You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@tomcat.apache.org by bu...@apache.org on 2013/02/28 14:10:46 UTC

[Bug 54619] New: JSSESocketFactory Webdav over SSL with windows explorer

https://issues.apache.org/bugzilla/show_bug.cgi?id=54619

            Bug ID: 54619
           Summary: JSSESocketFactory Webdav over SSL with windows
                    explorer
           Product: Tomcat 7
           Version: 7.0.37
          Hardware: PC
            Status: NEW
          Severity: normal
          Priority: P2
         Component: Connectors
          Assignee: dev@tomcat.apache.org
          Reporter: fink@fasihi.net
    Classification: Unclassified

since 7.0.37 all requests coming from "Microsoft-WebDAV-MiniRedir/6.1.7601"
(Windows Explorer) via SSL run into the Exception in
"org.apache.tomcat.util.net.jsse.JSSESocketFactory" line 197:

if (session.getCipherSuite().equals("SSL_NULL_WITH_NULL_NULL"))
            throw new IOException("SSL handshake failed. Ciper suite in SSL
Session is SSL_NULL_WITH_NULL_NULL");

I'm not much of an SSL expert (obviously), but i think this is not the way it's
supposed to be. After a downgrade to Tomcat 7.0.35 it works again (didn't test
7.0.36). When using tomcat-coyote.jar from 7.0.35 with Tomcat 7.0.37 it works
as well.

I guess Tomcat's Webdav implementation won't work over SSL with Windows
Explorer in my current constellation.

-- 
You are receiving this mail because:
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org


[Bug 54619] JSSESocketFactory Webdav over SSL with windows explorer

Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=54619

Konstantin Kolinko <kn...@gmail.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 OS|                            |All

--- Comment #1 from Konstantin Kolinko <kn...@gmail.com> ---
Tomcat 7.0.37 is more strict in processing its SSL configuration, thanks to
fixing bug 54406.

It is very likely that your configuration is incorrect. You should ask on the
users mailing list (not the dev one) and maybe people there would be able to
help you.

-- 
You are receiving this mail because:
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org


[Bug 54619] JSSESocketFactory Webdav over SSL with windows explorer

Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=54619

Mark Thomas <ma...@apache.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
         Resolution|INVALID                     |DUPLICATE

--- Comment #3 from Mark Thomas <ma...@apache.org> ---
This is caused by bug 54690 which removed support for SSLv2Hello.

*** This bug has been marked as a duplicate of bug 54690 ***

-- 
You are receiving this mail because:
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org


[Bug 54619] JSSESocketFactory Webdav over SSL with windows explorer

Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=54619

Mark Thomas <ma...@apache.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|---                         |INVALID

--- Comment #2 from Mark Thomas <ma...@apache.org> ---
Yes, this looks like a ciphers mis-match. Resolving as invalid until proved
otherwise (at which point feel free to re-open this and provided the necessary
information to re-roduce).

-- 
You are receiving this mail because:
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org