SSLEngine is a Java 5.0 class which provides SSL/TLS services but is transport independent.
Questions tagged [sslengine]
71 questions
4
votes
2 answers
Java JSSE SSLEngine cannot resume SSL session
I am writing an application that uses SSLEngine with NIO, I writing both the client and the server.
The client is able to connect to the server and after he is connected i want him to be able to perform session resumption / renegotiation, but…

bennyl
- 2,886
- 2
- 29
- 43
4
votes
1 answer
how to secure websockets with netty
I want to use netty for websockets with TLS enabled and using the (wss://) schema.
So I figured I should work like this:
the WebSocketServerHandler should now extend theSslHandler.
So I basically only have to set up an SSLEngine wihin the…

magegu
- 530
- 4
- 18
3
votes
1 answer
Can I use VPC Link to NLB with ACM imported private certificate?
I've successfully got the api-gw taking to NLB (via VPC Link) then on to ALB then onto my ECS cluster running my apis.
To enable SSL between api-gw and ALB using private certs I've used the insecureSkipVerification tlsconfig. The private certs were…

Skynet5
- 63
- 7
3
votes
5 answers
Java SSLEngine example
I found an example how to implement Java SSLEngine here.
Unfortunately the source code of the server is not complete. Do you know where I can find the complete source code from the tutorial?
user1809407
2
votes
2 answers
SSLEngine and close
I've implemented an helper module that lets me obtain clean data from a channel used with SSL and write encrypted data into it: this is the relevant interface (I've also some non-abstract methods in that class, so doesn't say to me that…

akappa
- 10,220
- 3
- 39
- 56
2
votes
1 answer
Using SSLEngine to use a certificate signed for an internal network location
Background
I'm trying to create 2 java applications that talk to each other over SSL on an internal network. I'm doing this by giving an SSLEngine access to a keystore that contains a private key entry for the certificate to be used.
private…

Richard Tingle
- 16,906
- 5
- 52
- 77
2
votes
1 answer
ConscryptEngine data read issue : Unable to parse TLS packet header
Below i the code for unwrap the data packets received from sslengine :
private ByteBuffer doUnwrap() throws IOException {
if (mPeerNetData.position() == 0) {
// The network input buffer is empty; read data from the channel before…

Ashok Kumar
- 1,226
- 1
- 10
- 14
2
votes
0 answers
Getting SSL PROTOCOL EXCEPTION in android using sslEngine
I am getting this error in android version 7 while using SSL engine after handshaking is done.
javax.net.ssl.SSLException: javax.net.ssl.SSLProtocolException: Read
error: ssl=0xb823f9c0: Failure in SSL library, usually a protocol…

Asghar Farhadi
- 53
- 6
2
votes
2 answers
SSLEngine Handshake stuck at second loop
I'm trying to implement an SSL Handshake using SSLEngine, I need to do it both ways as a sever and as a client as well, however I'm stuck and I cannot figure it out why.
The handshake starts correctly, the Hello's are exchanged, the keys are…

Emil Borconi
- 3,326
- 2
- 24
- 40
2
votes
1 answer
Get SSLException form the SSLEngine Wrap method during handshake process
When I run the client Handshake process on my Java application in order to establish SSL connection, I get SSLException on the second call to the wrap method. I understand that in this point the client sends the CLientKeyExchange and…

user475108
- 31
- 1
- 2
- 5
2
votes
2 answers
How can I get the domain name of the request before using SSLEngine?
I want to get the domain name in java before I determine which certificate I will use to send back. How can I achieve that?
Do I need to analyze the bytes somehow myself? or is there a library for this? or can some java SSL lib do it?
related post…

Dean Hiller
- 19,235
- 25
- 129
- 212
2
votes
1 answer
SSLEngine: Invalid TLS padding data when unwrapping after a successful handshake
I am using non-blocking socketChannel and SSLEngine an ssl server. So after a successfull handshake, i read the socket ( 184 bytes /384 bytes are being read in the first time), and then i pass this buffer to unwrap method. The unwrap method throw…

user3791570
- 73
- 2
- 11
2
votes
2 answers
SSLEngine Shutdown
The SSLEngine documentation gives indication on how to properly close an SSL connection. More specifically, it gives instructions on how to handle a severed connection:
In addition to orderly shutdowns, there can also be unorderly shutdowns in…

J_D
- 3,526
- 20
- 31
2
votes
1 answer
SSLEngine unwrap() javax.crypto.BadPaddingException: bad record MAC
This has been driving me crazy for a few days now. I created a client using java nio with ssl encryption using an SSLEngine. Handshake works fine, and I write a GET request to a website and it works fine (I get the header with 200 code). The problem…

Juan Acevedo
- 1,768
- 2
- 20
- 39
2
votes
0 answers
Apache: Only enable certain sslciphersuites
I have two questions.
First one: I checked which cipher suites are supported by firefox ( https:// cc. dcsec.uni-hannover. de/ ).
Example:
Cipher Suite Name: ECDHE-ECDSA-AES256-SHA
Key Size: 256 Bit
Description: Key exchange: ECDH, encryption: AES,…

user2998962
- 21
- 2