Are JSEE and openssl compatible?  Googling has failed me....

(note that I'm new to SSL)

 

I'm trying to connect a C++ client to a JBoss web server using JSSE, and
having problems.

 

At the moment, I'm attempting to get the openssl s_client to connect,
and getting this error:

 

> openssl s_client -connect 127.0.0.1:8443

CONNECTED(00000004)

12273:error:14077438:SSL routines:SSL23_GET_SERVER_HELLO:tlsv1 alert
internal error:../../../../common/openssl/ssl/s23_clnt.c:470:

 

-          The server certificate is self-generated (i.e. not signed by
a CA)

-          I can use Internet Explorer to open my web application (I get
the expected warning about untrusted certificates..)

-          I can connect using java clients (where I've added the server
cert to the java client keystore)

 

The server keys were generated via:

 

openssl genrsa -des3 -out tapestry_openssl.key

openssl req -days 3650 -new -x509 -key tapestry_openssl.key -out
tapestry_openssl.crt

openssl pkcs12 -inkey tapestry_openssl.key -in tapestry_openssl.crt
-export -out tapestry_openssl.pkcs12

java -cp . PKCS12Import tapestry_openssl.pkcs12
tapestry_jsse_keystore.jks

keytool -list -v -keystore tapestry_jsse_keystore.jks

 

The server is JBoss 4.2.3

 

The end-product is (hopefully) a C++ application using Axis2/c with
openssl to connect via SSL to my web server.

CONFIDENTIALITY NOTICE: Proprietary/Confidential Information belonging
to CGI Group Inc. and its affiliates may be contained in this message.
If you are not a recipient indicated or intended in this message (or
responsible for delivery of this message to such person), or you think
for any reason this message may have been addressed to you in error, you
may not use or copy or deliver this message to anyone else. In such
case, you should destroy this message, and are asked to notify the
sender by reply email.

 

Reply via email to