You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@hc.apache.org by "James Leigh (JIRA)" <ji...@apache.org> on 2011/08/10 15:09:27 UTC

[jira] [Created] (HTTPCORE-268) RuntimeException: PKCS11Exception: CKR_DOMAIN_PARAMS_INVALID Not Handled by SSIOSession

RuntimeException: PKCS11Exception: CKR_DOMAIN_PARAMS_INVALID Not Handled by SSIOSession
---------------------------------------------------------------------------------------

                 Key: HTTPCORE-268
                 URL: https://issues.apache.org/jira/browse/HTTPCORE-268
             Project: HttpComponents HttpCore
          Issue Type: Bug
          Components: HttpCore
    Affects Versions: 4.1.3
         Environment: The server is running httpcore 4.1.3.
OpenJDK Runtime Environment (IcedTea6 1.8.7) (6b18-1.8.7-2~squeeze1)
OpenJDK 64-Bit Server VM (build 14.0-b16, mixed mode)

The client is a Black Berry PlayBook 1.0.7 browser attempting to open an SSL connection to the server.
            Reporter: James Leigh


The following exception should be handled by httpcore to keep the i/o reactor going.

org.apache.http.nio.reactor.IOReactorException: I/O dispatch worker terminated abnormally
        at org.apache.http.impl.nio.reactor.AbstractMultiworkerIOReactor.execute(AbstractMultiworkerIOReactor.java:321)
        at org.openrdf.http.object.HTTPObjectServer$5.run(HTTPObjectServer.java:410)
        at java.lang.Thread.run(Thread.java:636)
Caused by: java.lang.RuntimeException: sun.security.pkcs11.wrapper.PKCS11Exception: CKR_DOMAIN_PARAMS_INVALID
        at sun.security.ssl.Handshaker.checkThrown(Handshaker.java:1029)
        at sun.security.ssl.SSLEngineImpl.checkTaskThrown(SSLEngineImpl.java:503)
        at sun.security.ssl.SSLEngineImpl.readNetRecord(SSLEngineImpl.java:751)
        at sun.security.ssl.SSLEngineImpl.unwrap(SSLEngineImpl.java:719)
        at javax.net.ssl.SSLEngine.unwrap(SSLEngine.java:624)
        at org.apache.http.impl.nio.reactor.SSLIOSession.doHandshake(SSLIOSession.java:163)
        at org.apache.http.impl.nio.reactor.SSLIOSession.isAppInputReady(SSLIOSession.java:265)
        at org.apache.http.impl.nio.SSLServerIOEventDispatch.inputReady(SSLServerIOEventDispatch.java:229)
        at org.apache.http.impl.nio.reactor.BaseIOReactor.readable(BaseIOReactor.java:158)
        at org.apache.http.impl.nio.reactor.AbstractIOReactor.processEvent(AbstractIOReactor.java:340)
        at org.apache.http.impl.nio.reactor.AbstractIOReactor.processEvents(AbstractIOReactor.java:318)
        at org.apache.http.impl.nio.reactor.AbstractIOReactor.execute(AbstractIOReactor.java:278)
        at org.apache.http.impl.nio.reactor.BaseIOReactor.execute(BaseIOReactor.java:104)
        at org.apache.http.impl.nio.reactor.AbstractMultiworkerIOReactor$Worker.run(AbstractMultiworkerIOReactor.java:542)
        ... 1 more
Caused by: java.security.ProviderException: sun.security.pkcs11.wrapper.PKCS11Exception: CKR_DOMAIN_PARAMS_INVALID
        at sun.security.pkcs11.P11KeyPairGenerator.generateKeyPair(P11KeyPairGenerator.java:323)
        at java.security.KeyPairGenerator$Delegate.generateKeyPair(KeyPairGenerator.java:673)
        at sun.security.ssl.ECDHCrypt.<init>(ECDHCrypt.java:63)
        at sun.security.ssl.ServerHandshaker.setupEphemeralECDHKeys(ServerHandshaker.java:991)
        at sun.security.ssl.ServerHandshaker.trySetCipherSuite(ServerHandshaker.java:872)
        at sun.security.ssl.ServerHandshaker.chooseCipherSuite(ServerHandshaker.java:801)
        at sun.security.ssl.ServerHandshaker.clientHello(ServerHandshaker.java:576)
        at sun.security.ssl.ServerHandshaker.processMessage(ServerHandshaker.java:170)
        at sun.security.ssl.Handshaker.processLoop(Handshaker.java:610)
        at sun.security.ssl.Handshaker$1.run(Handshaker.java:550)
        at sun.security.ssl.Handshaker$1.run(Handshaker.java:548)
        at java.security.AccessController.doPrivileged(Native Method)
        at sun.security.ssl.Handshaker$DelegatedTask.run(Handshaker.java:969)
        at org.apache.http.impl.nio.reactor.SSLIOSession.doHandshake(SSLIOSession.java:171)
        ... 9 more
Caused by: sun.security.pkcs11.wrapper.PKCS11Exception: CKR_DOMAIN_PARAMS_INVALID
        at sun.security.pkcs11.wrapper.PKCS11.C_GenerateKeyPair(Native Method)
        at sun.security.pkcs11.P11KeyPairGenerator.generateKeyPair(P11KeyPairGenerator.java:314)
        ... 22 more

--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@hc.apache.org
For additional commands, e-mail: dev-help@hc.apache.org


[jira] [Resolved] (HTTPCORE-268) RuntimeException: PKCS11Exception: CKR_DOMAIN_PARAMS_INVALID Not Handled by SSIOSession

Posted by "Oleg Kalnichevski (JIRA)" <ji...@apache.org>.
     [ https://issues.apache.org/jira/browse/HTTPCORE-268?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Oleg Kalnichevski resolved HTTPCORE-268.
----------------------------------------

    Resolution: Fixed

James

I committed a work-around for the problem to the trunk and the 4.1.x branch. I also made sure that I/O event dispatchers are to shut down the I/O session in case of a runtime exception.

Could you please re-test your application against the latest snapshot from SVN? 

Oleg

> RuntimeException: PKCS11Exception: CKR_DOMAIN_PARAMS_INVALID Not Handled by SSIOSession
> ---------------------------------------------------------------------------------------
>
>                 Key: HTTPCORE-268
>                 URL: https://issues.apache.org/jira/browse/HTTPCORE-268
>             Project: HttpComponents HttpCore
>          Issue Type: Bug
>          Components: HttpCore
>    Affects Versions: 4.1.3
>         Environment: The server is running httpcore 4.1.3.
> OpenJDK Runtime Environment (IcedTea6 1.8.7) (6b18-1.8.7-2~squeeze1)
> OpenJDK 64-Bit Server VM (build 14.0-b16, mixed mode)
> The client is a Black Berry PlayBook 1.0.7 browser attempting to open an SSL connection to the server.
>            Reporter: James Leigh
>             Fix For: 4.2-alpha1
>
>
> The following exception should be handled by httpcore to keep the i/o reactor going.
> org.apache.http.nio.reactor.IOReactorException: I/O dispatch worker terminated abnormally
>         at org.apache.http.impl.nio.reactor.AbstractMultiworkerIOReactor.execute(AbstractMultiworkerIOReactor.java:321)
>         at org.openrdf.http.object.HTTPObjectServer$5.run(HTTPObjectServer.java:410)
>         at java.lang.Thread.run(Thread.java:636)
> Caused by: java.lang.RuntimeException: sun.security.pkcs11.wrapper.PKCS11Exception: CKR_DOMAIN_PARAMS_INVALID
>         at sun.security.ssl.Handshaker.checkThrown(Handshaker.java:1029)
>         at sun.security.ssl.SSLEngineImpl.checkTaskThrown(SSLEngineImpl.java:503)
>         at sun.security.ssl.SSLEngineImpl.readNetRecord(SSLEngineImpl.java:751)
>         at sun.security.ssl.SSLEngineImpl.unwrap(SSLEngineImpl.java:719)
>         at javax.net.ssl.SSLEngine.unwrap(SSLEngine.java:624)
>         at org.apache.http.impl.nio.reactor.SSLIOSession.doHandshake(SSLIOSession.java:163)
>         at org.apache.http.impl.nio.reactor.SSLIOSession.isAppInputReady(SSLIOSession.java:265)
>         at org.apache.http.impl.nio.SSLServerIOEventDispatch.inputReady(SSLServerIOEventDispatch.java:229)
>         at org.apache.http.impl.nio.reactor.BaseIOReactor.readable(BaseIOReactor.java:158)
>         at org.apache.http.impl.nio.reactor.AbstractIOReactor.processEvent(AbstractIOReactor.java:340)
>         at org.apache.http.impl.nio.reactor.AbstractIOReactor.processEvents(AbstractIOReactor.java:318)
>         at org.apache.http.impl.nio.reactor.AbstractIOReactor.execute(AbstractIOReactor.java:278)
>         at org.apache.http.impl.nio.reactor.BaseIOReactor.execute(BaseIOReactor.java:104)
>         at org.apache.http.impl.nio.reactor.AbstractMultiworkerIOReactor$Worker.run(AbstractMultiworkerIOReactor.java:542)
>         ... 1 more
> Caused by: java.security.ProviderException: sun.security.pkcs11.wrapper.PKCS11Exception: CKR_DOMAIN_PARAMS_INVALID
>         at sun.security.pkcs11.P11KeyPairGenerator.generateKeyPair(P11KeyPairGenerator.java:323)
>         at java.security.KeyPairGenerator$Delegate.generateKeyPair(KeyPairGenerator.java:673)
>         at sun.security.ssl.ECDHCrypt.<init>(ECDHCrypt.java:63)
>         at sun.security.ssl.ServerHandshaker.setupEphemeralECDHKeys(ServerHandshaker.java:991)
>         at sun.security.ssl.ServerHandshaker.trySetCipherSuite(ServerHandshaker.java:872)
>         at sun.security.ssl.ServerHandshaker.chooseCipherSuite(ServerHandshaker.java:801)
>         at sun.security.ssl.ServerHandshaker.clientHello(ServerHandshaker.java:576)
>         at sun.security.ssl.ServerHandshaker.processMessage(ServerHandshaker.java:170)
>         at sun.security.ssl.Handshaker.processLoop(Handshaker.java:610)
>         at sun.security.ssl.Handshaker$1.run(Handshaker.java:550)
>         at sun.security.ssl.Handshaker$1.run(Handshaker.java:548)
>         at java.security.AccessController.doPrivileged(Native Method)
>         at sun.security.ssl.Handshaker$DelegatedTask.run(Handshaker.java:969)
>         at org.apache.http.impl.nio.reactor.SSLIOSession.doHandshake(SSLIOSession.java:171)
>         ... 9 more
> Caused by: sun.security.pkcs11.wrapper.PKCS11Exception: CKR_DOMAIN_PARAMS_INVALID
>         at sun.security.pkcs11.wrapper.PKCS11.C_GenerateKeyPair(Native Method)
>         at sun.security.pkcs11.P11KeyPairGenerator.generateKeyPair(P11KeyPairGenerator.java:314)
>         ... 22 more

--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@hc.apache.org
For additional commands, e-mail: dev-help@hc.apache.org


[jira] [Updated] (HTTPCORE-268) RuntimeException: PKCS11Exception: CKR_DOMAIN_PARAMS_INVALID Not Handled by SSIOSession

Posted by "Oleg Kalnichevski (JIRA)" <ji...@apache.org>.
     [ https://issues.apache.org/jira/browse/HTTPCORE-268?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Oleg Kalnichevski updated HTTPCORE-268:
---------------------------------------

    Fix Version/s: 4.2-alpha1

> RuntimeException: PKCS11Exception: CKR_DOMAIN_PARAMS_INVALID Not Handled by SSIOSession
> ---------------------------------------------------------------------------------------
>
>                 Key: HTTPCORE-268
>                 URL: https://issues.apache.org/jira/browse/HTTPCORE-268
>             Project: HttpComponents HttpCore
>          Issue Type: Bug
>          Components: HttpCore
>    Affects Versions: 4.1.3
>         Environment: The server is running httpcore 4.1.3.
> OpenJDK Runtime Environment (IcedTea6 1.8.7) (6b18-1.8.7-2~squeeze1)
> OpenJDK 64-Bit Server VM (build 14.0-b16, mixed mode)
> The client is a Black Berry PlayBook 1.0.7 browser attempting to open an SSL connection to the server.
>            Reporter: James Leigh
>             Fix For: 4.2-alpha1
>
>
> The following exception should be handled by httpcore to keep the i/o reactor going.
> org.apache.http.nio.reactor.IOReactorException: I/O dispatch worker terminated abnormally
>         at org.apache.http.impl.nio.reactor.AbstractMultiworkerIOReactor.execute(AbstractMultiworkerIOReactor.java:321)
>         at org.openrdf.http.object.HTTPObjectServer$5.run(HTTPObjectServer.java:410)
>         at java.lang.Thread.run(Thread.java:636)
> Caused by: java.lang.RuntimeException: sun.security.pkcs11.wrapper.PKCS11Exception: CKR_DOMAIN_PARAMS_INVALID
>         at sun.security.ssl.Handshaker.checkThrown(Handshaker.java:1029)
>         at sun.security.ssl.SSLEngineImpl.checkTaskThrown(SSLEngineImpl.java:503)
>         at sun.security.ssl.SSLEngineImpl.readNetRecord(SSLEngineImpl.java:751)
>         at sun.security.ssl.SSLEngineImpl.unwrap(SSLEngineImpl.java:719)
>         at javax.net.ssl.SSLEngine.unwrap(SSLEngine.java:624)
>         at org.apache.http.impl.nio.reactor.SSLIOSession.doHandshake(SSLIOSession.java:163)
>         at org.apache.http.impl.nio.reactor.SSLIOSession.isAppInputReady(SSLIOSession.java:265)
>         at org.apache.http.impl.nio.SSLServerIOEventDispatch.inputReady(SSLServerIOEventDispatch.java:229)
>         at org.apache.http.impl.nio.reactor.BaseIOReactor.readable(BaseIOReactor.java:158)
>         at org.apache.http.impl.nio.reactor.AbstractIOReactor.processEvent(AbstractIOReactor.java:340)
>         at org.apache.http.impl.nio.reactor.AbstractIOReactor.processEvents(AbstractIOReactor.java:318)
>         at org.apache.http.impl.nio.reactor.AbstractIOReactor.execute(AbstractIOReactor.java:278)
>         at org.apache.http.impl.nio.reactor.BaseIOReactor.execute(BaseIOReactor.java:104)
>         at org.apache.http.impl.nio.reactor.AbstractMultiworkerIOReactor$Worker.run(AbstractMultiworkerIOReactor.java:542)
>         ... 1 more
> Caused by: java.security.ProviderException: sun.security.pkcs11.wrapper.PKCS11Exception: CKR_DOMAIN_PARAMS_INVALID
>         at sun.security.pkcs11.P11KeyPairGenerator.generateKeyPair(P11KeyPairGenerator.java:323)
>         at java.security.KeyPairGenerator$Delegate.generateKeyPair(KeyPairGenerator.java:673)
>         at sun.security.ssl.ECDHCrypt.<init>(ECDHCrypt.java:63)
>         at sun.security.ssl.ServerHandshaker.setupEphemeralECDHKeys(ServerHandshaker.java:991)
>         at sun.security.ssl.ServerHandshaker.trySetCipherSuite(ServerHandshaker.java:872)
>         at sun.security.ssl.ServerHandshaker.chooseCipherSuite(ServerHandshaker.java:801)
>         at sun.security.ssl.ServerHandshaker.clientHello(ServerHandshaker.java:576)
>         at sun.security.ssl.ServerHandshaker.processMessage(ServerHandshaker.java:170)
>         at sun.security.ssl.Handshaker.processLoop(Handshaker.java:610)
>         at sun.security.ssl.Handshaker$1.run(Handshaker.java:550)
>         at sun.security.ssl.Handshaker$1.run(Handshaker.java:548)
>         at java.security.AccessController.doPrivileged(Native Method)
>         at sun.security.ssl.Handshaker$DelegatedTask.run(Handshaker.java:969)
>         at org.apache.http.impl.nio.reactor.SSLIOSession.doHandshake(SSLIOSession.java:171)
>         ... 9 more
> Caused by: sun.security.pkcs11.wrapper.PKCS11Exception: CKR_DOMAIN_PARAMS_INVALID
>         at sun.security.pkcs11.wrapper.PKCS11.C_GenerateKeyPair(Native Method)
>         at sun.security.pkcs11.P11KeyPairGenerator.generateKeyPair(P11KeyPairGenerator.java:314)
>         ... 22 more

--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@hc.apache.org
For additional commands, e-mail: dev-help@hc.apache.org