users@grizzly.java.net

Re: Need Kickstart on How-to HTTPS with PUReaderFilter and Servlet

From: John ROM <snake-john_at_gmx.de>
Date: Wed, 28 May 2008 08:29:23 +0200

Hello,
I have a test (jdk1.6.0_04) and production system (jdk1.6.0_06).
Both use same keystore.ks and truststore.p12 files.

I call both systems with the same IE Browser.

On test-system Handshake works.

On production I get a " no cipher suites in common"
when TLSPUPreProcessor calls SSLUtils.doHandshake :

  byteBuffer = SSLUtils.doHandshake(channel, byteBuffer,
                        inputBB, outputBB, sslEngine, handshakeStatus,
                        SSLUtils.getReadTimeout(), inputBB.position() > 0);
see lines underneath.

I looked at SSLEngine on production and it has the same 15 cipher suites as SSLEngine on test (SSLEngine.getEnabledCipherSuites()).

It was late last night so maybe I overlooked something.

Just wanted ask if anybody might know what actually goes wrong and what to watch out for?

Many Greeting
John
   


INFO:
     [java] Grizzly configuration for port 443
     [java] maxThreads: 5
     [java] minThreads: 5
     [java] ByteBuffer size: 8192
     [java] maxHttpHeaderSize: 8192
     [java] maxKeepAliveRequests: 256
     [java] keepAliveTimeoutInSeconds: 30
     [java] Static File Cache enabled: true
     [java] Static resources directory: C: \web
     [java] Adapter : com.sun.grizzly.http.servlet.ServletAdapter
     [java] Thread Pool (Pipeline): com.sun.grizzly.http.LinkedListPipeline
     [java] Asynchronous Request Processing enabled: false
     [java] 01:36:24.0595 28.05.2008
     [java] ************************************************************
     [java] ********** server was successfully started **********
     [java] ************************************************************

     [java] sslEngine:7f8922[SSLEngine[hostname=null port=-1] SSL_NULL_WITH_NULL_NULL]
     [java] javax.net.ssl.SSLHandshakeException:
     [java] at com.sun.net.ssl.internal.ssl.Handshaker.checkThrown(Handshaker.java:938)
     [java] at com.sun.net.ssl.internal.ssl.SSLEngineImpl.checkTaskThrown(SSLEngineImpl.java:465)
     [java] at com.sun.net.ssl.internal.ssl.SSLEngineImpl.writeAppRecord(SSLEngineImpl.java:1064)
     [java] at com.sun.net.ssl.internal.ssl.SSLEngineImpl.wrap(SSLEngineImpl.java:1036)
     [java] at javax.net.ssl.SSLEngine.wrap(SSLEngine.java:452)
     [java] at com.sun.grizzly.util.SSLUtils.wrap(SSLUtils.java:291)
     [java] at com.sun.grizzly.util.SSLUtils.doHandshake(SSLUtils.java:462)
     [java] at com.sun.grizzly.portunif.TLSPUPreProcessor.process(TLSPUPreProcessor.java:199)
     [java] at com.sun.grizzly.portunif.PUReadFilter.execute(PUReadFilter.java:180)
     [java] at com.sun.grizzly.DefaultProtocolChain.executeProtocolFilter(DefaultProtocolChain.java:137)
     [java] at com.sun.grizzly.DefaultProtocolChain.execute(DefaultProtocolChain.java:104)
     [java] at com.sun.grizzly.DefaultProtocolChain.execute(DefaultProtocolChain.java:90)
     [java] at com.sun.grizzly.http.SelectorThread$1.execute(SelectorThread.java:648)
     [java] at com.sun.grizzly.ProtocolChainContextTask.doCall(ProtocolChainContextTask.java:67)
     [java] at com.sun.grizzly.SelectionKeyContextTask.call(SelectionKeyContextTask.java:56)
     [java] at com.sun.grizzly.util.WorkerThreadImpl.run(WorkerThreadImpl.java:169)
     [java] Caused by: javax.net.ssl.SSLHandshakeException: no cipher suites in common
     [java] at com.sun.net.ssl.internal.ssl.Alerts.getSSLException(Alerts.java:174)
     [java] at com.sun.net.ssl.internal.ssl.SSLEngineImpl.fatal(SSLEngineImpl.java:1366)
     [java] at com.sun.net.ssl.internal.ssl.Handshaker.fatalSE(Handshaker.java:189)
     [java] at com.sun.net.ssl.internal.ssl.Handshaker.fatalSE(Handshaker.java:177)
     [java] at com.sun.net.ssl.internal.ssl.ServerHandshaker.chooseCipherSuite(ServerHandshaker.java:638)
     [java] at com.sun.net.ssl.internal.ssl.ServerHandshaker.clientHello(ServerHandshaker.java:425)
     [java] at com.sun.net.ssl.internal.ssl.ServerHandshaker.processMessage(ServerHandshaker.java:139)

-- 
Der GMX SmartSurfer hilft bis zu 70% Ihrer Onlinekosten zu sparen! 
Ideal für Modem und ISDN: http://www.gmx.net/de/go/smartsurfer