Hi Team,

Some images are missing in the the PDF and it is happening for some images randomly but not all. It was seen some time back and it went away for a certain time period and it came back again few days back. This is the error in Prince event logger :

>> c.c.r.p.s.p.PrinceEventsLogger - 'SSL received a record with an incorrect Message Authentication Code.'


I have checked images are there and they are fetched over HTTPS from the same location but only some are missing in the PDF and it gives the above error. We are using Prince xml version 11 on Windows 7

Is it related to CSS which makes image go missing or something to do with SSL/TLS ?

Please help me with this as its going on for a long time now.


Thanks in advance

This looks like an SSL/TLS error, could you try with Prince 12?

Thanks for the reply Mike but If it is a SSL\TLS error it should happen for every image i guess ?
Could you please suggest some possible direction/area to look at or anything that can be checked at server side ?
Thanks

A good starting point would be to check the server logs for the images in question, and also confirm whether it happens every time for the same images or only occasionally.

We could not find anything on server logs and its been confirmed that its not happening for any particular image. An image which was missing in one pdf is rendered successfully in other pdf so there is no definite pattern or any particular image.
Will updating SSL/TLS help ?

Edited 16 May 2019 by manoju

We are trying to get the information on :

1. The version of the PrinceXml used on PDF-rendering PROD server?

2. Which package of PrinceXml is installed on server.

3. The version of operating system for PDF-rendering PROD server?

Will update as soon as we get it.

Edited 16 May 2019 by manoju

Hi Mike,

We are using following OS for PDF rendering :

1) RedHat Enterprise Linux, RHEL 7.3 (x86_64), 3.10.0-862.14.4.el7.x86_64 CSL 4.1.0

2) Prince version 11

Could you see anything ?

What is the web server / OS for the server hosting the images?

Here are other details :

<name>CSO License</name>
<product>Prince</product>
<version>11</version>
<date>2018-04-17</date>
<option id="upgrades">20190417</option>
<option id="expires">20190417</option>

Is there anything which can be looked at ?

Edited 17 May 2019 by manoju

Images are coming through Marklogic as it saves the images in a zip file within itself and returns a url so images are not hosted anywhere.

Edited 17 May 2019 by manoju

So the URL is to the Marklogic server?

yes it returns a json with image tag/path in it associated with an id for reference and that json is passed to prince for PDF creation

And the image tag with the path also points back to the same server, or an external server like Amazon S3?

yes it points back to the same server.

Can you try the Generic Linux package of Prince? This uses OpenSSL, while the Red Hat / CentOS package uses NSS, which is where the error message is coming from.