You are viewing a plain text version of this content. The canonical link for it is here.
Posted to server-dev@james.apache.org by Kevin Jackson <fo...@gmail.com> on 2006/12/18 13:16:01 UTC

James trunk on java6 runtime

Hi all,

I'm running a build of svn trunk on java6 and I'm experiencing some
security related errors.

My colleague running james 2.2 on java 6 is also experiencing security
related issues with the same Exceptions.

in the pop3serevr log I get:

18/12/06 10:27:14 ERROR pop3server-tls: Exception handling socket to
58-186-74-xxx-dynamic.hcm.fpt.vn. (58.186.74.5) : Connection has been
shutdown: javax.net.ssl.SSLExcepti
on: java.lang.RuntimeException: Could not generate dummy secret
javax.net.ssl.SSLException: Connection has been shutdown:
javax.net.ssl.SSLException: java.lang.RuntimeException: Could not
generate dummy secret
        at com.sun.net.ssl.internal.ssl.SSLSocketImpl.checkEOF(SSLSocketImpl.java:1172)
        at com.sun.net.ssl.internal.ssl.AppInputStream.read(AppInputStream.java:65)
        at java.io.BufferedInputStream.fill(BufferedInputStream.java:218)
        at java.io.BufferedInputStream.read(BufferedInputStream.java:237)
        at org.apache.james.util.CRLFTerminatedReader.read(CRLFTerminatedReader.java:158)
        at org.apache.james.util.CRLFTerminatedReader.readLine(CRLFTerminatedReader.java:115)
        at org.apache.james.pop3server.POP3Handler.readCommandLine(POP3Handler.java:316)
        at org.apache.james.pop3server.POP3Handler.handleProtocol(POP3Handler.java:211)
        at org.apache.james.core.AbstractJamesHandler.handleConnection(AbstractJamesHandler.java:259)
        at org.apache.james.util.connection.ServerConnection$ClientConnectionRunner.run(ServerConnection.java:468)
        at org.apache.excalibur.thread.impl.ExecutableRunnable.execute(ExecutableRunnable.java:55)
        at org.apache.excalibur.thread.impl.WorkerThread.run(WorkerThread.java:116)
Caused by: javax.net.ssl.SSLException: java.lang.RuntimeException:
Could not generate dummy secret
        at com.sun.net.ssl.internal.ssl.Alerts.getSSLException(Alerts.java:190)
        at com.sun.net.ssl.internal.ssl.SSLSocketImpl.fatal(SSLSocketImpl.java:1520)
        at com.sun.net.ssl.internal.ssl.SSLSocketImpl.fatal(SSLSocketImpl.java:1487)
        at com.sun.net.ssl.internal.ssl.SSLSocketImpl.handleException(SSLSocketImpl.java:1470)
        at com.sun.net.ssl.internal.ssl.SSLSocketImpl.handleException(SSLSocketImpl.java:1396)
        at com.sun.net.ssl.internal.ssl.AppOutputStream.write(AppOutputStream.java:64)
        at java.io.BufferedOutputStream.flushBuffer(BufferedOutputStream.java:65)
        at java.io.BufferedOutputStream.flush(BufferedOutputStream.java:123)
        at sun.nio.cs.StreamEncoder.implFlush(StreamEncoder.java:278)
        at sun.nio.cs.StreamEncoder.flush(StreamEncoder.java:122)
        at java.io.OutputStreamWriter.flush(OutputStreamWriter.java:212)
        at java.io.BufferedWriter.flush(BufferedWriter.java:236)
        at java.io.PrintWriter.flush(PrintWriter.java:276)
        at org.apache.james.util.InternetPrintWriter.println(InternetPrintWriter.java:94)
        at org.apache.james.util.InternetPrintWriter.println(InternetPrintWriter.java:191)
        at org.apache.james.core.AbstractJamesHandler.writeLoggedFlushedResponse(AbstractJamesHandler.java:399)
        at org.apache.james.pop3server.POP3Handler.handleProtocol(POP3Handler.java:188)
        ... 4 more
Caused by: java.lang.RuntimeException: Could not generate dummy secret
        at com.sun.net.ssl.internal.ssl.RSAClientKeyExchange.generateDummySecret(RSAClientKeyExchange.java:158)
        at com.sun.net.ssl.internal.ssl.Handshaker.calculateMasterSecret(Handshaker.java:680)
        at com.sun.net.ssl.internal.ssl.Handshaker.calculateKeys(Handshaker.java:631)
        at com.sun.net.ssl.internal.ssl.ServerHandshaker.processMessage(ServerHandshaker.java:204)
        at com.sun.net.ssl.internal.ssl.Handshaker.processLoop(Handshaker.java:511)
        at com.sun.net.ssl.internal.ssl.Handshaker.process_record(Handshaker.java:449)
        at com.sun.net.ssl.internal.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:817)
        at com.sun.net.ssl.internal.ssl.SSLSocketImpl.performInitialHandshake(SSLSocketImpl.java:1029)
        at com.sun.net.ssl.internal.ssl.SSLSocketImpl.writeRecord(SSLSocketImpl.java:621)
        at com.sun.net.ssl.internal.ssl.AppOutputStream.write(AppOutputStream.java:59)
        ... 15 more
Caused by: java.security.NoSuchAlgorithmException:
SunTlsRsaPremasterSecret KeyGenerator not available
        at javax.crypto.KeyGenerator.<init>(DashoA13*..)
        at javax.crypto.KeyGenerator.getInstance(DashoA13*..)
        at com.sun.net.ssl.internal.ssl.JsseJce.getKeyGenerator(JsseJce.java:223)
        at com.sun.net.ssl.internal.ssl.RSAClientKeyExchange.generateDummySecret(RSAClientKeyExchange.java:152)
        ... 24 more

and in the smtpserver log i get
18/12/06 11:20:04 ERROR smtpserver-tls: Exception handling socket to
58-186-74-xxx-dynamic.hcm.fpt.vn. (58.186.74.5) : Connection has been
shutdown: javax.net.ssl.SSLExcepti
on: java.lang.RuntimeException: Could not generate secret
javax.net.ssl.SSLException: Connection has been shutdown:
javax.net.ssl.SSLException: java.lang.RuntimeException: Could not
generate secret
        at com.sun.net.ssl.internal.ssl.SSLSocketImpl.checkEOF(SSLSocketImpl.java:1172)
        at com.sun.net.ssl.internal.ssl.AppInputStream.read(AppInputStream.java:65)
        at java.io.BufferedInputStream.fill(BufferedInputStream.java:218)
        at java.io.BufferedInputStream.read(BufferedInputStream.java:237)
        at org.apache.james.util.CRLFTerminatedReader.read(CRLFTerminatedReader.java:158)
        at org.apache.james.util.CRLFTerminatedReader.readLine(CRLFTerminatedReader.java:115)
        at org.apache.james.smtpserver.SMTPHandler.readCommandLine(SMTPHandler.java:503)
        at org.apache.james.smtpserver.SMTPHandler.handleProtocol(SMTPHandler.java:254)
        at org.apache.james.core.AbstractJamesHandler.handleConnection(AbstractJamesHandler.java:259)
        at org.apache.james.util.connection.ServerConnection$ClientConnectionRunner.run(ServerConnection.java:468)
        at org.apache.excalibur.thread.impl.ExecutableRunnable.execute(ExecutableRunnable.java:55)
        at org.apache.excalibur.thread.impl.WorkerThread.run(WorkerThread.java:116)
Caused by: javax.net.ssl.SSLException: java.lang.RuntimeException:
Could not generate secret
        at com.sun.net.ssl.internal.ssl.Alerts.getSSLException(Alerts.java:190)
        at com.sun.net.ssl.internal.ssl.SSLSocketImpl.fatal(SSLSocketImpl.java:1520)
        at com.sun.net.ssl.internal.ssl.SSLSocketImpl.fatal(SSLSocketImpl.java:1487)
        at com.sun.net.ssl.internal.ssl.SSLSocketImpl.handleException(SSLSocketImpl.java:1470)
        at com.sun.net.ssl.internal.ssl.SSLSocketImpl.handleException(SSLSocketImpl.java:1396)
        at com.sun.net.ssl.internal.ssl.AppOutputStream.write(AppOutputStream.java:64)
        at java.io.BufferedOutputStream.flushBuffer(BufferedOutputStream.java:65)
        at java.io.BufferedOutputStream.flush(BufferedOutputStream.java:123)
        at sun.nio.cs.StreamEncoder.implFlush(StreamEncoder.java:278)
        at sun.nio.cs.StreamEncoder.flush(StreamEncoder.java:122)
        at java.io.OutputStreamWriter.flush(OutputStreamWriter.java:212)
        at java.io.BufferedWriter.flush(BufferedWriter.java:236)
        at java.io.PrintWriter.flush(PrintWriter.java:276)
        at org.apache.james.util.InternetPrintWriter.println(InternetPrintWriter.java:94)
        at org.apache.james.util.InternetPrintWriter.println(InternetPrintWriter.java:191)
        at org.apache.james.core.AbstractJamesHandler.writeLoggedFlushedResponse(AbstractJamesHandler.java:399)
        at org.apache.james.smtpserver.SMTPHandler.handleProtocol(SMTPHandler.java:207)
        ... 4 more
Caused by: java.lang.RuntimeException: Could not generate secret
        at com.sun.net.ssl.internal.ssl.DHCrypt.getAgreedSecret(DHCrypt.java:168)
        at com.sun.net.ssl.internal.ssl.ServerHandshaker.clientKeyExchange(ServerHandshaker.java:981)
        at com.sun.net.ssl.internal.ssl.ServerHandshaker.processMessage(ServerHandshaker.java:184)
        at com.sun.net.ssl.internal.ssl.Handshaker.processLoop(Handshaker.java:511)
        at com.sun.net.ssl.internal.ssl.Handshaker.process_record(Handshaker.java:449)
        at com.sun.net.ssl.internal.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:817)
        at com.sun.net.ssl.internal.ssl.SSLSocketImpl.performInitialHandshake(SSLSocketImpl.java:1029)
        at com.sun.net.ssl.internal.ssl.SSLSocketImpl.writeRecord(SSLSocketImpl.java:621)
        at com.sun.net.ssl.internal.ssl.AppOutputStream.write(AppOutputStream.java:59)
        ... 15 more
Caused by: java.security.NoSuchAlgorithmException: Unsupported secret
key algorithm: TlsPremasterSecret
        at com.sun.crypto.provider.DHKeyAgreement.engineGenerateSecret(DashoA6275)
        at javax.crypto.KeyAgreement.generateSecret(DashoA13*..)
        at com.sun.net.ssl.internal.ssl.DHCrypt.getAgreedSecret(DHCrypt.java:166)
        ... 23 more

This looks like it could be a problem associated with a move from
java5 to java6, but I'm not sure how to fix it.

Any help from you guys would be appreciated.

Thanks,
Kev

---------------------------------------------------------------------
To unsubscribe, e-mail: server-dev-unsubscribe@james.apache.org
For additional commands, e-mail: server-dev-help@james.apache.org


Re: James trunk on java6 runtime

Posted by Stefano Bagnara <ap...@bago.org>.
Kevin Jackson wrote:
> Hi all,
> 
> I'm running a build of svn trunk on java6 and I'm experiencing some
> security related errors.
> 
> My colleague running james 2.2 on java 6 is also experiencing security
> related issues with the same Exceptions.

Hi Kevin,

Unfortunately we didn't test Java 6, yet.

Please file a JIRA issue for this so we can track informations and 
remember this.

I ran a search for "Could not generate dummy secret" and 
"SunTlsRsaPremasterSecret" on google with no results. Maybe in a few 
weeks we'll find someone else reporting similar problems and explaining 
us what is happening and how to fix it.

Stefano

> in the pop3serevr log I get:
> 
> javax.net.ssl.SSLException: java.lang.RuntimeException: Could not
> generate dummy secret
>        at 
[..]
>        at 
> com.sun.net.ssl.internal.ssl.AppOutputStream.write(AppOutputStream.java:59)
>        ... 15 more
> Caused by: java.security.NoSuchAlgorithmException:
> SunTlsRsaPremasterSecret KeyGenerator not available
>        at javax.crypto.KeyGenerator.<init>(DashoA13*..)
>        at javax.crypto.KeyGenerator.getInstance(DashoA13*..)



---------------------------------------------------------------------
To unsubscribe, e-mail: server-dev-unsubscribe@james.apache.org
For additional commands, e-mail: server-dev-help@james.apache.org