You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@mina.apache.org by Will Tao <wi...@netregistry.com.au> on 2006/11/29 02:04:29 UTC
Cannot support TLS_DHE_RSA_WITH_AES_256_CBC_SHA with currently installed
providers
Hi all,
Continue with last email I sent; if I manully set the cihpher suite such as
* sslFilter.setEnabledCipherSuites(new
String[]{"TLS_DHE_RSA_WITH_AES_256_CBC_SHA"});
I got the error as following, I am running java5 with debian, and I
think the problem is whatever supported cipher suite I setup, it always
returns Cannot support {....} with currently installed providers.
Anyone has any ideas? TIA.
org.apache.mina.common.IoFilterLifeCycleException: onPostAdd():
SSL:org.apache.mina.filter.SSLFilter@5ead9d in (SOCKET, R:
/127.0.0.1:51273, L: /127.0.0.1:8080, S: 0.0.0.0/0.0.0.0:8080)
at
org.apache.mina.common.support.AbstractIoFilterChain.register(AbstractIoFilterChain.java:333)
at
org.apache.mina.common.support.AbstractIoFilterChain.addLast(AbstractIoFilterChain.java:271)
at
org.apache.mina.common.DefaultIoFilterChainBuilder.buildFilterChain(DefaultIoFilterChainBuilder.java:242)
at
org.apache.mina.transport.socket.nio.SocketAcceptor$Worker.processSessions(SocketAcceptor.java:353)
at
org.apache.mina.transport.socket.nio.SocketAcceptor$Worker.run(SocketAcceptor.java:273)
at
org.apache.mina.util.NamePreservingRunnable.run(NamePreservingRunnable.java:43)
at java.lang.Thread.run(Thread.java:595)
Caused by: java.lang.IllegalArgumentException: Cannot support
TLS_DHE_RSA_WITH_AES_256_CBC_SHA with currently installed providers
at
com.sun.net.ssl.internal.ssl.CipherSuiteList.<init>(CipherSuiteList.java:72)
at
com.sun.net.ssl.internal.ssl.SSLEngineImpl.setEnabledCipherSuites(SSLEngineImpl.java:1679)
at
org.apache.mina.filter.support.SSLHandler.init(SSLHandler.java:128)
at
org.apache.mina.filter.support.SSLHandler.<init>(SSLHandler.java:103)
at org.apache.mina.filter.SSLFilter.onPostAdd(SSLFilter.java:327)
at
org.apache.mina.common.support.AbstractIoFilterChain.register(AbstractIoFilterChain.java:328)
... 6 more
Will Tao wrote:
> Hi all,
>
> I have download mina 1.0 and when I run the echoserver example with
> TLS/SSL protocol, I got exception as followings.
> Also, when I tried to print the value in the
> sslFilter.getEnabledCipherSuites(), it returns null.
> I also tried to use sslFilter.setEnabledCipherSuites() method to set
> various cipher, but I got exception as the algorithm is not supported.
> Any help would be very helpful, thanks.
>
>
>
> 06-11-29 10:42:38,092 ERROR impl.JCLLoggerAdapter.error(ln:443) -
> [/127.0.0.1:38478] EXCEPTION:
> javax.net.ssl.SSLHandshakeException: Initial SSL handshake failed.
> at
> org.apache.mina.filter.SSLFilter.messageReceived(SSLFilter.java:424)
> at
> org.apache.mina.common.support.AbstractIoFilterChain.callNextMessageReceived(AbstractIoFilterChain.java:502)
>
> at
> org.apache.mina.common.support.AbstractIoFilterChain.access$1000(AbstractIoFilterChain.java:52)
>
> at
> org.apache.mina.common.support.AbstractIoFilterChain$EntryImpl$1.messageReceived(AbstractIoFilterChain.java:777)
>
> at
> org.apache.mina.filter.executor.ExecutorFilter.processEvent(ExecutorFilter.java:243)
>
> at
> org.apache.mina.filter.executor.ExecutorFilter$ProcessEventsRunnable.run(ExecutorFilter.java:305)
>
> at
> edu.emory.mathcs.backport.java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:987)
>
> at
> edu.emory.mathcs.backport.java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:528)
>
> at java.lang.Thread.run(Thread.java:595)
> Caused by: javax.net.ssl.SSLHandshakeException: no cipher suites in
> common
> at
> com.sun.net.ssl.internal.ssl.Handshaker.checkThrown(Handshaker.java:994)
> at
> com.sun.net.ssl.internal.ssl.SSLEngineImpl.checkTaskThrown(SSLEngineImpl.java:459)
>
> at
> com.sun.net.ssl.internal.ssl.SSLEngineImpl.writeAppRecord(SSLEngineImpl.java:1054)
>
> at
> com.sun.net.ssl.internal.ssl.SSLEngineImpl.wrap(SSLEngineImpl.java:1026)
> at javax.net.ssl.SSLEngine.wrap(SSLEngine.java:411)
> at
> org.apache.mina.filter.support.SSLHandler.handshake(SSLHandler.java:520)
> at
> org.apache.mina.filter.support.SSLHandler.messageReceived(SSLHandler.java:293)
>
> at
> org.apache.mina.filter.SSLFilter.messageReceived(SSLFilter.java:392)
> ... 8 more
> Caused by: javax.net.ssl.SSLHandshakeException: no cipher suites in
> common
> at
> com.sun.net.ssl.internal.ssl.Alerts.getSSLException(Alerts.java:150)
> at
> com.sun.net.ssl.internal.ssl.SSLEngineImpl.fatal(SSLEngineImpl.java:1352)
> at
> com.sun.net.ssl.internal.ssl.Handshaker.fatalSE(Handshaker.java:176)
> at
> com.sun.net.ssl.internal.ssl.Handshaker.fatalSE(Handshaker.java:164)
> at
> com.sun.net.ssl.internal.ssl.ServerHandshaker.chooseCipherSuite(ServerHandshaker.java:639)
>
> at
> com.sun.net.ssl.internal.ssl.ServerHandshaker.clientHello(ServerHandshaker.java:450)
>
> at
> com.sun.net.ssl.internal.ssl.ServerHandshaker.processMessage(ServerHandshaker.java:178)
>
> at
> com.sun.net.ssl.internal.ssl.Handshaker.processLoop(Handshaker.java:495)
> at
> com.sun.net.ssl.internal.ssl.Handshaker$1.run(Handshaker.java:437)
> at java.security.AccessController.doPrivileged(Native Method)
> at
> com.sun.net.ssl.internal.ssl.Handshaker$DelegatedTask.run(Handshaker.java:932)
>
> at
> org.apache.mina.filter.support.SSLHandler.doTasks(SSLHandler.java:747)
> at
> org.apache.mina.filter.support.SSLHandler.handshake(SSLHandler.java:485)
> ... 10 more
>
>
--
Will Tao
Re: Cannot support TLS_DHE_RSA_WITH_AES_256_CBC_SHA with currently installed providers
Posted by Maarten Bosteels <mb...@gmail.com>.
You need to install the Java Cryptography Extension Unlimited Strength
Jurisdiction Policy Files 5.0
hey don't blame me, that's how Sun calls them :-)
see http://java.sun.com/javase/downloads/index.jsp#docs
Maarten
On 11/29/06, Will Tao <wi...@netregistry.com.au> wrote:
>
> Hi all,
>
> Continue with last email I sent; if I manully set the cihpher suite such
> as
> * sslFilter.setEnabledCipherSuites(new
> String[]{"TLS_DHE_RSA_WITH_AES_256_CBC_SHA"});
> I got the error as following, I am running java5 with debian, and I
> think the problem is whatever supported cipher suite I setup, it always
> returns Cannot support {....} with currently installed providers.
>
> Anyone has any ideas? TIA.
>
> org.apache.mina.common.IoFilterLifeCycleException: onPostAdd():
> SSL:org.apache.mina.filter.SSLFilter@5ead9d in (SOCKET, R:
> /127.0.0.1:51273, L: /127.0.0.1:8080, S: 0.0.0.0/0.0.0.0:8080)
> at
> org.apache.mina.common.support.AbstractIoFilterChain.register(
> AbstractIoFilterChain.java:333)
> at
> org.apache.mina.common.support.AbstractIoFilterChain.addLast(
> AbstractIoFilterChain.java:271)
> at
> org.apache.mina.common.DefaultIoFilterChainBuilder.buildFilterChain(
> DefaultIoFilterChainBuilder.java:242)
> at
> org.apache.mina.transport.socket.nio.SocketAcceptor$Worker.processSessions
> (SocketAcceptor.java:353)
> at
> org.apache.mina.transport.socket.nio.SocketAcceptor$Worker.run(
> SocketAcceptor.java:273)
> at
> org.apache.mina.util.NamePreservingRunnable.run(
> NamePreservingRunnable.java:43)
> at java.lang.Thread.run(Thread.java:595)
> Caused by: java.lang.IllegalArgumentException: Cannot support
> TLS_DHE_RSA_WITH_AES_256_CBC_SHA with currently installed providers
> at
> com.sun.net.ssl.internal.ssl.CipherSuiteList.<init>(CipherSuiteList.java
> :72)
> at
> com.sun.net.ssl.internal.ssl.SSLEngineImpl.setEnabledCipherSuites(
> SSLEngineImpl.java:1679)
> at
> org.apache.mina.filter.support.SSLHandler.init(SSLHandler.java:128)
> at
> org.apache.mina.filter.support.SSLHandler.<init>(SSLHandler.java:103)
> at org.apache.mina.filter.SSLFilter.onPostAdd(SSLFilter.java:327)
> at
> org.apache.mina.common.support.AbstractIoFilterChain.register(
> AbstractIoFilterChain.java:328)
> ... 6 more
>
>
>
>
> Will Tao wrote:
>
> > Hi all,
> >
> > I have download mina 1.0 and when I run the echoserver example with
> > TLS/SSL protocol, I got exception as followings.
> > Also, when I tried to print the value in the
> > sslFilter.getEnabledCipherSuites(), it returns null.
> > I also tried to use sslFilter.setEnabledCipherSuites() method to set
> > various cipher, but I got exception as the algorithm is not supported.
> > Any help would be very helpful, thanks.
> >
> >
> >
> > 06-11-29 10:42:38,092 ERROR impl.JCLLoggerAdapter.error(ln:443) -
> > [/127.0.0.1:38478] EXCEPTION:
> > javax.net.ssl.SSLHandshakeException: Initial SSL handshake failed.
> > at
> > org.apache.mina.filter.SSLFilter.messageReceived(SSLFilter.java:424)
> > at
> >
> org.apache.mina.common.support.AbstractIoFilterChain.callNextMessageReceived
> (AbstractIoFilterChain.java:502)
> >
> > at
> > org.apache.mina.common.support.AbstractIoFilterChain.access$1000(
> AbstractIoFilterChain.java:52)
> >
> > at
> >
> org.apache.mina.common.support.AbstractIoFilterChain$EntryImpl$1.messageReceived
> (AbstractIoFilterChain.java:777)
> >
> > at
> > org.apache.mina.filter.executor.ExecutorFilter.processEvent(
> ExecutorFilter.java:243)
> >
> > at
> > org.apache.mina.filter.executor.ExecutorFilter$ProcessEventsRunnable.run
> (ExecutorFilter.java:305)
> >
> > at
> >
> edu.emory.mathcs.backport.java.util.concurrent.ThreadPoolExecutor.runWorker
> (ThreadPoolExecutor.java:987)
> >
> > at
> >
> edu.emory.mathcs.backport.java.util.concurrent.ThreadPoolExecutor$Worker.run
> (ThreadPoolExecutor.java:528)
> >
> > at java.lang.Thread.run(Thread.java:595)
> > Caused by: javax.net.ssl.SSLHandshakeException: no cipher suites in
> > common
> > at
> > com.sun.net.ssl.internal.ssl.Handshaker.checkThrown(Handshaker.java:994)
> > at
> > com.sun.net.ssl.internal.ssl.SSLEngineImpl.checkTaskThrown(
> SSLEngineImpl.java:459)
> >
> > at
> > com.sun.net.ssl.internal.ssl.SSLEngineImpl.writeAppRecord(
> SSLEngineImpl.java:1054)
> >
> > at
> > com.sun.net.ssl.internal.ssl.SSLEngineImpl.wrap(SSLEngineImpl.java:1026)
> > at javax.net.ssl.SSLEngine.wrap(SSLEngine.java:411)
> > at
> > org.apache.mina.filter.support.SSLHandler.handshake(SSLHandler.java:520)
> > at
> > org.apache.mina.filter.support.SSLHandler.messageReceived(
> SSLHandler.java:293)
> >
> > at
> > org.apache.mina.filter.SSLFilter.messageReceived(SSLFilter.java:392)
> > ... 8 more
> > Caused by: javax.net.ssl.SSLHandshakeException: no cipher suites in
> > common
> > at
> > com.sun.net.ssl.internal.ssl.Alerts.getSSLException(Alerts.java:150)
> > at
> > com.sun.net.ssl.internal.ssl.SSLEngineImpl.fatal(SSLEngineImpl.java
> :1352)
> > at
> > com.sun.net.ssl.internal.ssl.Handshaker.fatalSE(Handshaker.java:176)
> > at
> > com.sun.net.ssl.internal.ssl.Handshaker.fatalSE(Handshaker.java:164)
> > at
> > com.sun.net.ssl.internal.ssl.ServerHandshaker.chooseCipherSuite(
> ServerHandshaker.java:639)
> >
> > at
> > com.sun.net.ssl.internal.ssl.ServerHandshaker.clientHello(
> ServerHandshaker.java:450)
> >
> > at
> > com.sun.net.ssl.internal.ssl.ServerHandshaker.processMessage(
> ServerHandshaker.java:178)
> >
> > at
> > com.sun.net.ssl.internal.ssl.Handshaker.processLoop(Handshaker.java:495)
> > at
> > com.sun.net.ssl.internal.ssl.Handshaker$1.run(Handshaker.java:437)
> > at java.security.AccessController.doPrivileged(Native Method)
> > at
> > com.sun.net.ssl.internal.ssl.Handshaker$DelegatedTask.run(
> Handshaker.java:932)
> >
> > at
> > org.apache.mina.filter.support.SSLHandler.doTasks(SSLHandler.java:747)
> > at
> > org.apache.mina.filter.support.SSLHandler.handshake(SSLHandler.java:485)
> > ... 10 more
> >
> >
>
>
> --
> Will Tao
>
>
>