[
https://issues.apache.org/jira/browse/CAMEL-14527?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Gerald Kallas updated CAMEL-14527:
----------------------------------
Description:
After several research I did create the following Blueprint DSL route that
still fails with a TLS handshake failure.
{code:java}
<blueprint xmlns="http://www.osgi.org/xmlns/blueprint/v1.0.0";<blueprint
xmlns="http://www.osgi.org/xmlns/blueprint/v1.0.0";
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance";
xsi:schemaLocation="http://www.osgi.org/xmlns/blueprint/v1.0.0
https://www.osgi.org/xmlns/blueprint/v1.0.0/blueprint.xsd";>
<sslContextParameters id="sslContextParameters"
xmlns="http://camel.apache.org/schema/blueprint";>
<secureSocketProtocolsFilter>
<include>TLSv1.2</include>
<include>TLSv1.1</include>
</secureSocketProtocolsFilter>
<cipherSuitesFilter>
<include>.*</include>
<exclude/>
</cipherSuitesFilter>
<keyManagers keyPassword="xxxxx">
<keyStore resource="etc/truststore.jks" password="xxxxx"/>
</keyManagers>
<trustManagers>
<keyStore resource="etc/keystore.p12" password="xxxxx"/>
</trustManagers>
</sslContextParameters>
<camelContext id="WEBISP001" xmlns="http://camel.apache.org/schema/blueprint";>
<route id="WEBISP001">
<from
uri="jetty:https://0.0.0.0:8444/hello?sslContextParameters=sslContextParameters";
/>
<log message="hello request body: ${in.body}" />
</route>
</camelContext>
</blueprint>
{code}
The request to the endpoint still fails with
{code:java}
curl -vvv --insecure --location --request POST 'https://host:8444/hello'
--data-raw 'Hello World!'
Note: Unnecessary use of -X or --request, POST is already inferred.
* Trying 10.0.0.147...
* TCP_NODELAY set
* Connected to host (10.0.0.147) port 8444 (#0)
* ALPN, offering h2
* ALPN, offering http/1.1
* successfully set certificate verify locations:
* CAfile: /etc/pki/tls/certs/ca-bundle.crt
CApath: none
* TLSv1.3 (OUT), TLS handshake, Client hello (1):
* TLSv1.3 (IN), TLS alert, handshake failure (552):
* error:14094410:SSL routines:ssl3_read_bytes:sslv3 alert handshake failure
* Closing connection 0
curl: (35) error:14094410:SSL routines:ssl3_read_bytes:sslv3 alert handshake
failure{code}
was:
After several research I did create the following Blueprint DSL route that
still fails with a TLS handshake failure.
{code:java}
<blueprint xmlns="http://www.osgi.org/xmlns/blueprint/v1.0.0";<blueprint
xmlns="http://www.osgi.org/xmlns/blueprint/v1.0.0";
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance";
xsi:schemaLocation="http://www.osgi.org/xmlns/blueprint/v1.0.0
https://www.osgi.org/xmlns/blueprint/v1.0.0/blueprint.xsd";>
<sslContextParameters id="sslContextParameters"
xmlns="http://camel.apache.org/schema/blueprint";> <secureSocketProtocolsFilter>
<include>TLSv1.2</include> <include>TLSv1.1</include>
</secureSocketProtocolsFilter> <cipherSuitesFilter> <include>.*</include>
<exclude/> </cipherSuitesFilter> <keyManagers keyPassword="xxxxx"> <keyStore
resource="etc/truststore.jks" password="xxxxx"/> </keyManagers> <trustManagers>
<keyStore resource="etc/keystore.p12" password="xxxxx"/> </trustManagers>
</sslContextParameters>
<camelContext id="WEBISP001" xmlns="http://camel.apache.org/schema/blueprint";>
<route id="WEBISP001"> <from
uri="jetty:https://0.0.0.0:8444/hello?sslContextParameters=sslContextParameters";
/> <log message="hello request body: ${in.body}" /> </route>
</camelContext>
</blueprint>
{code}
The request to the endpoint still fails with
{code:java}
curl -vvv --insecure --location --request POST 'https://host:8444/hello'
--data-raw 'Hello World!'
Note: Unnecessary use of -X or --request, POST is already inferred.
* Trying 10.0.0.147...
* TCP_NODELAY set
* Connected to host (10.0.0.147) port 8444 (#0)
* ALPN, offering h2
* ALPN, offering http/1.1
* successfully set certificate verify locations:
* CAfile: /etc/pki/tls/certs/ca-bundle.crt
CApath: none
* TLSv1.3 (OUT), TLS handshake, Client hello (1):
* TLSv1.3 (IN), TLS alert, handshake failure (552):
* error:14094410:SSL routines:ssl3_read_bytes:sslv3 alert handshake failure
* Closing connection 0
curl: (35) error:14094410:SSL routines:ssl3_read_bytes:sslv3 alert handshake
failure{code}
> camel-jetty HTTPS consumer still fails with handshake failure
> -------------------------------------------------------------
>
> Key: CAMEL-14527
> URL: https://issues.apache.org/jira/browse/CAMEL-14527
> Project: Camel
> Issue Type: Bug
> Components: camel-jetty
> Affects Versions: 3.0.1
> Reporter: Gerald Kallas
> Priority: Major
>
> After several research I did create the following Blueprint DSL route that
> still fails with a TLS handshake failure.
> {code:java}
> <blueprint xmlns="http://www.osgi.org/xmlns/blueprint/v1.0.0";<blueprint
> xmlns="http://www.osgi.org/xmlns/blueprint/v1.0.0";
> xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance";
> xsi:schemaLocation="http://www.osgi.org/xmlns/blueprint/v1.0.0
> https://www.osgi.org/xmlns/blueprint/v1.0.0/blueprint.xsd";>
> <sslContextParameters id="sslContextParameters"
> xmlns="http://camel.apache.org/schema/blueprint";>
> <secureSocketProtocolsFilter>
> <include>TLSv1.2</include>
> <include>TLSv1.1</include>
> </secureSocketProtocolsFilter>
> <cipherSuitesFilter>
> <include>.*</include>
> <exclude/>
> </cipherSuitesFilter>
> <keyManagers keyPassword="xxxxx">
> <keyStore resource="etc/truststore.jks" password="xxxxx"/>
> </keyManagers>
> <trustManagers>
> <keyStore resource="etc/keystore.p12" password="xxxxx"/>
> </trustManagers>
> </sslContextParameters>
> <camelContext id="WEBISP001"
> xmlns="http://camel.apache.org/schema/blueprint";>
> <route id="WEBISP001">
> <from
> uri="jetty:https://0.0.0.0:8444/hello?sslContextParameters=sslContextParameters";
> />
> <log message="hello request body: ${in.body}" />
> </route>
> </camelContext>
> </blueprint>
> {code}
> The request to the endpoint still fails with
> {code:java}
> curl -vvv --insecure --location --request POST 'https://host:8444/hello'
> --data-raw 'Hello World!'
> Note: Unnecessary use of -X or --request, POST is already inferred.
> * Trying 10.0.0.147...
> * TCP_NODELAY set
> * Connected to host (10.0.0.147) port 8444 (#0)
> * ALPN, offering h2
> * ALPN, offering http/1.1
> * successfully set certificate verify locations:
> * CAfile: /etc/pki/tls/certs/ca-bundle.crt
> CApath: none
> * TLSv1.3 (OUT), TLS handshake, Client hello (1):
> * TLSv1.3 (IN), TLS alert, handshake failure (552):
> * error:14094410:SSL routines:ssl3_read_bytes:sslv3 alert handshake failure
> * Closing connection 0
> curl: (35) error:14094410:SSL routines:ssl3_read_bytes:sslv3 alert handshake
> failure{code}
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
