Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-7027797

take care of ECDH_anon/DH_anon server key exchange for TLS 1.2

XMLWordPrintable

    • b138
    • generic
    • generic
    • Verified

        The preferable signature algorithm is not being set correctly for the ECDH_anon and DH_anon server key exchange algorithm in TLS version 1.2.

        To reproduce, run the following JDK unit test:
               jdk/sun/security/pkcs11/sslecc/ClientJSSEServerJSSE.java

           :
           :
           :

         ** Failed TLS_ECDH_anon_WITH_AES_128_CBC_SHA in TLSv1.2 mode**

         STDERR:
         javax.net.ssl.SSLException: java.lang.NullPointerException
                   at sun.security.ssl.Alerts.getSSLException(Alerts.java:208)
                   at sun.security.ssl.SSLSocketImpl.fatal(SSLSocketImpl.java:1783)
                   at sun.security.ssl.SSLSocketImpl.fatal(SSLSocketImpl.java:1743)
                   at sun.security.ssl.SSLSocketImpl.handleException(SSLSocketImpl.java:1726)
                   at sun.security.ssl.SSLSocketImpl.handleException(SSLSocketImpl.java:1652)
                   at sun.security.ssl.AppInputStream.read(AppInputStream.java:113)
                   at sun.security.ssl.AppInputStream.read(AppInputStream.java:69)
                   at CipherTest$Server.handleRequest(CipherTest.java:77)
                   at JSSEServer$1.run(JSSEServer.java:64)
                   at
         java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1110)
                   at
         java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:603)
                   at java.lang.Thread.run(Thread.java:722)

         Caused by: java.lang.NullPointerException
                   at
        sun.security.ssl.HandshakeMessage$ECDH_ServerKeyExchange.send(HandshakeMessage.java:1137)
                   at sun.security.ssl.HandshakeMessage.write(HandshakeMessage.java:141)
                   at sun.security.ssl.ServerHandshaker.clientHello(ServerHandshaker.java:795)
                   at
         sun.security.ssl.ServerHandshaker.processMessage(ServerHandshaker.java:167)
                   at sun.security.ssl.Handshaker.processLoop(Handshaker.java:868)
                   at sun.security.ssl.Handshaker.process_record(Handshaker.java:804)
                   at sun.security.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:963)
                   at
         sun.security.ssl.SSLSocketImpl.performInitialHandshake(SSLSocketImpl.java:1259)
                   at sun.security.ssl.SSLSocketImpl.readDataRecord(SSLSocketImpl.java:813)
                   at sun.security.ssl.AppInputStream.read(AppInputStream.java:102)
                   ... 6 more

         javax.net.ssl.SSLException: Received fatal alert: internal_error
                   at sun.security.ssl.Alerts.getSSLException(Alerts.java:208)
                   at sun.security.ssl.Alerts.getSSLException(Alerts.java:154)
                   at sun.security.ssl.SSLSocketImpl.recvAlert(SSLSocketImpl.java:1854)
                   at sun.security.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:1024)
                   at
         sun.security.ssl.SSLSocketImpl.performInitialHandshake(SSLSocketImpl.java:1259)
                   at sun.security.ssl.SSLSocketImpl.writeRecord(SSLSocketImpl.java:677)
                   at sun.security.ssl.AppOutputStream.write(AppOutputStream.java:85)
                   at java.io.OutputStream.write(OutputStream.java:75)
                   at CipherTest$Client.sendRequest(CipherTest.java:265)
                   at JSSEClient.runTest(JSSEClient.java:57)
                   at CipherTest$Client.run(CipherTest.java:252)
                   at java.lang.Thread.run(Thread.java:722)

         java.lang.Exception: *** Test 'Client JSSE - Server JSSE' failed ***
                   at CipherTest.run(CipherTest.java:210)
                   at CipherTest.main(CipherTest.java:332)
                   at ClientJSSEServerJSSE.main(ClientJSSEServerJSSE.java:56)

              xuelei Xuelei Fan
              vinnie Vincent Ryan
              Votes:
              0 Vote for this issue
              Watchers:
              0 Start watching this issue

                Created:
                Updated:
                Resolved:
                Imported:
                Indexed: