Re: Facing SSL Exception in Tomcat 7.57 using Java

2015-01-20 Thread Rajesh Biswas
Thanks for your support and suggestion, the client code will be distributed
to many clients as command line interface, so changing the JDK with 1.7
will take time and effort.

I found the way to set the SSL property in JDK6 and JDK5, after the below
changes code is working fine:

 System.setProperty( https.protocols, TLSv1 );

Hope it will work for any OS and any JDK greater than 1.5

Regards,
Rajesh

On Tue, Jan 20, 2015 at 9:17 AM, Caldarale, Charles R 
chuck.caldar...@unisys.com wrote:

  From: Rajesh Biswas [mailto:rajesh...@gmail.com]
  Subject: Re: Facing SSL Exception in Tomcat 7.57 using Java

  Would you please pin point the issue why it is not working in JDK5, where
  can I set the TLS property.

 Note that JRE/JDK 5 has not been supported in some years; the last public
 release was in October 2009.  As I recall, Oracle never updated that level
 for the various TLS/SSL errors recently discovered, including the more
 advanced configuration options.

 Any use of JRE/JDK 5 at this point borders on the irresponsible.

  - Chuck


 THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY
 MATERIAL and is thus for use only by the intended recipient. If you
 received this in error, please contact the sender and delete the e-mail and
 its attachments from all computers.


 -
 To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
 For additional commands, e-mail: users-h...@tomcat.apache.org




Re: Facing SSL Exception in Tomcat 7.57 using Java

2015-01-19 Thread Rajesh Biswas
Hello Mark,

Thank you for your reply.

I have de-select the User SSL 3.0 option from Control Panel --- Java 
Advanced Tab

Still I am not able to connect.

Is there any other place I need to disable SSL v.3

Rajesh

On Tue, Jan 20, 2015 at 12:32 AM, Mark Thomas ma...@apache.org wrote:

 On 19/01/2015 17:33, Rajesh Biswas wrote:
  I am facing issues running the application in SSL with latest version of
  tomcat 7.57, same is working in 7.40. Below is the configuration in my
  server.xml file
 
   keystorePass=xxx clientAuth=false sslProtocol=TLS /
 
  I am getting ssl handshake error while I am trying to access the
  application through stand alone java client(I am using
  javax.net.ssl.HttpsURLConnection to get the connection)
 
  Same is working fine in tomcat 7.40 and also 7.56 with same
 configuration.
  I am using 64 Bit JDK7
 
  Also interesting point here I am able to access through web URL using
  https, while I am trying to connect from Java program I am getting error
 
  Would you please suggest I am missing any configutaion?

 I'd guess your client is trying to use SSLv3 which Tomcat now disables
 by default.

 Mark


 -
 To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
 For additional commands, e-mail: users-h...@tomcat.apache.org




Re: Facing SSL Exception in Tomcat 7.57 using Java

2015-01-19 Thread Rajesh Biswas
Hello Mark,

I have some more points to mention.

The SSL is not working from my Java client which is ran on JDK5, but same
is working on JDK7.

I put some debug statement to print the SSL version client is running.

For JDK I am getting NONE, for JDK7 I am getting TLSv1

Below is my statement:

SSLSocketFactory factory =
(SSLSocketFactory)SSLSocketFactory.getDefault();
SSLSocket socket =
(SSLSocket)factory.createSocket(url.getHost(), 4743);
System.out.println( socket.getSession().getProtocol());

When I am running on JDK5 I am getting output as NONE

When I am running on JDK7 I am getting output as TLSv1

Would you please pin point the issue why it is not working in JDK5, where
can I set the TLS property.



On Tue, Jan 20, 2015 at 7:41 AM, Rajesh Biswas rajesh...@gmail.com wrote:

 Hello Mark,

 Thank you for your reply.

 I have de-select the User SSL 3.0 option from Control Panel --- Java 
 Advanced Tab

 Still I am not able to connect.

 Is there any other place I need to disable SSL v.3

 Rajesh

 On Tue, Jan 20, 2015 at 12:32 AM, Mark Thomas ma...@apache.org wrote:

 On 19/01/2015 17:33, Rajesh Biswas wrote:
  I am facing issues running the application in SSL with latest version of
  tomcat 7.57, same is working in 7.40. Below is the configuration in my
  server.xml file
 
   keystorePass=xxx clientAuth=false sslProtocol=TLS /
 
  I am getting ssl handshake error while I am trying to access the
  application through stand alone java client(I am using
  javax.net.ssl.HttpsURLConnection to get the connection)
 
  Same is working fine in tomcat 7.40 and also 7.56 with same
 configuration.
  I am using 64 Bit JDK7
 
  Also interesting point here I am able to access through web URL using
  https, while I am trying to connect from Java program I am getting error
 
  Would you please suggest I am missing any configutaion?

 I'd guess your client is trying to use SSLv3 which Tomcat now disables
 by default.

 Mark


 -
 To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
 For additional commands, e-mail: users-h...@tomcat.apache.org





RE: Facing SSL Exception in Tomcat 7.57 using Java

2015-01-19 Thread Caldarale, Charles R
 From: Rajesh Biswas [mailto:rajesh...@gmail.com] 
 Subject: Re: Facing SSL Exception in Tomcat 7.57 using Java

 Would you please pin point the issue why it is not working in JDK5, where
 can I set the TLS property.

Note that JRE/JDK 5 has not been supported in some years; the last public 
release was in October 2009.  As I recall, Oracle never updated that level for 
the various TLS/SSL errors recently discovered, including the more advanced 
configuration options.

Any use of JRE/JDK 5 at this point borders on the irresponsible.

 - Chuck


THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY 
MATERIAL and is thus for use only by the intended recipient. If you received 
this in error, please contact the sender and delete the e-mail and its 
attachments from all computers.


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Re: Facing SSL Exception in Tomcat 7.57 using Java

2015-01-19 Thread Mark Thomas
On 19/01/2015 17:33, Rajesh Biswas wrote:
 I am facing issues running the application in SSL with latest version of
 tomcat 7.57, same is working in 7.40. Below is the configuration in my
 server.xml file
 
  keystorePass=xxx clientAuth=false sslProtocol=TLS /
 
 I am getting ssl handshake error while I am trying to access the
 application through stand alone java client(I am using
 javax.net.ssl.HttpsURLConnection to get the connection)
 
 Same is working fine in tomcat 7.40 and also 7.56 with same configuration.
 I am using 64 Bit JDK7
 
 Also interesting point here I am able to access through web URL using
 https, while I am trying to connect from Java program I am getting error
 
 Would you please suggest I am missing any configutaion?

I'd guess your client is trying to use SSLv3 which Tomcat now disables
by default.

Mark


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org