Questions tagged [sslengine]

SSLEngine is a Java 5.0 class which provides SSL/TLS services but is transport independent.

71 questions
1
vote
1 answer

SSLEngine does not decrypt all the data

I am trying to use SSLengine with SocketChannels in non-blocking mode. The handshake is done correctly but when i try to read & decrypt http posts from channelsocket, only the headers are decrypted and the body disapear: int num=0; …
user3791570
  • 73
  • 2
  • 11
1
vote
1 answer

Implementation of SSLEngine for JDK 1.4?

I have a NIO-based application that has to work on a Java 1.4 platform (not Sun/Oracle implementation) and for which I would like to secure the network connections with SSL. But the javax.net.ssl.SSLEngine API is only available starting with Java…
dolmen
  • 8,126
  • 5
  • 40
  • 42
1
vote
1 answer

Prevent private key exposure using custom openssl engine

Is it possible to have an engine generate a keypair, have the application 'use' the private key (e.g. to sign) WITHOUT actually exposing the key ? E.g. openssl would return some kind of reference but not the key itself. Moreover there should be a…
Paul Praet
  • 1,367
  • 14
  • 25
1
vote
1 answer

Difference of getHandShakeStatus() in SSLEngine and SSLEngineResults in java

I am trying to create a Client/Server connection with SSLEngine in java. I would like to ask what is the difference between SSLEngine.getHandshakeStatus() and SSLEngineResults.getHandshakeStatus(). I have found a sample code of Nuno Santos about…
thpst
  • 45
  • 7
0
votes
2 answers

Netty ClientBootstrap SSL Handshake Terminates--Channel/ClientBootstrap closing?

My Connection to my test application keeps terminating in the same place without any errors. I think perhaps something is triggering the channel/connection to close, but I don't know what it could be. Where exactly it closes changes slightly if I…
MeowCode
  • 1,053
  • 2
  • 12
  • 29
0
votes
2 answers

Having trouble getting Oracle SSLEngineSimpleDemo.java working

I took the following example and moved code around so it is better simulating an actual client and actual a server where the server only has access to the trust store file the client only has access to the client keystore file At least in TLS1v2,…
Dean Hiller
  • 19,235
  • 25
  • 129
  • 212
0
votes
1 answer

Why client sending Close Notify after successful handshaking?

I am using SSLEngine to communicate an SSL client over USB Handshaking pass correctly and i start getting encrypted data, but when i transfer a specific data, it sends me a "Close Notify" message (15 03 03..) and i can't figure out why??!! The…
epic
  • 1,333
  • 1
  • 13
  • 27
0
votes
1 answer

Why SSLSocket support TLSv1.2 from API level 16+ but SSLEngine from API level 20+?

I just want to understand the difference between SSLSocket and SSLEngine classes? I can see in android document TLSv1.2 available for SSLSocket from API Level 16+ but for SSLEngine TLSv1.2 available from API Level…
Pawan Gupta
  • 315
  • 1
  • 3
  • 16
0
votes
1 answer

how to create SSLEngine for connecting to any https website specifically google cloud run?

Since all the certs from websites are signed by Root CA's and such, and I am writing a client, not a server, how would I create an SSLEngine that can connect to them all? or do I have to download certs and such to connect? (I am hoping that jdk…
Dean Hiller
  • 19,235
  • 25
  • 129
  • 212
0
votes
1 answer

NIO Client / server securely authenticate credentials

I use Java NIO secured by SSL to connect client and server. To connect to a server the user is prompted to enter host, port, username and password. So far I can connect client and server (they successfully complete their SSL handshake) and I could…
0
votes
1 answer

How to test an implementation of TLS based on SSLEngine?

I'm considering the possibility to implement TLS over a non TCP connection. The idea is to use SSLEngine which provides the possibility encrypt/decrypt data to memory buffers and send them by the reliable transport we want. I would have to…
OlivierGrenoble
  • 3,803
  • 2
  • 18
  • 25
0
votes
1 answer

How to create SSLEngine from List< X509Certificate>

acme gives you the whole cert chain as List. How do I create the SSLEngine from that cert chain? (I would like ideally to skip the whole keystore thing or populate a keystore dynamically to be read from at runtime). EDIT: I have…
Dean Hiller
  • 19,235
  • 25
  • 129
  • 212
0
votes
0 answers

Invalid command 'SSLEngine', perhaps misspelled or defined by a module not included in the server configuration. Even if installed mod_ssl

I want to Enable SSL on apache server. i made proper configuration in httpd.conf as well as httpd-ssl.conf . But When i am starting apache Server following error is comming : ** Invalid command 'SSLEngine', perhaps misspelled or defined by a module…
0
votes
1 answer

Java nio socketchannel read early eos in safari and IOS with TLS1.2

i have a really weird problem, which i am working on the last couple days. I wrote a proxy application on my serverside. All the proxy does is managing TLS/nonTLS requests and responses from different Applications (WebApplications, IOSApps, Android…
R3tty
  • 39
  • 7
0
votes
1 answer

HTTPS protocol server request upgrade Java socketchannels

So I am trying to build an HTTPS server in java without using SocketChannels and the SSLEngine. My main reason is when I built using the com.sun packaging and tested it a lot of request timed out and if they did respond they took around 2 minutes…
Moocow9m T
  • 45
  • 7