[jboss-jira] [JBoss JIRA] (ELY-388) On IBM Java 1.8 I am unable to create HTTPS connection whit "TLSv1" openssl cipher string

[Jan Kalina (JIRA)]

    [ https://issues.jboss.org/browse/ELY-388?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13455997#comment-13455997 ] 

Jan Kalina edited comment on ELY-388 at 8/30/17 6:17 AM:
---------------------------------------------------------

By Steps to reproduce this is *not Elytron issue* - legacy {{security-realm}} is set and elytron's {{ssl-context}} is not defined. Legacy security is used to obtain SSL context.


was (Author: honza889):
By Steps to reproduce this is *not Elytron issue* - legacy {{security-realm}} is set and elytron's {{ssl-context}} is not defined.

> On IBM Java 1.8 I am unable to create HTTPS connection whit "TLSv1" openssl cipher string
> -----------------------------------------------------------------------------------------
>
>                 Key: ELY-388
>                 URL: https://issues.jboss.org/browse/ELY-388
>             Project: WildFly Elytron
>          Issue Type: Bug
>          Components: SSL
>    Affects Versions: 1.0.2.Final
>         Environment: IBM java 1.8 SR1 FP10
>            Reporter: Martin Choma
>         Attachments: server_debug.log
>
>
> On ibm java 1.8 I can't establish HTTPS connection using TLSv1 cipher string. On EAP 6.4 it is possible.
> Handshake ends with message 
> javax.net.ssl.SSLHandshakeException: No appropriate protocol, may be no appropriate cipher suite specified or protocols are deactivated
> Note, issue apply to enabled-cipher-suites="TLSv1", not enabled-protocols="TLSv1" - that works OK.
> According to OpenSSL documentation [1], cipher suites corresponding with TLSv1 cipher string should be available for handshake.
> According to Elytron documentation [2], cipher suites corresponding with TLSv1 cipher string should be available for handshake.
> [1] https://www.openssl.org/docs/manmaster/apps/ciphers.html#CIPHER-STRINGS
> [2] http://wildfly-security.github.io/wildfly-elytron/org/wildfly/security/ssl/CipherSuiteSelector.html#fromString-java.lang.String-



--
This message was sent by Atlassian JIRA
(v7.2.3#72005)