Page History
Table of Contents | ||||||||||
---|---|---|---|---|---|---|---|---|---|---|
|
Problem
If you face the error
Code Block |
---|
Exception in thread "main" java.lang.Exception: connect to database failed: Io exception: Connection reset |
...
The article explains why this happens and what you can do about it.
Entropy Pool Issues
The JDBC interface requires random numbers to encrypt the connection. Java releases before 1.12 use the /dev/random
file for a high randomness quality. However, when the entropy pool falls below the number of 64 units then /dev/random
will block while reading random numbers.
The JDBC interface might be configured to read from the file /dev/urandom
to get random numbers. The difference between the two files is that /dev/urandom
does not block if random numbers are not immediately available.
Check Entropy Pool Issues (Unix)
Check Entropy Pool Configuration
You can check available entropy pool units with the command:
...
The /dev/random
file will deliver the next random number when the pool has reached more than 64 entropy units and otherwise blocks applications from accessing the entropy pool. Such blocks can delay, for example, a JDBC connection to a database and may result in timeouts being exceeded.
Check Temporary Resolution
To verify the entropy pool being the root cause of this issue try this (requires root permission):
...
If this solves your problem then the JDBC interface was not able to get random numbers from the OS in good time. Please note that the effect of the above commands is reverted on reboot.
Monitor Entropy Pool Use
You can check the use of random numbers by running the following commands in two separate console windows:
...
Code Block | ||||
---|---|---|---|---|
| ||||
# initial test dd if=/dev/random of=/dev/null bs=1024 count=1 iflag=fullblock # full test (should rngtest be available) rngtest -c 100 </dev/random |
Resolve Entropy Pool Issues
There are two alternative solutions: modify the Java security settings or modify the JOC Cockpit settings.
Both solutions apply to Unix and Windows operating systems.
Modify Java Security Configuration
Java holds the security configuration, for example, in the ./jre/lib/security/java.security
or ./conf/security/java.security
files. You can modify this file to point to /dev/urandom
instead of /dev/random
like this:
Code Block | ||||
---|---|---|---|---|
| ||||
# original configuration # securerandom.source=file:/dev/random # updated configuration securerandom.source=file:/dev/urandom |
Modify JOC Cockpit Configuration
Installation
Should the entropy issue have occurred during installation then create or update the JAVA_OPTIONS
environment variable like this:
...
Code Block | ||||
---|---|---|---|---|
| ||||
set JAVA_OPTIONS="-Djava.security.egd=file:///dev/urandom" |
Operation
For the permanent operation of the JOC Cockpit on Unix, add the following setting to your /home/<user-account>/.jocrc
file:
...
For further information see the JS7 - How To - Apply Java Options article.
Network Issues
A wrong network configuration can cause delays when executing Java and when accessing a database - for example, if host name resolution takes too long.
For Unix check whether entries for name servers and host name resolution are correct in the /etc/resolv.conf
configuration file.
Oracle® DBMS Issues
The Oracle® FAN functionality provides enhanced high availability by allowing very fast detection of failures. However, if the FAN functionality is not set up correctly, this can result in a denial of connection although the Oracle listener is accessible, for example, by tnsping
.
...
Code Block | ||||
---|---|---|---|---|
| ||||
export JAVA_OPTIONS="-Doracle.jdbc.fanEnabled=false" |
Other Root Causes
Another possible reason for delays could be a huge number of files in /tmp
as the JDBC interface tries to list files in the /tmp
directory when SecureRandom.nextBytes(byte[])
is invoked.
...