|
Hello,
since you write that the same code worked with JDK < 1.4, I
assume the problem is due
to JCE provider verification (please ensure to use the signed
version of iaik_jce_(full).jar
and check if you have installed unlimited
strengh jurisdiction policy files, see
Before staring the handshake you may print your SSLContext to
System.out to see its
configuration (what cipher suites it is able to
support).
Regards,
Dieter
----- Original Message -----
Sent: Wednesday, November 27, 2002 10:50
PM
Subject: [iaik-ssl]cu|| JDK 1.4
IOException while handshaking: Connection closed by remote host.
Hi!
I'm trying hard to figure out why handshake can't be
completed when running with JDK 1.4. The same code that worked fine with
JDK 1.1 - 1.3 using IAIK library becomes broken. I even tried
iaik.security.provider.IAIK.addAsJDK14Provider(), but that didn't help.
With 1.4 when the client sends a client_hello message to the server, it
never receives a response from the server because an IOException was thrown
in the handshaking.
ssl_debug(1): Starting handshake (iSaSiLk
3.05)... ssl_debug(1): Sending v3 client_hello message, requesting version
3.1... ssl_debug(1): IOException while handshaking: Connection closed by
remote host. ssl_debug(1): Sending alert: Alert Fatal: handshake
failure ssl_debug(1): Shutting down SSL layer... ssl_debug(2): Starting
handshake (iSaSiLk 3.05)... ssl_debug(2): Sending v3 client_hello message,
requesting version 3.1... ssl_debug(2): IOException while handshaking:
Connection closed by remote host. ssl_debug(2): Sending alert: Alert Fatal:
handshake failure ssl_debug(2): Shutting down SSL layer... ssl_debug(3):
Starting handshake (iSaSiLk 3.05)... ssl_debug(3): Sending v3 client_hello
message, requesting version 3.1... ssl_debug(3): IOException while
handshaking: Connection closed by remote host. ssl_debug(3): Sending alert:
Alert Fatal: handshake failure ssl_debug(3): Shutting down SSL
layer...
Does anyone know what caused this problem? And are there ways
other than context.setDebugStream(System.out) that can help me get more
detailed info. on what went wrong? Any comments are extremely
appreciated.
Regards, Wei
-- Mailinglist-archive at
http://jcewww.iaik.at/mailarchive/iaik-ssl/sslthreads.html
To
unsubscribe send an email to listserv@iaik.at with the folowing content:
UNSUBSCRIBE iaik-ssl
|