Re: OpenSSL/Java JSSE Handshake problem...

2002-04-16 Thread Lutz Jaenicke
On Mon, Apr 15, 2002 at 11:23:49PM +0200, David Maurus wrote: Andreas Sterbenz wrote: For the Sun JSSE provider, the default enabled protocols are SSLv3, TLSv1, and the pseudo protocol SSLv2Hello. The latter means that client hello messages are sent/ accepted in SSLv2 format. This is for

Re: OpenSSL/Java JSSE Handshake problem...

2002-04-15 Thread David Maurus
Andreas Sterbenz wrote: For the Sun JSSE provider, the default enabled protocols are SSLv3, TLSv1, and the pseudo protocol SSLv2Hello. The latter means that client hello messages are sent/ accepted in SSLv2 format. This is for better error diagnostic when talking to SSLv2 only

Re: OpenSSL/Java JSSE Handshake problem...

2002-04-09 Thread Kevin Regan
Hi, The client and server are hanging at the moment (I have them both set up to defer the handshake until they actually start doing reads and writes). Here is the output from the Java (client) side: %% No cached client session *** ClientHello, v3.1 RandomCookie: GMT: 1001529913 bytes = { 73,

Re: OpenSSL/Java JSSE Handshake problem...

2002-04-09 Thread Lutz Jaenicke
On Mon, Apr 08, 2002 at 06:23:12PM -0500, Kevin Regan wrote: Hi, The client and server are hanging at the moment (I have them both set up to defer the handshake until they actually start doing reads and writes). Here is the output from the Java (client) side: %% No cached client

Re: OpenSSL/Java JSSE Handshake problem...

2002-04-09 Thread Andreas Sterbenz
Kevin Regan wrote: 26747:error:1408F10B:SSL routines:SSL3_GET_RECORD:wrong version number:s3_pkt.c:290: This happens when I select TLSv1 on the Java side and TLSv1_server_method on the OpenSSL side. TLSv1 on the Java side and SSLv23_server_method (but not SSLv3_server_method) works

Re: OpenSSL/Java JSSE Handshake problem...

2002-04-09 Thread David Maurus
This might have the same cause as the problem I encountered. Brad Whetmore from Sun helped me find this. According to TLS (which can be found e.g. here: http://www.ietf.org/rfc/rfc2246.txt ), in the final message exchanges from the TLS handshake, a client key exchange message is sent by the

Re: OpenSSL/Java JSSE Handshake problem...

2002-04-09 Thread Lutz Jaenicke
On Tue, Apr 09, 2002 at 08:52:29PM +0200, David Maurus wrote: This might have the same cause as the problem I encountered. Brad Whetmore from Sun helped me find this. According to TLS (which can be found e.g. here: http://www.ietf.org/rfc/rfc2246.txt ), in the final message exchanges from

Re: OpenSSL/Java JSSE Handshake problem...

2002-04-03 Thread David Maurus
Kevin Regan wrote: I've run into the handshake problem with OpenSSL and Java JSSE. If I change the method used to create the SSL context from TLSv1_server_method to SSLv23_server_method, the problem is fixed. Which version of JSSE are you using, and can you provide debug output? You can

OpenSSL/Java JSSE Handshake problem...

2002-04-02 Thread Kevin Regan
I've run into the handshake problem with OpenSSL and Java JSSE. If I change the method used to create the SSL context from TLSv1_server_method to SSLv23_server_method, the problem is fixed. However, I'd like to know what the problem actually is and if this incompatibility will ever be fixed?

Re: OpenSSL/Java JSSE Handshake problem...

2002-04-02 Thread Lutz Jaenicke
On Tue, Apr 02, 2002 at 02:34:00PM -0600, Kevin Regan wrote: I've run into the handshake problem with OpenSSL and Java JSSE. If I change the method used to create the SSL context from TLSv1_server_method to SSLv23_server_method, the problem is fixed. However, I'd like to know what the