Questions tagged [sslcontext]

According to IBM Knowledge Center,

The SSLContext is an engine class for an implementation of a secure socket protocol. An instance of this class acts as a factory for SSL socket factories and SSL engines. An SSLContext holds all of the state information shared across all objects created under that context. For example, session state is associated with the SSLContext when it is negotiated through the handshake protocol by sockets created by socket factories provided by the context. These cached sessions can be reused and shared by other sockets created under the same context.

Each instance is configured through its init method with the keys, certificate chains, and trusted root CA certificates that it needs to perform authentication. This configuration is provided in the form of key and trust managers. These managers provide support for the authentication and key agreement aspects of the cipher suites supported by the context.

94 questions
0
votes
1 answer

I'm getting error in TLS client Authentication "javax.net.ssl.SSLHandshakeException: certificate verify format error"

I'm getting the javax.net.ssl.SSLHandshakeException: certificate verify format error while TLS handshake with server. here are SSL debug logs 16 Dec 2019 18:34:37 INFO com.ascertia.adss.logger.trash - Using SSLEngineImpl. 16 Dec 2019 18:34:37…
0
votes
1 answer

SSLHandshakeException using Apache HttpClient and IBM Jsse2 on WAS 9

I have a webapp where I use HttpClient to send get/Post requests to some webpages and validate the response. The application was working fine for a long time when it was deployed on Tomcat 8.5 but now due to company guidelines, I need to use…
0
votes
0 answers

how to force existing java program to SSLContext TLS Instance without modifying it

I want to force java existing program in jdk 1.5 to use tls in place of sslv2 or sslv3. The jdk 1.5 support tls 1.0... but generally default use ssl v2 or v3 clienthello in place of tlsv1... For now many ssl service are forcing tls only (some now…
0
votes
1 answer

SSLConnectionSocketFactory always returns 400(2 way ssl client cert) Certificates were not received

I have an ssl connection(2 way handshake) and I am unable to understand the why the following code procedures 400(openJdk 11, p12 file & password provided by the server , cer file provided by the server) , I have created the jks file from the cer…
Roie Beck
  • 1,113
  • 3
  • 15
  • 30
0
votes
0 answers

Creating SSLContext with server and client certificate and private key

I'm writing Android application. It connects to server though TLS. I received from server author 3 files to use (to check communication, later keys will be generated): - server certificate (cacrt.crt) - client certificate (clientcrt.crt) - client…
user3626048
  • 706
  • 4
  • 19
  • 52
0
votes
1 answer

How to overide keystore alias in sslContextParameter in camel

We are trying to use SSLContextParameter in camel 2.22.0 with Tomcat for https4 request. Our goal is to use only one keystore for private/public key with multiple alias. We load the spring ssContextParameter while camel is loading, and we want to…
Florian B.
  • 13
  • 3
0
votes
1 answer

Log displays TLSv1 instead of SSLv3

I have enabled logs in my application using -Djavax.net.debug=all option. Code that have written is supposed to use SSLv3 protocol, but in logs when I am checking it is displaying as :: *** ClientHello, TLSv1 *** ServerHello, TLSv1 As far as I…
Bhaskar
  • 159
  • 1
  • 2
  • 17
0
votes
1 answer

Java 7 with TLSv1.2 connect to LDAPS handshake failure

Currently I am using Java 7 and I am unable to connect to LDAPS. I tried with the code below, but I am still unable to connect: SSLContext ctx = SSLContext.getInstance("TLSv1.2"); ctx.init(null, null, null); SSLContext.setDefault(ctx); Below is the…
0
votes
1 answer

javax websocket client ssl connection

I have problem with javax.websocket (using Eclipse IDE and Jetty 9 server). I wrote ClientEnpdoint (with all annotation). This code work fine with "ws://" but i have problem when trying use "wss://". I'm trying do it with SSLContext, but don't know…
0
votes
1 answer

Jetty HttpClient inside of AsyncProxyServlet doesn't support SSL?

Using jetty 9.4.8.v20171121 Line 70 of the above class throws a nullpointer exception on this code: SSLEngine engine = sslContextFactory.newEngine(host, port); I've set a breakpoint on the first line of the constructor for this class and its never…
pronane
  • 248
  • 1
  • 5
  • 10
0
votes
0 answers

sun.security.validator.ValidatorException: PKIX path building failed when using SSLContext

I'm trying to make an https soap request but I get this error : Caused by: javax.net.ssl.SSLHandshakeException: SSLHandshakeException invoking *** : sun.security.validator.ValidatorException: PKIX path building failed:…
0
votes
1 answer

getting an error SSLInitializationException: TLS SSLContext not available running a media server application

I am running subsonic (a media server web service) on fedora 26. I recently had a power failure during the upgrade to F26. I had to fix a ton of things, including selinux contexts, replacing some apps, etc... but was able to get back up and fully…
Andrew S
  • 55
  • 1
  • 10
0
votes
2 answers

Inheritance and composition of the same class in Java

I have found following piece of code on github: public class DummySSLSocketFactory extends SSLSocketFactory { private static final Logger LOG = LoggerFactory.getLogger(DummySSLSocketFactory.class); private SSLSocketFactory factory; …
woockashek
  • 1,588
  • 10
  • 25
0
votes
1 answer

SSL Handshake: why server side waits 100+ ms between server-side ChangeCipherSpec and Finished?

I'm writing a simple HTTP server by SSLSocketFactory and here is my Java codes: public static void main(String[] args) throws Exception { KeyStore ks = KeyStore.getInstance("PKCS12"); …
auntyellow
  • 2,423
  • 2
  • 20
  • 47
0
votes
0 answers

How to use a custom Keystore in an SSLContext to drive HTTPS connections

I have to be able to specify the certificate and key to be used to authenticate a HTTPS connection in a configuration file (not a system keystore, but user configuration) in a backend system, and have tried the following approach: First to encode…
Luis Colorado
  • 10,974
  • 1
  • 16
  • 31