Mailing-List: contact users-help@tomcat.apache.org; run by ezmlm
Precedence: bulk
Reply-To: "Tomcat Users List" <users@tomcat.apache.org>
Subject: Re: TLSv1.2 ALERT: fatal, description = unexpected_message
To: Tomcat Users List <users@tomcat.apache.org>
References: 
 <SG2PR04MB09740FF88FD13090800F27AF8D5B0@SG2PR04MB0974.apcprd04.prod.outlook.com>
 <4476e729-44b7-5fcb-f93c-7f10c5d1cbb9@apache.org>
 <SG2PR04MB0974CE74CD6F2114F15BAF318D5B0@SG2PR04MB0974.apcprd04.prod.outlook.com>
From: Christopher Schultz <chris@christopherschultz.net>
Message-id: <5bc85e17-38b4-d5a7-d264-e0b0825cfc1e@christopherschultz.net>
Date: Mon, 06 Jun 2016 15:05:30 -0400
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.11; rv:45.0)
 Gecko/20100101 Thunderbird/45.1.1
MIME-version: 1.0
In-reply-to: 
 <SG2PR04MB0974CE74CD6F2114F15BAF318D5B0@SG2PR04MB0974.apcprd04.prod.outlook.com>
Content-type: text/plain; charset=utf-8
Content-transfer-encoding: 7bit
archived-at: Mon, 06 Jun 2016 19:06:05 -0000

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Venkata,

On 6/5/16 1:45 PM, Venkata Reddy P wrote:
> My current ssl errors are getting only for IE and google chrome 
> browsers.  The same application is working well for the Firefox 
> that's the reason can't suspect the SSL implementation.

I disagree with your assumption here that Firefox and MSIE/Chrome all
work the same way when it comes to TLS. Perhaps MSIE/Chrome use a
particular TLS extension that Firefox does not. Perhaps there is a
cipher suite in the list from MSIE/Chrome that is not in Firefox (or
vice-versa).

> I have also tried with OpenSSL client and confirms the nothing
> wrong with ssl implementation. The same ssl implantation have been
> using from tomcat4 onwards and the same implementation has been
> injected as per the tomcat8 connectors.

Lots of changes have occurred within the Tomcat Connector code between
Tomcat 4 and Tomcat 8. The same implementation can not be successfully
re-used across those versions.

Perhaps if you shared some of the code, we could help debug it. If
not, you will have to debug your own code by yourself.

- -chris

> -----Original Message----- From: Mark Thomas
> [mailto:markt@apache.org] Sent: 05 June 2016 22:23 To: Tomcat Users
> List Subject: Re: TLSv1.2 ALERT: fatal, description =
> unexpected_message
> 
> On 05/06/2016 16:32, Venkata Reddy P wrote:
>> Hi,
>> 
>> I have a setup with Tomcat8.0.33,jre8u91 and with ssl enabled
>> with http connector. <Connector SSLEnabled="true"
>> acceptCount="100" address="10.4.20.46" connectionTimeout="-1" 
>> disableUploadTimeout="true" enableLookups="false" 
>> maxHttpHeaderSize="8192" maxThreads="500" port="50002" 
>> protocol="com.poc.tomcat8.SSLHttp11Protocol" scheme="https"
>> secure="true" />
>> 
>> Most of the application works on ssl without any issues but while
>> downloading JS,CSS files seems to be failing. I can't suspect the
>> ssl implementation.
> 
> Why not? We haven't seen any reports from users using the default
> TLS implementation. You are using a custom TLS implementation any
> you are seeing errors. Absent some VERY strong evidence this is a
> Tomcat bug, all the indications are that the bug is in
> com.poc.tomcat8.SSLHttp11Protocol
> 
> Mark
> 
> 
> ---------------------------------------------------------------------
>
> 
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
> For additional commands, e-mail: users-help@tomcat.apache.org
> 
> 
> ---------------------------------------------------------------------
>
> 
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
> For additional commands, e-mail: users-help@tomcat.apache.org
> 
-----BEGIN PGP SIGNATURE-----
Comment: GPGTools - http://gpgtools.org
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/

iEYEARECAAYFAldVyXoACgkQ9CaO5/Lv0PBXiACgueSAfA8AJuKZ8Bj8ASyufUKO
rWEAoLypfk0l1ksNuBJzgjfmLbtetOB4
=wKzY
-----END PGP SIGNATURE-----

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org