hc-httpclient-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Welty, Richard" <rwe...@ltionline.com>
Subject RE: how to work around javax.net.ssl.SSLKeyException: RSA premaster
Date Thu, 04 Oct 2012 20:33:31 GMT
I finally worked out how to get the wirelog out of a Fuse ESB application, it's attached.

From: Susanta Mohapatra [mailto:mohapatra.susanta@gmail.com]
Sent: Thursday, October 04, 2012 10:18 AM
To: Welty, Richard
Cc: HttpClient User Discussion
Subject: Re: how to work around javax.net.ssl.SSLKeyException: RSA premaster

This is strange...  can you provide more info?

- what is the jdk version ?
- which server are you trying to connect? apache httpd or any thing else?
- are you using any authentication scheme with ssl ? like basic/digest/ntlm etc

try to start jvm with following flag: -Djavax.net.debug=all
This will generate wire log output in console. Send the wire log result.


On Thu, Oct 4, 2012 at 7:03 PM, Welty, Richard <rwelty@ltionline.com<mailto:rwelty@ltionline.com>>
Welty, Richard [mailto:rwelty@ltionline.com<mailto:rwelty@ltionline.com>]  wrote:

>Susanta Mohapatra [mailto:mohapatra.susanta@gmail.com<mailto:mohapatra.susanta@gmail.com>]
>> You need to add the unlimited strength JCE files. Google it, you can find the download
link easily.

>I saw discussion of that in the context of Oracle/Sun environments, and IBM environments.
It wasn't clear it applied to >openjdk, but I'll try it and see.
I have ended up switching from openjdk to an oracle/sun jdk, 6u35, and have installed the
unlimited JCE policy files as specified. I am still getting the error:

javax.net.ssl.SSLKeyException: RSA premaster secret error
        at com.sun.net.ssl.internal.ssl.RSAClientKeyExchange.<init>(RSAClientKe\
        at com.sun.net.ssl.internal.ssl.ClientHandshaker.serverHelloDone(Client\
        at com.sun.net.ssl.internal.ssl.ClientHandshaker.processMessage(ClientH\

any suggestions on how to diagnose this?


View raw message