Re: Question about the ssl-problem on java-1.5

[Oleg Kalnichevski <ol...@apache.org>]

Clemens,

HttpClient fully relies on JSSE to provide transport security, so this
is very unlikely to be a bug in HttpClient. I suspect the non-blocking
IO support for SSL in Java 1.5 required a complete rewrite of the
underlying SSL engine, so I am not at all surprised to see compatibility
issues. I would recommend to stick to Java 1.4.2 (or another stable JSSE
implementation) for the time being.

Oleg 


On Mon, 2005-05-09 at 22:01 +0000, Linuxhippy wrote:
> Hi there!
> 
> I know that there are problems when running httpclient on java-1.5, I 
> also experienced those problems and I get the following exception when 
> trying to connect to a ssl-IIS:
> java.security.NoSuchAlgorithmException: Cannot find any provider supporting
> RSA/ECB/PKCS1Padding
> at javax.crypto.Cipher.getInstance(DashoA12275)
> 
> I found some mailing-list post and something that looked like a 
> bug-report in a bug-database but no further information if this is 
> really a bug in httpclient or even in java-1.5 and if its possible to 
> bypass this problem anyhow..
> 
> Would be really cool if somebody could help me (again) a bit out...
> 
> Thank you in advance, lg Clemens
> 
> 
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: httpclient-user-unsubscribe@jakarta.apache.org
> For additional commands, e-mail: httpclient-user-help@jakarta.apache.org
> 


---------------------------------------------------------------------
To unsubscribe, e-mail: httpclient-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: httpclient-user-help@jakarta.apache.org

Re: Question about the ssl-problem on java-1.5

[Linuxhippy <li...@web.de>]

Hi Oleg,

>HttpClient fully relies on JSSE to provide transport security, so this
>is very unlikely to be a bug in HttpClient. I suspect the non-blocking
>IO support for SSL in Java 1.5 required a complete rewrite of the
>underlying SSL engine, so I am not at all surprised to see compatibility
>issues.
>
Well, non blocking IO was introduced in 1.4, wasn't it.
Maybe secure non-blocking sockets were introduced in 1.5, I have to 
admit that JSSE is completly new to me.

> I would recommend to stick to Java 1.4.2 (or another stable JSSE
>implementation) for the time being.
>
I just filled out a bug report at SUN -> 3 weeks till response -> 3 
years to get things fixes :-(
I am in the sad position that I have to support what ma customers want 
to use, but for now its not too problemati to limit support to 1.4.x

Thank a lot, lg Clemens

---------------------------------------------------------------------
To unsubscribe, e-mail: httpclient-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: httpclient-user-help@jakarta.apache.org