Re: Problems with SSL

Hi Al,

Have you tried adding the https.protocols system property to your
grinder.jvm.arguments.  Due to some security vulnerabilities recently
identified (poodle), our sysadmins turned off a bunch of the supported
protocols.  In order to get around this we added the following to our
grinder.jvm.arguments: -Dhttps.protocols=TLSv1.  You may need to talk to
your sys admins to get an exact list of the supported protocols.

Hope this helps,

-Marc

On Wed, Nov 19, 2014 at 9:48 AM, Al Gettier <gettier-9sXRx/[email protected]> wrote:

> Hello everyone
>
> I am really over my head in getting SSL working to my system.  I can
> connect to my system with both IE and Firefox, but when I try to connect
> with grinder the host disconnects during the initial handshake.  I am
> assuming it is an SSL Key problem, but I really don’t know this stuff very
> well, any help would be appreciated.
>
> I turned on debugging, and some interesting things in the log are:
>
> 2014-11-18 18:57:22,817 INFO  agent: worker AE-B62PK02-0 started
>
> keyStore is :
> keyStore type is : jks
> keyStore provider is :
> init keystore
> init keymanager of type SunX509
> trustStore is: C:\Program Files (x86)\Java\jre7\lib\security\cacerts
> trustStore type is : jks
> trustStore provider is :
> init truststore
> adding as trusted cert:
>
>   Subject: CN=SwissSign Platinum CA - G2, O=SwissSign AG, C=CH
>   Issuer:  CN=SwissSign Platinum CA - G2, O=SwissSign AG, C=CH
>   Algorithm: RSA; Serial number: 0x4eb200670c035d4f
>   Valid from Wed Oct 25 03:36:00 CDT 2006 until Sat Oct 25 03:36:00 CDT
> 2036
>
> At this point, many trusted cert’s are added.  Then many messages about
> ignoring unsupported ciphers, with this in the middle:
>
> Allow unsafe renegotiation: false
> Allow legacy hello messages: true
> Is initial handshake: true
> Is secure renegotiation: false
>
> Then when communicating with the host, I am seeing:
>
> %% No cached client session
> *** ClientHello, TLSv1.2
> RandomCookie:  GMT: 1416292852 bytes = { 176, 121, 148, 62, 112, 82, 128,
> 150, 204, 169, 133, 248, 10, 14, 23, 187, 59, 169, 40, 167, 158, 220, 15,
> 210, 17, 124, 236, 146 }
> Session ID:  {}
> Cipher Suites:
> [TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256,TLS_KRB5_EXPORT_WITH_RC4_40_MD5,
> TLS_KRB5_EXPORT_WITH_DES_CBC_40_SHA, TLS_KRB5_EXPORT_WITH_DES_CBC_40_MD5]
> Compression Methods:  { 0 }
> Extension elliptic_curves, curve names: {secp256r1, sect163k1, sect163r2,
> secp192r1, secp224r1, sect233k1, sect233r1, sect283k1,
> Extension ec_point_formats, formats: [uncompressed]
> Extension signature_algorithms, signature_algorithms:
> SHA512withECDSA,SHA224withECDSA, SHA224withRSA, SHA1withECDSA, SHA1withRSA,
> SHA1withDSA, MD5withRSA
> Extension server_name, server_name: [host_name: aeintranet.aenetad.net]
> ***
> thread 0, WRITE: TLSv1.2 Handshake, length = 294
> thread 0, WRITE: SSLv2 client hello message, length = 257
> thread 0, received EOFException: error
> thread 0, handling exception: javax.net.ssl.SSLHandshakeException: Remote
> host closed connection during handshake
> thread 0, SEND TLSv1 ALERT:  fatal, description = handshake_failure
> thread 0, WRITE: TLSv1 Alert, length = 2
> thread 0, called closeSocket()
> thread 0, called close()
> thread 0, called closeInternal(true)
> thread 0, called close()
> thread 0, called closeInternal(true)
>
> ------------------------------------------------------------------------------
> Download BIRT iHub F-Type - The Free Enterprise-Grade BIRT Server
> from Actuate! Instantly Supercharge Your Business Reports and Dashboards
> with Interactivity, Sharing, Native Excel Exports, App Integration & more
> Get technology previously reserved for billion-dollar corporations, FREE
>
> http://pubads.g.doubleclick.net/gampad/clk?id=157005751&iu=/4140/ostg.clktrk
> _______________________________________________
> grinder-use mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/grinder-use
>

------------------------------------------------------------------------------
Download BIRT iHub F-Type - The Free Enterprise-Grade BIRT Server
from Actuate! Instantly Supercharge Your Business Reports and Dashboards
with Interactivity, Sharing, Native Excel Exports, App Integration & more
Get technology previously reserved for billion-dollar corporations, FREE
http://pubads.g.doubleclick.net/gampad/clk?id=157005751&iu=/4140/ostg.clktrk

_______________________________________________
grinder-use mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/grinder-use