SSL handshake errors occur during invocation of the JBoss web application server. This problem occurs when the SSLv2Hello protocol is not allowed or it is restricted.

The Apache HttpClient classes that are used by SAS to make some internal requests generate an SSLv2Hello message during the SSL handshake. This message is rejected if the SSL protocol is restricted or not allowed, (for example, if the protocol is limited to TLSv1 or higher: -Dhttps.protocols="TLSv1"). The restriction results in SSL handshake errors in the web application-server log, and SAS web applications do not initialize properly.

To work around this problem, make sure that SSLv2Hello is allowed as part of the SSL protocols. This workaround only enables the SSLv2Hello message during the handshake, but SSLv2 is not used otherwise. As an example, you can specify the following in the HTTP connector for JBoss:

This problem only affects SAS^® environments that use Java 6 or earlier. With Java 7, the SSLv2Hello protocol is no longer used.

Operating System and Release Information