Mailing-List: contact httpclient-users-help@hc.apache.org; run by ezmlm
Precedence: bulk
Reply-To: "HttpClient User Discussion" <httpclient-users@hc.apache.org>
Received-SPF: pass (athena.apache.org: local policy)
From: "Welty, Richard" <rwelty@ltionline.com>
To: Susanta Mohapatra <mohapatra.susanta@gmail.com>
CC: HttpClient User Discussion <httpclient-users@hc.apache.org>
Subject: RE: how to work around javax.net.ssl.SSLKeyException: RSA premaster
Thread-Topic: how to work around javax.net.ssl.SSLKeyException: RSA premaster
Thread-Index: AQHNnc9YWoY0f0kEjE6xnJPQjKyZcZekdigwgAT6/JCAAAxLgP//vdig
Date: Thu, 4 Oct 2012 14:24:06 +0000
Message-ID: <1579549587CEA24C85CE49CE261FA5E10FD61716@ltischcorpx01.lti.int>
References: <1579549587CEA24C85CE49CE261FA5E10FD5E5CD@ltischcorpx01.lti.int>
	<1579549587CEA24C85CE49CE261FA5E10FD616B5@ltischcorpx01.lti.int>
 <CAFL1CpOVRSWbNVU9M=hQJWAsMuB09-BJRYf5BmcU_M4rGEkT9w@mail.gmail.com>
In-Reply-To: 
 <CAFL1CpOVRSWbNVU9M=hQJWAsMuB09-BJRYf5BmcU_M4rGEkT9w@mail.gmail.com>
Accept-Language: en-US
Content-Language: en-US
Content-Type: multipart/alternative;
	boundary="_000_1579549587CEA24C85CE49CE261FA5E10FD61716ltischcorpx01lt_"
MIME-Version: 1.0

--_000_1579549587CEA24C85CE49CE261FA5E10FD61716ltischcorpx01lt_
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

The jdk is sun/oracle 6u35 (the most recent 1.6)

The server I'm trying to talk to is a demo server for the service now produ=
ct, the url is

https://demo04.service-now.com/cmdb_ci_list.do?XML&sysparm_query=3Dname=3D

with username/password of admin/admin

I can access it fine with curl on the linux box, specifying the username/pa=
ssword on the command line (the service now server won't do interactive pro=
mpting for username/password.)

The authentication scheme at servicenow is basic

I'll try the wirelog output momentarily.

Thanks,
   richard

From: Susanta Mohapatra [mailto:mohapatra.susanta@gmail.com]
Sent: Thursday, October 04, 2012 10:18 AM
To: Welty, Richard
Cc: HttpClient User Discussion
Subject: Re: how to work around javax.net.ssl.SSLKeyException: RSA premaste=
r


This is strange...  can you provide more info?

- what is the jdk version ?
- which server are you trying to connect? apache httpd or any thing else?
- are you using any authentication scheme with ssl ? like basic/digest/ntlm=
 etc

try to start jvm with following flag: -Djavax.net.debug=3Dall
This will generate wire log output in console. Send the wire log result.

-Susanta

On Thu, Oct 4, 2012 at 7:03 PM, Welty, Richard <rwelty@ltionline.com<mailto=
:rwelty@ltionline.com>> wrote:
Welty, Richard [mailto:rwelty@ltionline.com<mailto:rwelty@ltionline.com>]  =
wrote:

>Susanta Mohapatra [mailto:mohapatra.susanta@gmail.com<mailto:mohapatra.sus=
anta@gmail.com>] writes:
>> You need to add the unlimited strength JCE files. Google it, you can fin=
d the download link easily.

>I saw discussion of that in the context of Oracle/Sun environments, and IB=
M environments. It wasn't clear it applied to >openjdk, but I'll try it and=
 see.
I have ended up switching from openjdk to an oracle/sun jdk, 6u35, and have=
 installed the unlimited JCE policy files as specified. I am still getting =
the error:

javax.net.ssl.SSLKeyException: RSA premaster secret error
        at com.sun.net.ssl.internal.ssl.RSAClientKeyExchange.<init>(RSAClie=
ntKe\
yExchange.java:97)[:1.6]
        at com.sun.net.ssl.internal.ssl.ClientHandshaker.serverHelloDone(Cl=
ient\
Handshaker.java:744)[:1.6]
        at com.sun.net.ssl.internal.ssl.ClientHandshaker.processMessage(Cli=
entH\
andshaker.java:238)[:1.6]

any suggestions on how to diagnose this?

Richard


--_000_1579549587CEA24C85CE49CE261FA5E10FD61716ltischcorpx01lt_--