You have to stop using the obsolete Java 6 in the client, or explicitly enable the insecure Diffie Helman 1024 configuration in the server.
Uxío Prego Madiva Soluciones CL / SERRANO GALVACHE 56 BLOQUE ABEDUL PLANTA 4 28033 MADRID +34 917 56 84 94 www.madiva.com www.bbva.com The activity of email inboxes can be systematically tracked by colleagues, business partners and third parties. Turn off automatic loading of images to hamper it. 2017-11-13 8:52 GMT+00:00 zl anson <[email protected]>: > Hello, everyone, > I used CAS5.1 server on centos, and the jdk is 1.8 > and the CAS client use jboss 4.2.3 and jdk is 1.6, and when we do > intergrate,there is a error like below, is the CAS require same jdk version > for servr and client? > Any help would be appricate!. > > ----------------- > > HTTP Status 500 - > ------------------------------ > > *type* Exception report > > *message* > > *description* *The server encountered an internal error () that prevented > it from fulfilling this request.* > > *exception* > > java.lang.RuntimeException: javax.net.ssl.SSLException: > java.lang.RuntimeException: Could not generate DH keypair > > org.jasig.cas.client.util.CommonUtils.getResponseFromServer(CommonUtils.java:443) > > org.jasig.cas.client.validation.AbstractCasProtocolUrlBasedTicketValidator.retrieveResponseFromServer(AbstractCasProtocolUrlBasedTicketValidator.java:41) > > org.jasig.cas.client.validation.AbstractUrlBasedTicketValidator.validate(AbstractUrlBasedTicketValidator.java:193) > > org.jasig.cas.client.validation.AbstractTicketValidationFilter.doFilter(AbstractTicketValidationFilter.java:204) > > org.jasig.cas.client.session.SingleSignOutFilter.doFilter(SingleSignOutFilter.java:97) > > org.jboss.web.tomcat.filters.ReplyHeaderFilter.doFilter(ReplyHeaderFilter.java:96) > > *root cause* > > javax.net.ssl.SSLException: java.lang.RuntimeException: Could not generate DH > keypair > com.sun.net.ssl.internal.ssl.Alerts.getSSLException(Alerts.java:190) > > com.sun.net.ssl.internal.ssl.SSLSocketImpl.fatal(SSLSocketImpl.java:1747) > > com.sun.net.ssl.internal.ssl.SSLSocketImpl.fatal(SSLSocketImpl.java:1708) > > com.sun.net.ssl.internal.ssl.SSLSocketImpl.handleException(SSLSocketImpl.java:1691) > > com.sun.net.ssl.internal.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1222) > > com.sun.net.ssl.internal.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1199) > > sun.net.www.protocol.https.HttpsClient.afterConnect(HttpsClient.java:434) > > sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.connect(AbstractDelegateHttpsURLConnection.java:166) > > sun.net.www.protocol.http.HttpURLConnection.getInputStream(HttpURLConnection.java:1195) > > sun.net.www.protocol.https.HttpsURLConnectionImpl.getInputStream(HttpsURLConnectionImpl.java:234) > > org.jasig.cas.client.util.CommonUtils.getResponseFromServer(CommonUtils.java:429) > > org.jasig.cas.client.validation.AbstractCasProtocolUrlBasedTicketValidator.retrieveResponseFromServer(AbstractCasProtocolUrlBasedTicketValidator.java:41) > > org.jasig.cas.client.validation.AbstractUrlBasedTicketValidator.validate(AbstractUrlBasedTicketValidator.java:193) > > org.jasig.cas.client.validation.AbstractTicketValidationFilter.doFilter(AbstractTicketValidationFilter.java:204) > > org.jasig.cas.client.session.SingleSignOutFilter.doFilter(SingleSignOutFilter.java:97) > > org.jboss.web.tomcat.filters.ReplyHeaderFilter.doFilter(ReplyHeaderFilter.java:96) > > *root cause* > > java.lang.RuntimeException: Could not generate DH keypair > com.sun.net.ssl.internal.ssl.DHCrypt.<init>(DHCrypt.java:114) > > com.sun.net.ssl.internal.ssl.ClientHandshaker.serverKeyExchange(ClientHandshaker.java:559) > > com.sun.net.ssl.internal.ssl.ClientHandshaker.processMessage(ClientHandshaker.java:186) > com.sun.net.ssl.internal.ssl.Handshaker.processLoop(Handshaker.java:593) > > com.sun.net.ssl.internal.ssl.Handshaker.process_record(Handshaker.java:529) > > com.sun.net.ssl.internal.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:943) > > com.sun.net.ssl.internal.ssl.SSLSocketImpl.performInitialHandshake(SSLSocketImpl.java:1188) > > com.sun.net.ssl.internal.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1215) > > com.sun.net.ssl.internal.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1199) > > sun.net.www.protocol.https.HttpsClient.afterConnect(HttpsClient.java:434) > > sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.connect(AbstractDelegateHttpsURLConnection.java:166) > > sun.net.www.protocol.http.HttpURLConnection.getInputStream(HttpURLConnection.java:1195) > > sun.net.www.protocol.https.HttpsURLConnectionImpl.getInputStream(HttpsURLConnectionImpl.java:234) > > org.jasig.cas.client.util.CommonUtils.getResponseFromServer(CommonUtils.java:429) > > org.jasig.cas.client.validation.AbstractCasProtocolUrlBasedTicketValidator.retrieveResponseFromServer(AbstractCasProtocolUrlBasedTicketValidator.java:41) > > org.jasig.cas.client.validation.AbstractUrlBasedTicketValidator.validate(AbstractUrlBasedTicketValidator.java:193) > > org.jasig.cas.client.validation.AbstractTicketValidationFilter.doFilter(AbstractTicketValidationFilter.java:204) > > org.jasig.cas.client.session.SingleSignOutFilter.doFilter(SingleSignOutFilter.java:97) > > org.jboss.web.tomcat.filters.ReplyHeaderFilter.doFilter(ReplyHeaderFilter.java:96) > > *root cause* > > java.security.InvalidAlgorithmParameterException: Prime size must be multiple > of 64, and can only range from 512 to 1024 (inclusive) > com.sun.crypto.provider.DHKeyPairGenerator.initialize(DashoA13*..) > > java.security.KeyPairGenerator$Delegate.initialize(KeyPairGenerator.java:627) > com.sun.net.ssl.internal.ssl.DHCrypt.<init>(DHCrypt.java:107) > > com.sun.net.ssl.internal.ssl.ClientHandshaker.serverKeyExchange(ClientHandshaker.java:559) > > com.sun.net.ssl.internal.ssl.ClientHandshaker.processMessage(ClientHandshaker.java:186) > com.sun.net.ssl.internal.ssl.Handshaker.processLoop(Handshaker.java:593) > > com.sun.net.ssl.internal.ssl.Handshaker.process_record(Handshaker.java:529) > > com.sun.net.ssl.internal.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:943) > > com.sun.net.ssl.internal.ssl.SSLSocketImpl.performInitialHandshake(SSLSocketImpl.java:1188) > > com.sun.net.ssl.internal.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1215) > > com.sun.net.ssl.internal.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1199) > > sun.net.www.protocol.https.HttpsClient.afterConnect(HttpsClient.java:434) > > sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.connect(AbstractDelegateHttpsURLConnection.java:166) > > sun.net.www.protocol.http.HttpURLConnection.getInputStream(HttpURLConnection.java:1195) > > sun.net.www.protocol.https.HttpsURLConnectionImpl.getInputStream(HttpsURLConnectionImpl.java:234) > > org.jasig.cas.client.util.CommonUtils.getResponseFromServer(CommonUtils.java:429) > > org.jasig.cas.client.validation.AbstractCasProtocolUrlBasedTicketValidator.retrieveResponseFromServer(AbstractCasProtocolUrlBasedTicketValidator.java:41) > > org.jasig.cas.client.validation.AbstractUrlBasedTicketValidator.validate(AbstractUrlBasedTicketValidator.java:193) > > org.jasig.cas.client.validation.AbstractTicketValidationFilter.doFilter(AbstractTicketValidationFilter.java:204) > > org.jasig.cas.client.session.SingleSignOutFilter.doFilter(SingleSignOutFilter.java:97) > > org.jboss.web.tomcat.filters.ReplyHeaderFilter.doFilter(ReplyHeaderFilter.java:96) > > *note* *The full stack trace of the root cause is available in the > JBossWeb/2.0.1.GA <http://2.0.1.GA> logs.* > > -- > - Website: https://apereo.github.io/cas > - Gitter Chatroom: https://gitter.im/apereo/cas > - List Guidelines: https://goo.gl/1VRrw7 > - Contributions: https://goo.gl/mh7qDG > --- > You received this message because you are subscribed to the Google Groups > "CAS Community" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > To view this discussion on the web visit https://groups.google.com/a/ > apereo.org/d/msgid/cas-user/70cbc8bc-e8de-4628-b3ed- > 20723bb143c9%40apereo.org > <https://groups.google.com/a/apereo.org/d/msgid/cas-user/70cbc8bc-e8de-4628-b3ed-20723bb143c9%40apereo.org?utm_medium=email&utm_source=footer> > . > -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/apereo/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions: https://goo.gl/mh7qDG --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/CANidDKa0GPJSfUXy%2BiBUYaey%2BoasZ%3DRD0a%3Dgrtc-zO9_%3D6rjcA%40mail.gmail.com.
