Return-Path: Mailing-List: contact commons-httpclient-dev-help@jakarta.apache.org; run by ezmlm Delivered-To: mailing list commons-httpclient-dev@jakarta.apache.org Received: (qmail 17326 invoked from network); 2 May 2003 22:14:10 -0000 Received: from smtpout01.wamu.net (HELO smtpout.wamu.net) (63.92.194.5) by daedalus.apache.org with SMTP; 2 May 2003 22:14:10 -0000 Received: from twmuds009-smtprelay02 (twmuds009-smtprelay02 [32.85.29.196]) by smtpout.wamu.net (8.12.4/8.12.4) with ESMTP id h42MEHpM009120 for ; Fri, 2 May 2003 15:14:17 -0700 (PDT) Received: from exisea001.us.wamu.net (localhost [127.0.0.1]) by twmuds009-smtprelay02.wamu.net (iPlanet Messaging Server 5.2 HotFix 1.12 (built Feb 13 2003)) with ESMTP id <0HEA00IR55RQBE@twmuds009-smtprelay02.wamu.net> for commons-httpclient-dev@jakarta.apache.org; Fri, 02 May 2003 15:14:17 -0700 (PDT) Received: from EXMSEA005.us.wamu.net ([10.144.81.24]) by exisea001.us.wamu.net with Microsoft SMTPSVC(5.0.2195.5329); Fri, 02 May 2003 15:14:16 -0700 Date: Fri, 02 May 2003 15:14:15 -0700 From: "Karr, David" Subject: RE: Get "SSL implementation not available" with JDK 1.2.2, but not with 1.4.1 To: Commons HttpClient Project Message-id: <0C260F619E428642BFA6380177C3ADF3263E1D@exmsea005.us.wamu.net> MIME-version: 1.0 X-MIMEOLE: Produced By Microsoft Exchange V6.0.6334.0 Content-type: text/plain; charset=us-ascii Content-transfer-encoding: 7BIT Content-class: urn:content-classes:message Thread-topic: Get "SSL implementation not available" with JDK 1.2.2, but not with 1.4.1 Thread-index: AcMQ9kOQPvIL3NFkQxy8YbPPszy6qgAAbRHQ X-MS-Has-Attach: X-MS-TNEF-Correlator: X-OriginalArrivalTime: 02 May 2003 22:14:16.0044 (UTC) FILETIME=[2B45E2C0:01C310F8] X-Spam-Rating: daedalus.apache.org 1.6.2 0/1000/N Ah, that was it. I had also found an example of manually calling "Security.addProvider()", but this is cleaner. These providers (and others) are already in this file in JDK 1.4.1. > -----Original Message----- > From: Oleg Kalnichevski [mailto:o.kalnichevski@dplanet.ch] > > David, > > You must be missing the following lines in your > $JAVA_HOME/jre/lib/security/java.security > > # > # List of providers and their preference orders (see above): > # > security.provider.1=sun.security.provider.Sun > security.provider.2=com.sun.crypto.provider.SunJCE > security.provider.3=com.sun.net.ssl.internal.ssl.Provider > > It's not enough just to copy jsse.jar into $JAVA_HOME/jre/lib/ext > > Please note that these settings are applicable to Sun's implementation > of JSSE only > > I hope this helps > > Oleg > > On Fri, 2003-05-02 at 23:23, Karr, David wrote: > > (Will there eventually be a "commons-httpclient-user" list?) > > > > I'm trying to use HttpClient to implement a connection to a remote site > > through an authenticated proxy. I find that if I run with JDK 1.4.1, I > > believe I'm getting through my proxy to the other site. However, if I > > run with JDK 1.2.2, I get the following (with javax.net.debug set to > > "ssl"): > > > > -------------------- > > keyStore is : > > keyStore type is : jks > > init keystore > > init keymanager of type SunX509 > > default context init failed: java.security.PrivilegedActionException > > java.net.SocketException: SSL implementation not available > > at > > javax.net.ssl.DefaultSSLSocketFactory.createSocket(DashoA6275) > > at > > org.apache.commons.httpclient.protocol.SSLProtocolSocketFactory.createSo > > cket(SSLProtocolSocketFactory.java:127) > > > > -------------------- > > > > I have "jsse.jar" in "$JAVA_HOME/jre/lib/ext", which I thought is what's > > required to fix things like this. It doesn't appear to make any > > difference, however. > > > > I'm using the nightly build from 20030502. > > > > > > --------------------------------------------------------------------- > > To unsubscribe, e-mail: commons-httpclient-dev- > unsubscribe@jakarta.apache.org > > For additional commands, e-mail: commons-httpclient-dev- > help@jakarta.apache.org > > > > > --------------------------------------------------------------------- > To unsubscribe, e-mail: commons-httpclient-dev- > unsubscribe@jakarta.apache.org > For additional commands, e-mail: commons-httpclient-dev- > help@jakarta.apache.org