Questions tagged [jsse]

JSSE is a Java implementation of Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols. Its functionality includes data encryption, server authentication, message integrity, and optional client authentication.

JSSE stands for Java Secure Socket Extension. It is a Java implementation of Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols. Its functionality includes data encryption, server authentication, message integrity, and optional client authentication.

It is so named because originally it was shipped as a separate extension to Java 1.2 and 1.3. Since Java 1.4 it has been part of the standard Java API.

This tag should be used for questions about TLS or SSL programming in Java.

295 questions
3
votes
2 answers

Java NoClassDefFoundError With SSL Connection

We have an application that uses a JAX-RPC client library and is running on a legacy version of Java (1.4.2) and are receiving the following SSL error: java.lang.NoClassDefFoundError javax.crypto.Cipher.a(DashoA6275) …
Michael
  • 2,460
  • 3
  • 27
  • 47
3
votes
1 answer

Using PKIXValidator with BouncyCastleFipsProvider for server certificate validation?

We have an Apache Tomcat-based Java web application running on JDK 1.8 and recently had to strenghten its security-related features to comply with certain regulations, thus we are now using BouncyCastleFipsProvider as our JVM's main security…
skarfiol
  • 131
  • 10
3
votes
2 answers

Why do I get a handshake failure between TLS 1.0 client and SSL 3.0 server?

There is a project that uses extensively JSSE. Depending on a configuration parameter the SSLContext is initialized for SSLv3. Meaning that if the parameter is not set it is SSLv3, otherwise it is TLS. I noticed some handshake failures occasionally…
Cratylus
  • 52,998
  • 69
  • 209
  • 339
3
votes
0 answers

Oracle Weblogic 10.3.6: missing SNI extension in SSL Handshake

I have an old Weblogic 11g where I'm trying to connect over a remote URL in HTTPS using TLSv1.2. I have the following error: javax.net.ssl.SSLException: Received fatal alert: handshake_failure What I have done: imported the certificates (server,…
Alessandro C
  • 3,310
  • 9
  • 46
  • 82
3
votes
0 answers

RestTemplate HTTS & Choosing the Client Certificate

Can someone help me understand how to use HTTPS mutual authentication such that I can programmatically choose which client certificate to use during authentication? Here is the context of the question. I am using: A JKS containing multiple client…
3
votes
0 answers

Set TLS version 1.2 to MS Sql JDBC Client

I am writing a spring boot application which uses MS Sql jdbc driver to connect to an SQL Server located in a remote machine. According to microsoft's documentation i have enabled the setEncryption option which enabled the secured…
3
votes
2 answers

Reading data in a PEM certificate chain

I can easily read in an x509 certificate in PEM format using something along the lines of: assets.open("ca.pem").use { val cf = CertificateFactory.getInstance("X.509") keystore.setCertificateEntry("server",…
dcow
  • 7,765
  • 3
  • 45
  • 65
3
votes
4 answers

Specifying an outbound SSL configuration programmatically using JSSEHelper on Websphere 8.0. does not work

I am trying to create an SSL connection programmatically using a CUSTOM outbound ssl configuration configured in WAS 8.0.0.13 (IBM Websphere application server that uses java 1.6.0): (Security->SSL certificate and key managemement->Related Items:SSL…
Michael K
  • 111
  • 2
  • 8
3
votes
3 answers

SSL implementation for SocketChannel in java

I am looking at classes of the package java.nio.channels but only finding plain socket implementations. I can use the SSLEngine to encrypt and decrypt traffic, but that would be quite a bit of handling. Anybody knows of a proper…
Arteri Xhafur
  • 39
  • 1
  • 2
3
votes
2 answers

How to include jssecacert (cacert) in client jar file during client calling https wsdl

I have a jar that must be imported in the client application and enable the client to call my https wsdl web service with the help of the imported jar. I see that when https service must be called, it must be a valid cacert file in the security…
javatar
  • 4,542
  • 14
  • 50
  • 67
3
votes
1 answer

JAVA SSL: how to get client certificate information

I have an SSL-enabled tcp server that can listen to multiple rsyslog clients. Each client has its own certificate that is added in the server's truststore. This setup is working fine. TThe question is whether there is a way to get the client…
basit raza
  • 661
  • 2
  • 6
  • 18
3
votes
1 answer

How to enable OCSP in X509TrustManager?

System.setProperty("com.sun.net.ssl.checkRevocation", "true"); Security.setProperty("ocsp.enable", "true"); Is setting these properties really sufficient to enable OCSP? If so, then why we need bouncy castle OCSP support instead of just setting…
mdavid
  • 563
  • 6
  • 20
3
votes
0 answers

java 1.6_45 client disable SSLv2Hello message

I am using a java client application which runs on jdk 1.6_45. When the client initiates an HTTPS connection, it sends an SSLv2Hello message even though I have configured -Dhttps.protocols=tlsv1 in java command line options. My question is how do…
3
votes
1 answer

How to enable client TLS session reuse in Java

I have a Java client that may create many sessions to the same server. The TLS protocol has a facility to cache session keys and thus avoid the expensive PKI processing for each connection. But I cannot get it to actually work. openssl s_client…
Tuntable
  • 3,276
  • 1
  • 21
  • 26
3
votes
1 answer

Handling multiple certificates in Netty's SSL Handler used in Play Framework 1.2.7

I have a Java Key Store where I store certificates for each of my customer's sub-domain. I am planning to use the server alias to differentiate between multiple customers in the key store as suggested here. Play framework 1.2.7 uses Netty's…
Arul Dhesiaseelan
  • 2,009
  • 23
  • 19