SSL debug: Sending alert: Alert Fatal: record overflow

, ,
1

Hi,

My requirement is to post the message to my partner using secure protocal https, So I have configured certificates in Admin page and posting the message using http built in service and url as [URL]https://Partnerhostname:443/servicelocation[/URL].

I have enabled SSL debug log and I can see the error message “Sending alert: Alert Fatal: record overflow”.

SSL debug log:

ssl_debug(2): Starting handshake (iSaSiLk 3.03)…
ssl_debug(2): Sending v2 client_hello message, requesting version 3.1…
ssl_debug(2): Received v3 server_hello handshake message.
ssl_debug(2): Server selected SSL version 3.1.
ssl_debug(2): Server created new session F3:25:00:00:B6:C2:96:86…
ssl_debug(2): CipherSuite selected by server: SSL_RSA_WITH_RC4_128_MD5
ssl_debug(2): CompressionMethod selected by server: NULL
ssl_debug(2): Received certificate handshake message with server certificate.
ssl_debug(2): Server sent a 512 bit RSA certificate, chain has 2 elements.
ssl_debug(2): Received server_hello_done handshake message.
ssl_debug(2): Sending client_key_exchange handshake message (512 bit)…
ssl_debug(2): Sending change_cipher_spec message…
ssl_debug(2): Sending finished message…
ssl_debug(2): Received change_cipher_spec message.
ssl_debug(2): Received finished message.
ssl_debug(2): Session added to session cache.
ssl_debug(2): Handshake completed, statistics:
ssl_debug(2): Read 2175 bytes in 3 records, wrote 118 bytes in 3 records.
ssl_debug(2): Received hello_request handshake message from server, restarting h
andshake…
ssl_debug(2): Acquiring locks for renegotiation…
ssl_debug(2): Starting renegotiation…
ssl_debug(2): Sending v3 client_hello message, requesting version 3.1…
ssl_debug(2): Trying to resume session F3:25:00:00:B6:C2:96:86…
ssl_debug(2): Sending alert: Alert Fatal: record overflow
ssl_debug(2): Shutting down SSL layer…
ssl_debug(2): Read 0 bytes in 0 records, 0 bytes net, 0 average.
ssl_debug(2): Wrote 506 bytes in 1 records, 485 bytes net, 485 average.
ssl_debug(2): SSLException while handshaking: Invalid SSL message, too long: 24790

Could any body have an idea what could be the problem.

Thanks in advance.

2

Issue got resolved. The partner is having IIS server and sending huge no of root certs list as part of SSL handshake. They removed un necessary root certs and now the packet size is less than the specified.