Error - F_JG057F TLS Negotiation Failed IO Error Occurred Connection Reset by Peer

Documentation: Error - F_JG057F TLS Negotiation Failed IO Error Occurred Connection Reset by Peer

Error: F_JG057F: TLS Negotiation Failed: I/O Error Occurred: Connection Reset by Peer

Issue

The following error appears:

F_JG057F: TLS negotiation failed: I/O error occurred: Connection reset by peer.

Environment

DSS 6

Resolution

This error indicates that the DSS hub failed to establish a connection with the DSS agent listener, which operates as a systemd service.

To resolve this issue, perform the following to gather as much relevant information as possible:

  • Locate related errors in the systemd log using the following command:
    journalctl -u dss.socket
    
    Replace dss.socket with the applicable systemd unit file name if it differs.
  • Locate related error entries in the /var/log/messages directory.

There are four potential causes for this issue:

  1. Security Enhanced Linux (SELinux) is preventing the dssagentlistener binary from starting. To resolve this issue, do either of the following:
    • Adjust the SELinux context of the DSS binary files using the following command: chcon -R -t bin_t $DSS_HOME/bin/.
    • Disable SELinux by setting the SELINUX parameter to disabled in the /etc/selinux/config directory.
  2. Your systemd version is outdated. If your systemd version is lower than the version specified below, remove the applicable line from the /etc/systemd/system/dss.socket file.
    • TriggerLimitIntervalSec: Version 230 or higher.
    • TriggerLimitBurs: Version 230 or higher.
    • MaxConnectionsPerSource: Version 232 or higher.
  3. You have incorrectly specified usernames, DSS environment variables, or binary and folder paths in the /etc/systemd/system/dss service file.
  4. You have not granted the DSS user appropriate access to all files and directories in dss_home and dss_config.
  5. The number of failed or refused connection attempts exceeds the limit set by systemd. to learn more, see Error: F_JG057F: Connection Reset by Peer / Too Many Incoming Connections.