Gerald Kallas created CAMEL-14527:
-------------------------------------
Summary: camel-jetty HTTPS consumer still fails with handshake
failure
Key: CAMEL-14527
URL: https://issues.apache.org/jira/browse/CAMEL-14527
Project: Camel
Issue Type: Bug
Components: camel-jetty
Affects Versions: 3.0.1
Reporter: Gerald Kallas
After several research I did create the following Blueprint DSL route that
still fails with a TLS handshake failure.
{code:java}
<blueprint xmlns="http://www.osgi.org/xmlns/blueprint/v1.0.0";<blueprint
xmlns="http://www.osgi.org/xmlns/blueprint/v1.0.0";
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance";
xsi:schemaLocation="http://www.osgi.org/xmlns/blueprint/v1.0.0
https://www.osgi.org/xmlns/blueprint/v1.0.0/blueprint.xsd";>
<sslContextParameters id="sslContextParameters"
xmlns="http://camel.apache.org/schema/blueprint";> <secureSocketProtocolsFilter>
<include>TLSv1.2</include> <include>TLSv1.1</include>
</secureSocketProtocolsFilter> <cipherSuitesFilter> <include>.*</include>
<exclude/> </cipherSuitesFilter> <keyManagers keyPassword="xxxxx"> <keyStore
resource="etc/truststore.jks" password="xxxxx"/> </keyManagers> <trustManagers>
<keyStore resource="etc/keystore.p12" password="xxxxx"/> </trustManagers>
</sslContextParameters>
<camelContext id="WEBISP001" xmlns="http://camel.apache.org/schema/blueprint";>
<route id="WEBISP001"> <from
uri="jetty:https://0.0.0.0:8444/hello?sslContextParameters=sslContextParameters";
/> <log message="hello request body: ${in.body}" /> </route>
</camelContext>
</blueprint>
{code}
The request to the endpoint still fails with
{code:java}
curl -vvv --insecure --location --request POST 'https://host:8444/hello'
--data-raw 'Hello World!'
Note: Unnecessary use of -X or --request, POST is already inferred.
* Trying 10.0.0.147...
* TCP_NODELAY set
* Connected to host (10.0.0.147) port 8444 (#0)
* ALPN, offering h2
* ALPN, offering http/1.1
* successfully set certificate verify locations:
* CAfile: /etc/pki/tls/certs/ca-bundle.crt
CApath: none
* TLSv1.3 (OUT), TLS handshake, Client hello (1):
* TLSv1.3 (IN), TLS alert, handshake failure (552):
* error:14094410:SSL routines:ssl3_read_bytes:sslv3 alert handshake failure
* Closing connection 0
curl: (35) error:14094410:SSL routines:ssl3_read_bytes:sslv3 alert handshake
failure{code}
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
