Forum Bugs

some images are missing : - 'SSL received a record with an incorrect Message Authentication Code.'

manoju
Hi Team,

Some images are missing in the the PDF and it is happening for some images randomly but not all. It was seen some time back and it went away for a certain time period and it came back again few days back. This is the error in Prince event logger :

>> c.c.r.p.s.p.PrinceEventsLogger - 'SSL received a record with an incorrect Message Authentication Code.'


I have checked images are there and they are fetched over HTTPS from the same location but only some are missing in the PDF and it gives the above error. We are using Prince xml version 11 on Windows 7

Is it related to CSS which makes image go missing or something to do with SSL/TLS ?

Please help me with this as its going on for a long time now.


Thanks in advance
mikeday
This looks like an SSL/TLS error, could you try with Prince 12?
manoju
Thanks for the reply Mike but If it is a SSL\TLS error it should happen for every image i guess ?
Could you please suggest some possible direction/area to look at or anything that can be checked at server side ?
Thanks
mikeday
A good starting point would be to check the server logs for the images in question, and also confirm whether it happens every time for the same images or only occasionally.
manoju
We could not find anything on server logs and its been confirmed that its not happening for any particular image. An image which was missing in one pdf is rendered successfully in other pdf so there is no definite pattern or any particular image.
Will updating SSL/TLS help ?

Edited by manoju

manoju
We are trying to get the information on :

1. The version of the PrinceXml used on PDF-rendering PROD server?

2. Which package of PrinceXml is installed on server.

3. The version of operating system for PDF-rendering PROD server?

Will update as soon as we get it.

Edited by manoju

manoju
Hi Mike,

We are using following OS for PDF rendering :

1) RedHat Enterprise Linux, RHEL 7.3 (x86_64), 3.10.0-862.14.4.el7.x86_64 CSL 4.1.0

2) Prince version 11

Could you see anything ?
mikeday
What is the web server / OS for the server hosting the images?
manoju
Here are other details :

<name>CSO License</name>
<product>Prince</product>
<version>11</version>
<date>2018-04-17</date>
<option id="upgrades">20190417</option>
<option id="expires">20190417</option>

Is there anything which can be looked at ?

Edited by manoju

manoju
Images are coming through Marklogic as it saves the images in a zip file within itself and returns a url so images are not hosted anywhere.

Edited by manoju

mikeday
So the URL is to the Marklogic server?
manoju
yes it returns a json with image tag/path in it associated with an id for reference and that json is passed to prince for PDF creation
mikeday
And the image tag with the path also points back to the same server, or an external server like Amazon S3?
manoju
yes it points back to the same server.
mikeday
Can you try the Generic Linux package of Prince? This uses OpenSSL, while the Red Hat / CentOS package uses NSS, which is where the error message is coming from.