> > main, WRITE: TLSv1 Alert, length = 2
> 
> Gerd
> 
> This looks like a SSL protocol compatibility issue. Try using a
> different version of the protocol (SSLv1 or TLSv1) and see if that makes
> any difference.

I inspected the CURL verbose output to see what SSL version was 
successfull. 
CURL says 
                ...

        * SSLv3, TLS handshake, Finished (20):
        * SSL connection using AES128-SHA
                ...

So I tried "SSLv3" first.

            SSLContext          ctx = SSLContext.getInstance("SSLv3");
            MyTrustManager      tm  = new MyTrustManager();
            ctx.init            (null, new MyTrustManager []{tm}, null);  
            SSLSocketFactory socketFactory = new SSLSocketFactory(ctx);

No way. 
Also tried 
        TLS
      TLSv1/2 
      SSLv1/2/3 
So all in all no difference. Problem persists.

While debugging and inspecting the contents of classes, I found something 
appearing suspicious to me:
After execution of the code section above, 
                "ctx.contextSpi.trustManager"  and 
"socketFactory.socketFactory.trustManager" both point to 
"com.sun.net.ssl.internal.ssl.DummyX509TrustManager"

I would expect my "MyTrustManager" to appear in the socketFactory at that 
point.


Regards
Gerd

The information included in this e-mail and any files transmitted with it is 
strictly confidential and may be privileged or otherwise protected from 
disclosure. If you are not the intended recipient, please notify the sender 
immediately by e-mail and delete this e-mail as well as any attachment from 
your system. If you are not the intended recipient you are not authorized to 
use and/or copy this message and/or attachment and/or disclose the contents to 
any other person.

Reply via email to