Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-8257825

Incompatible TLSv1.2 cipher causing handshake_failure

    XMLWordPrintable

Details

    Description

      ADDITIONAL SYSTEM INFORMATION :
      CentOS Linux release 8.0.1905
      MacOS catalina 10.15.7

      A DESCRIPTION OF THE PROBLEM :
      In this version TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 and TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 are incompatible with previous.
      Some HTTPS sites, for example, https://fcm.googleapis.com, returns the handshake error when using these two ciphers.

      REGRESSION : Last worked in version 8

      STEPS TO FOLLOW TO REPRODUCE THE PROBLEM :
      Use TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 as supported cipher to connect https://fcm.googleapis.com. And will receive a TLS handshake error.


      ---------- BEGIN SOURCE ----------
      @Test
          public void sslSocketTest() throws IOException {
              SSLSocket socket = (SSLSocket) SSLSocketFactory.getDefault().createSocket();
              socket.setEnabledCipherSuites(new String[] {
                      "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384",
              });
              InetSocketAddress socketAddress =new InetSocketAddress("fcm.googleapis.com",443);
              socket.connect(socketAddress);
              socket.startHandshake();
              socket.close();
          }
      ---------- END SOURCE ----------

      FREQUENCY : always


      Attachments

        Issue Links

          Activity

            People

              xuelei Xuelei Fan
              webbuggrp Webbug Group
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: