.server.WsFilter.doFilter(WsFilter.java:52)

        at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:241)

        at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:208)

        at jp.transa.filter.ApplicationFilter.doFilter(ApplicationFilter.java:94)

        at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:241)

        at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:208)

        at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:220)

        at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:122)

        at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:505)

        at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:170)

        at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:103)

        at org.apache.catalina.valves.AccessLogValve.invoke(AccessLogValve.java:957)

        at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:116)

        at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:423)

        at org.apache.coyote.http11.AbstractHttp11Processor.process(AbstractHttp11Processor.java:1079)

        at org.apache.coyote.AbstractProtocol$AbstractConnectionHandler.process(AbstractProtocol.java:620)

        at org.apache.tomcat.util.net.JIoEndpoint$SocketProcessor.run(JIoEndpoint.java:318)

        at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142)

        at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617)

        at org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run(TaskThread.java:61)

        at java.lang.Thread.run(Thread.java:745)

java.lang.NullPointerException

        at jp.transa.action.general.destination.StartWebExMeetingAction.parseXml(StartWebExMeetingAction.java:137)

        at jp.transa.action.general.destination.StartWebExMeetingAction.executeTemplate(StartWebExMeetingAction.java:89)

        at jp.transa.action.AbstractBaseAction.execute(AbstractBaseAction.java:304)

        at org.apache.struts.chain.commands.servlet.ExecuteAction.execute(ExecuteAction.java:58)

        at org.apache.struts.chain.commands.AbstractExecuteAction.execute(AbstractExecuteAction.java:67)

        at org.apache.struts.chain.commands.ActionCommandBase.execute(ActionCommandBase.java:51)

        at org.apache.commons.chain.impl.ChainBase.execute(ChainBase.java:191)

        at org.apache.commons.chain.generic.LookupCommand.execute(LookupCommand.java:305)

        at org.apache.commons.chain.impl.ChainBase.execute(ChainBase.java:191)

        at org.apache.struts.chain.ComposableRequestProcessor.process(ComposableRequestProcessor.java:283)

        at org.apache.struts.action.ActionServlet.process(ActionServlet.java:1913)

        at org.apache.struts.action.ActionServlet.doPost(ActionServlet.java:462)

        at javax.servlet.http.HttpServlet.service(HttpServlet.java:650)

        at javax.servlet.http.HttpServlet.service(HttpServlet.java:731)

        at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:303)

        at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:208)

        at org.apache.tomcat.websocket.server.WsFilter.doFilter(WsFilter.java:52)

        at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:241)

        at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:208)

        at jp.transa.filter.ApplicationFilter.doFilter(ApplicationFilter.java:94)

        at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:241)

        at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:208)

        at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:220)

        at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:122)

        at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:505)

        at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:170)

        at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:103)

        at org.apache.catalina.valves.AccessLogValve.invoke(AccessLogValve.java:957)

        at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:116)

        at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:423)

        at org.apache.coyote.http11.AbstractHttp11Processor.process(AbstractHttp11Processor.java:1079)

        at org.apache.coyote.AbstractProtocol$AbstractConnectionHandler.process(AbstractProtocol.java:620)

        at org.apache.tomcat.util.net.JIoEndpoint$SocketProcessor.run(JIoEndpoint.java:318)

        at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142)

        at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617)

        at org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run(TaskThread.java:61)

        at java.lang.Thread.run(Thread.java:745)

*******************************************************************

2 Replies 2

nick.mueller
Level 6
Level 6

Do you happen to be executing this code on a Mac running OS X 10.11?  If so, read on.

Apple removed the Verisign Class 3 Public Primary Certification Authority 1024-bit root certificate in OS X release 10.11 ("El Capitan").  WebEx servers offer a chain of trust anchored by this certificate during SSL/TLS negotiation.  Thus you get errors because your OS is telling Java it cannot trust the connection because it lacks the root certificate.

When WebEx moved to VeriSign/Symantec for certificates at the beginning of the year they should have anchored their chain of trust in the VeriSign Class 3 Primary CA - G5 2048-bit root certificate, but instead chose to implement the VeriSign Class 3 Primary CA - G5 intermediate certificate that is then anchored off the VeriSign Class 3 Public Primary Certification Authority 1024-bit root.

As more OS vendors drop 1024-bit roots like the VeriSign Class 3 Public Primary Certification Authority this will become a bigger problem, until WebEx does the right thing and fixes the certificates offered by their servers.  Hopefully someone in WebEx Ops is taking this issue seriously and is developing plans to fix it.

In the interim your only real choice is to load the missing CA root into your OS.  You can find it here: https://www.symantec.com/content/en/us/enterprise/verisign/roots/Class-3-Public-Primary-Certification-Authority.pem

NPM

mifierro
Level 4
Level 4

Are you still seeing the issue, and did you try nick.mueller's suggestion?