You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@tomcat.apache.org by Rajesh Biswas <ra...@gmail.com> on 2015/01/19 18:33:39 UTC
Facing SSL Exception in Tomcat 7.57 using Java
I am facing issues running the application in SSL with latest version of
tomcat 7.57, same is working in 7.40. Below is the configuration in my
server.xml file
" keystorePass="xxx" clientAuth="false" sslProtocol="TLS" />
I am getting ssl handshake error while I am trying to access the
application through stand alone java client(I am using
javax.net.ssl.HttpsURLConnection to get the connection)
Same is working fine in tomcat 7.40 and also 7.56 with same configuration.
I am using 64 Bit JDK7
Also interesting point here I am able to access through web URL using
https, while I am trying to connect from Java program I am getting error
Would you please suggest I am missing any configutaion?
Re: Facing SSL Exception in Tomcat 7.57 using Java
Posted by Rajesh Biswas <ra...@gmail.com>.
Thanks for your support and suggestion, the client code will be distributed
to many clients as command line interface, so changing the JDK with 1.7
will take time and effort.
I found the way to set the SSL property in JDK6 and JDK5, after the below
changes code is working fine:
System.setProperty( "https.protocols", "TLSv1" );
Hope it will work for any OS and any JDK greater than 1.5
Regards,
Rajesh
On Tue, Jan 20, 2015 at 9:17 AM, Caldarale, Charles R <
Chuck.Caldarale@unisys.com> wrote:
> > From: Rajesh Biswas [mailto:rajeshbis@gmail.com]
> > Subject: Re: Facing SSL Exception in Tomcat 7.57 using Java
>
> > Would you please pin point the issue why it is not working in JDK5, where
> > can I set the TLS property.
>
> Note that JRE/JDK 5 has not been supported in some years; the last public
> release was in October 2009. As I recall, Oracle never updated that level
> for the various TLS/SSL errors recently discovered, including the more
> advanced configuration options.
>
> Any use of JRE/JDK 5 at this point borders on the irresponsible.
>
> - Chuck
>
>
> THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY
> MATERIAL and is thus for use only by the intended recipient. If you
> received this in error, please contact the sender and delete the e-mail and
> its attachments from all computers.
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
> For additional commands, e-mail: users-help@tomcat.apache.org
>
>
RE: Facing SSL Exception in Tomcat 7.57 using Java
Posted by "Caldarale, Charles R" <Ch...@unisys.com>.
> From: Rajesh Biswas [mailto:rajeshbis@gmail.com]
> Subject: Re: Facing SSL Exception in Tomcat 7.57 using Java
> Would you please pin point the issue why it is not working in JDK5, where
> can I set the TLS property.
Note that JRE/JDK 5 has not been supported in some years; the last public release was in October 2009. As I recall, Oracle never updated that level for the various TLS/SSL errors recently discovered, including the more advanced configuration options.
Any use of JRE/JDK 5 at this point borders on the irresponsible.
- Chuck
THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is thus for use only by the intended recipient. If you received this in error, please contact the sender and delete the e-mail and its attachments from all computers.
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org
Re: Facing SSL Exception in Tomcat 7.57 using Java
Posted by Rajesh Biswas <ra...@gmail.com>.
Hello Mark,
I have some more points to mention.
The SSL is not working from my Java client which is ran on JDK5, but same
is working on JDK7.
I put some debug statement to print the SSL version client is running.
For JDK I am getting NONE, for JDK7 I am getting TLSv1
Below is my statement:
SSLSocketFactory factory =
(SSLSocketFactory)SSLSocketFactory.getDefault();
SSLSocket socket =
(SSLSocket)factory.createSocket(url.getHost(), 4743);
System.out.println( socket.getSession().getProtocol());
When I am running on JDK5 I am getting output as NONE
When I am running on JDK7 I am getting output as TLSv1
Would you please pin point the issue why it is not working in JDK5, where
can I set the TLS property.
On Tue, Jan 20, 2015 at 7:41 AM, Rajesh Biswas <ra...@gmail.com> wrote:
> Hello Mark,
>
> Thank you for your reply.
>
> I have de-select the User SSL 3.0 option from Control Panel ---> Java >
> Advanced Tab
>
> Still I am not able to connect.
>
> Is there any other place I need to disable SSL v.3
>
> Rajesh
>
> On Tue, Jan 20, 2015 at 12:32 AM, Mark Thomas <ma...@apache.org> wrote:
>
>> On 19/01/2015 17:33, Rajesh Biswas wrote:
>> > I am facing issues running the application in SSL with latest version of
>> > tomcat 7.57, same is working in 7.40. Below is the configuration in my
>> > server.xml file
>> >
>> > " keystorePass="xxx" clientAuth="false" sslProtocol="TLS" />
>> >
>> > I am getting ssl handshake error while I am trying to access the
>> > application through stand alone java client(I am using
>> > javax.net.ssl.HttpsURLConnection to get the connection)
>> >
>> > Same is working fine in tomcat 7.40 and also 7.56 with same
>> configuration.
>> > I am using 64 Bit JDK7
>> >
>> > Also interesting point here I am able to access through web URL using
>> > https, while I am trying to connect from Java program I am getting error
>> >
>> > Would you please suggest I am missing any configutaion?
>>
>> I'd guess your client is trying to use SSLv3 which Tomcat now disables
>> by default.
>>
>> Mark
>>
>>
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
>> For additional commands, e-mail: users-help@tomcat.apache.org
>>
>>
>
Re: Facing SSL Exception in Tomcat 7.57 using Java
Posted by Rajesh Biswas <ra...@gmail.com>.
Hello Mark,
Thank you for your reply.
I have de-select the User SSL 3.0 option from Control Panel ---> Java >
Advanced Tab
Still I am not able to connect.
Is there any other place I need to disable SSL v.3
Rajesh
On Tue, Jan 20, 2015 at 12:32 AM, Mark Thomas <ma...@apache.org> wrote:
> On 19/01/2015 17:33, Rajesh Biswas wrote:
> > I am facing issues running the application in SSL with latest version of
> > tomcat 7.57, same is working in 7.40. Below is the configuration in my
> > server.xml file
> >
> > " keystorePass="xxx" clientAuth="false" sslProtocol="TLS" />
> >
> > I am getting ssl handshake error while I am trying to access the
> > application through stand alone java client(I am using
> > javax.net.ssl.HttpsURLConnection to get the connection)
> >
> > Same is working fine in tomcat 7.40 and also 7.56 with same
> configuration.
> > I am using 64 Bit JDK7
> >
> > Also interesting point here I am able to access through web URL using
> > https, while I am trying to connect from Java program I am getting error
> >
> > Would you please suggest I am missing any configutaion?
>
> I'd guess your client is trying to use SSLv3 which Tomcat now disables
> by default.
>
> Mark
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
> For additional commands, e-mail: users-help@tomcat.apache.org
>
>
Re: Facing SSL Exception in Tomcat 7.57 using Java
Posted by Mark Thomas <ma...@apache.org>.
On 19/01/2015 17:33, Rajesh Biswas wrote:
> I am facing issues running the application in SSL with latest version of
> tomcat 7.57, same is working in 7.40. Below is the configuration in my
> server.xml file
>
> " keystorePass="xxx" clientAuth="false" sslProtocol="TLS" />
>
> I am getting ssl handshake error while I am trying to access the
> application through stand alone java client(I am using
> javax.net.ssl.HttpsURLConnection to get the connection)
>
> Same is working fine in tomcat 7.40 and also 7.56 with same configuration.
> I am using 64 Bit JDK7
>
> Also interesting point here I am able to access through web URL using
> https, while I am trying to connect from Java program I am getting error
>
> Would you please suggest I am missing any configutaion?
I'd guess your client is trying to use SSLv3 which Tomcat now disables
by default.
Mark
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org