Questions tagged [sslengine]

SSLEngine is a Java 5.0 class which provides SSL/TLS services but is transport independent.

71 questions
4
votes
2 answers

Java JSSE SSLEngine cannot resume SSL session

I am writing an application that uses SSLEngine with NIO, I writing both the client and the server. The client is able to connect to the server and after he is connected i want him to be able to perform session resumption / renegotiation, but…
bennyl
  • 2,886
  • 2
  • 29
  • 43
4
votes
1 answer

how to secure websockets with netty

I want to use netty for websockets with TLS enabled and using the (wss://) schema. So I figured I should work like this: the WebSocketServerHandler should now extend theSslHandler. So I basically only have to set up an SSLEngine wihin the…
magegu
  • 530
  • 4
  • 18
3
votes
1 answer

Can I use VPC Link to NLB with ACM imported private certificate?

I've successfully got the api-gw taking to NLB (via VPC Link) then on to ALB then onto my ECS cluster running my apis. To enable SSL between api-gw and ALB using private certs I've used the insecureSkipVerification tlsconfig. The private certs were…
3
votes
5 answers

Java SSLEngine example

I found an example how to implement Java SSLEngine here. Unfortunately the source code of the server is not complete. Do you know where I can find the complete source code from the tutorial?
user1809407
2
votes
2 answers

SSLEngine and close

I've implemented an helper module that lets me obtain clean data from a channel used with SSL and write encrypted data into it: this is the relevant interface (I've also some non-abstract methods in that class, so doesn't say to me that…
akappa
  • 10,220
  • 3
  • 39
  • 56
2
votes
1 answer

Using SSLEngine to use a certificate signed for an internal network location

Background I'm trying to create 2 java applications that talk to each other over SSL on an internal network. I'm doing this by giving an SSLEngine access to a keystore that contains a private key entry for the certificate to be used. private…
Richard Tingle
  • 16,906
  • 5
  • 52
  • 77
2
votes
1 answer

ConscryptEngine data read issue : Unable to parse TLS packet header

Below i the code for unwrap the data packets received from sslengine : private ByteBuffer doUnwrap() throws IOException { if (mPeerNetData.position() == 0) { // The network input buffer is empty; read data from the channel before…
Ashok Kumar
  • 1,226
  • 1
  • 10
  • 14
2
votes
0 answers

Getting SSL PROTOCOL EXCEPTION in android using sslEngine

I am getting this error in android version 7 while using SSL engine after handshaking is done. javax.net.ssl.SSLException: javax.net.ssl.SSLProtocolException: Read error: ssl=0xb823f9c0: Failure in SSL library, usually a protocol…
2
votes
2 answers

SSLEngine Handshake stuck at second loop

I'm trying to implement an SSL Handshake using SSLEngine, I need to do it both ways as a sever and as a client as well, however I'm stuck and I cannot figure it out why. The handshake starts correctly, the Hello's are exchanged, the keys are…
Emil Borconi
  • 3,326
  • 2
  • 24
  • 40
2
votes
1 answer

Get SSLException form the SSLEngine Wrap method during handshake process

When I run the client Handshake process on my Java application in order to establish SSL connection, I get SSLException on the second call to the wrap method. I understand that in this point the client sends the CLientKeyExchange and…
user475108
  • 31
  • 1
  • 2
  • 5
2
votes
2 answers

How can I get the domain name of the request before using SSLEngine?

I want to get the domain name in java before I determine which certificate I will use to send back. How can I achieve that? Do I need to analyze the bytes somehow myself? or is there a library for this? or can some java SSL lib do it? related post…
Dean Hiller
  • 19,235
  • 25
  • 129
  • 212
2
votes
1 answer

SSLEngine: Invalid TLS padding data when unwrapping after a successful handshake

I am using non-blocking socketChannel and SSLEngine an ssl server. So after a successfull handshake, i read the socket ( 184 bytes /384 bytes are being read in the first time), and then i pass this buffer to unwrap method. The unwrap method throw…
user3791570
  • 73
  • 2
  • 11
2
votes
2 answers

SSLEngine Shutdown

The SSLEngine documentation gives indication on how to properly close an SSL connection. More specifically, it gives instructions on how to handle a severed connection: In addition to orderly shutdowns, there can also be unorderly shutdowns in…
J_D
  • 3,526
  • 20
  • 31
2
votes
1 answer

SSLEngine unwrap() javax.crypto.BadPaddingException: bad record MAC

This has been driving me crazy for a few days now. I created a client using java nio with ssl encryption using an SSLEngine. Handshake works fine, and I write a GET request to a website and it works fine (I get the header with 200 code). The problem…
Juan Acevedo
  • 1,768
  • 2
  • 20
  • 39
2
votes
0 answers

Apache: Only enable certain sslciphersuites

I have two questions. First one: I checked which cipher suites are supported by firefox ( https:// cc. dcsec.uni-hannover. de/ ). Example: Cipher Suite Name: ECDHE-ECDSA-AES256-SHA Key Size: 256 Bit Description: Key exchange: ECDH, encryption: AES,…