Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-8222801

Getting InvalidKeyException in JDK11 using NSS for SunPKCS11 TLS12

XMLWordPrintable

      A DESCRIPTION OF THE PROBLEM :
      JDK11.0.2 TLSv1.2 Handshake fails when using NSS with SunPKCS11 with the following error

      javax.net.ssl|ERROR|3B|https-jsse-nio-10.2.238.168-8443-exec-4|2019-04-15 16:42:32.075 EDT|TransportContext.java:312|Fatal (INTERNAL_ERROR): Unsupported signature algorithm: rsa_pss_rsae_sha256 (
      "throwable" : {
        java.security.InvalidKeyException: No installed provider supports this key: sun.security.pkcs11.P11Key$P11PrivateKey
              at java.base/java.security.Signature$Delegate.chooseProvider(Signature.java:1163)
              at java.base/java.security.Signature$Delegate.engineInitSign(Signature.java:1204)
              at java.base/java.security.Signature.initSign(Signature.java:546)
              at java.base/sun.security.ssl.SignatureScheme.getSignature(SignatureScheme.java:473)
              at java.base/sun.security.ssl.ECDHServerKeyExchange$ECDHServerKeyExchangeMessage.<init>(ECDHServerKeyExchange.java:155)
              at java.base/sun.security.ssl.ECDHServerKeyExchange$ECDHServerKeyExchangeProducer.produce(ECDHServerKeyExchange.java:499)
              at java.base/sun.security.ssl.ClientHello$T12ClientHelloConsumer.consume(ClientHello.java:1102)
              at java.base/sun.security.ssl.ClientHello$ClientHelloConsumer.onClientHello(ClientHello.java:854)
              at java.base/sun.security.ssl.ClientHello$ClientHelloConsumer.consume(ClientHello.java:813)
              at java.base/sun.security.ssl.SSLHandshake.consume(SSLHandshake.java:392)
              at java.base/sun.security.ssl.HandshakeContext.dispatch(HandshakeContext.java:441)
              at java.base/sun.security.ssl.SSLEngineImpl$DelegatedTask$DelegatedAction.run(SSLEngineImpl.java:1074)
              at java.base/sun.security.ssl.SSLEngineImpl$DelegatedTask$DelegatedAction.run(SSLEngineImpl.java:1061)
              at java.base/java.security.AccessController.doPrivileged(AccessController.java:688)
              at java.base/sun.security.ssl.SSLEngineImpl$DelegatedTask.run(SSLEngineImpl.java:1008)
              at org.apache.tomcat.util.net.SecureNioChannel.tasks(SecureNioChannel.java:423)
              at org.apache.tomcat.util.net.SecureNioChannel.handshakeUnwrap(SecureNioChannel.java:483)
       at org.apache.tomcat.util.net.SecureNioChannel.handshake(SecureNioChannel.java:238)
              at org.apache.tomcat.util.net.NioEndpoint$SocketProcessor.doRun(NioEndpoint.java:1392)
              at org.apache.tomcat.util.net.SocketProcessorBase.run(SocketProcessorBase.java:49)
              at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1128)
              at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:628)
              at org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run(TaskThread.java:61)
              at java.base/java.lang.Thread.run(Thread.java:835)}

      )
      javax.net.ssl|ALL|3B|https-jsse-nio-10.2.238.168-8443-exec-4|2019-04-15 16:42:32.076 EDT|SSLSessionImpl.java:795|Invalidated session: Session(1555360952049|TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384)




      REGRESSION : Last worked in version 11.0.2


      FREQUENCY : always


            psonal Pallavi Sonal (Inactive)
            webbuggrp Webbug Group
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Created:
              Updated:
              Resolved: