Home | Contact Us | FAQ | Search & Site Map | Link to Us
Sign In | Join | Other 45 Sites in Network
HomeAnnouncementsWhite Papers
Discussion GroupsFirst AidDatabasesJavaBeansGUIJava 3DVirtual MachineCORBASecurityToolsGeneral
Java DirectoryOpen Source ProjectsSample Book ChaptersUser GroupsWeb Resources
Related Topics
Databases.NETMore Topics ...

Java Forum / General / July 2007

Tip: Looking for answers? Try searching our database.

com.sun.net.httpserver.HttpsServer - How To?

Thread view: 
Karl Uppiano - 11 Jul 2007 07:35 GMT
I am using the mini HTTP server in JAX-WS that ships with JSE 1.6 to build a
web service that is embedded in an application. The HTTP server works fine,
but the HTTPS server does not. The handshake fails on client hello, with
"javax.net.ssl.SSLHandshakeException: no cipher suites in common".

I have studied the JAX-WS API documentation, HttpsServer documentation (and
related links), the JSSE documentation, and Googled this to death. As far as
I can tell, the necessary cipher suites are supported and enabled. I have
run an Ethereal trace of the network traffic, and it appears that the client
is sending a supported cipher suite in the client hello. I can't decipher
the response the server is sending back. There appears to be no data, just
TCP/IP messages and then a disconnect.

Has anyone ever gotten com.sun.net.httpserver.HttpsServer to work? If so,
what is the trick? I can post more information if anyone out there are any
takers.
Karl Uppiano - 13 Jul 2007 10:06 GMT
>I am using the mini HTTP server in JAX-WS that ships with JSE 1.6 to build
>a web service that is embedded in an application. The HTTP server works
[quoted text clipped - 12 lines]
> what is the trick? I can post more information if anyone out there are any
> takers.

Update: I got a copy of the JSE source and traced into the JSEE code a bit.
It looks like the SSL engine has a cipher of SSL_NULL_WITH_NULL_NULL_NULL or
something like that, even though I initialized the SSL context and passed in
a configurator in which I set the protocol and cipher suites in the
configure method override. Is HttpsServer simply broken or something?


Free Magazines

Get these publications absolutely FREE for up to 12 months. There are no hidden fees and no obligation. Simply choose a title, complete the application form and submit it. Read more ...

Oracle MagazineNetwork ComputingComputer WorldBio-IT WorldeWeekInformation WeekInfosecurity
 
Sign In
Join
My Latest Posts
My Monitored Threads
My Blog
My Photo Gallery
My Profile
My Homepage

Start New Thread
Enable EMail Alerts
Rate this Thread



©2009 Advenet LLC   Privacy Policy - Terms of Use
This website includes both content owned or controlled by Advenet as well as content owned or controlled by third parties.