Re: Need help for enabling TLS2 using IKVM
David Thielen <[email protected]> Mon, 1 Oct 2018 11:38:16 +0000
| Newsgroups | gmane.comp.java.ikvm.devel |
|---|---|
| Message-ID | <SN1PR12MB04306A51E6D7E97399F11947C1EF0@SN1PR12MB0430.namprd12.prod.outlook.com> |
--===============3432714514742850305== Content-Language: en-US Content-Type: multipart/alternative; boundary="_000_SN1PR12MB04306A51E6D7E97399F11947C1EF0SN1PR12MB0430namp_" --_000_SN1PR12MB04306A51E6D7E97399F11947C1EF0SN1PR12MB0430namp_ Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable We have about 5% of our code that is written specifically for each environm= ent. All the classes in net.windward.environment are either Java or .NET (J= ava code but written with .NET library calls). All the classes in this fold= er are identical in terms of their public signature. I suggest you do that here. Write a class specific for each environment to = use for this call. - dave From: Pradeep Ramaswamy <[email protected]> Sent: Monday, October 1, 2018 3:45 AM To: Hannes De Clercq (KSZ-BCSS/eHEALTH) <[email protected]> Cc: [email protected] Subject: Re: [Ikvm-developers] Need help for enabling TLS2 using IKVM Hi Hannes, We tried with the below fix, but unfortunately it didn't work. Still we are= getting Handshake_failure. Error snippet: ogMsg Ikke forventet exception oppst=E5tt i metode executeLogon and cause i= s due to com.sun.xml.internal.ws.client.ClientTransportException: HTTP tran= sport error: javax.net.ssl.SSLHandshakeException: Received fatal alert: han= dshake_failure at com.sun.xml.internal.ws.transport.http.client.HttpClientTr= ansport.getOutput(HttpClientTransport.java:117) at com.sun.xml.internal.ws.transport.http.client.HttpTranspor= tPipe.process(HttpTransportPipe.java:194) at com.sun.xml.internal.ws.transport.http.client.HttpTranspor= tPipe.processRequest(HttpTransportPipe.java:122) at com.sun.xml.internal.ws.transport.DeferredTransportPipe.pr= ocessRequest(DeferredTransportPipe.java:123) at com.sun.xml.internal.ws.api.pipe.Fiber.__doRun(Fiber.java:= 626) at com.sun.xml.internal.ws.api.pipe.Fiber._doRun(Fiber.java:5= 85) Note: We tried to add the code " java.lang.System.setProperty ("https.protocols= ", "TLSv1.1, TLSv1.2"); " in both .net as you suggested and as well as in j= ava client code before the Webservices is called. But in both the cases we = ended up in same issue. Regards Pradeep R From: Hannes De Clercq (KSZ-BCSS/eHEALTH) <[email protected]<= mailto:[email protected]>> Sent: Friday, September 28, 2018 6:56 PM To: Pradeep Ramaswamy <[email protected]<mailto:Pradeep.Ramaswamy@= evry.com>> Cc: [email protected]<mailto:[email protected]= ceforge.net> Subject: Re: [Ikvm-developers] Need help for enabling TLS2 using IKVM Hi, Could you try to add the following line in your .NET code before calling th= e webservice? java.lang.System.setProperty ("https.protocols", "TLSv1.1, TLSv1.2"); I think that this should do the trick. Kind Regards, Hannes --_000_SN1PR12MB04306A51E6D7E97399F11947C1EF0SN1PR12MB0430namp_ Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable <html> <head> <meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Diso-8859-= 1"> <meta name=3D"Generator" content=3D"Microsoft Word 15 (filtered medium)"> <style><!-- /* Font Definitions */ @font-face {font-family:"Cambria Math"; panose-1:2 4 5 3 5 4 6 3 2 4;} @font-face {font-family:Calibri; panose-1:2 15 5 2 2 2 4 3 2 4;} /* Style Definitions */ p.MsoNormal, li.MsoNormal, div.MsoNormal {margin:0in; margin-bottom:.0001pt; font-size:11.0pt; font-family:"Calibri",sans-serif;} a:link, span.MsoHyperlink {mso-style-priority:99; color:#0563C1; text-decoration:underline;} a:visited, span.MsoHyperlinkFollowed {mso-style-priority:99; color:#954F72; text-decoration:underline;} p.msonormal0, li.msonormal0, div.msonormal0 {mso-style-name:msonormal; mso-margin-top-alt:auto; margin-right:0in; mso-margin-bottom-alt:auto; margin-left:0in; font-size:11.0pt; font-family:"Calibri",sans-serif;} span.EmailStyle18 {mso-style-type:personal; font-family:"Calibri",sans-serif; color:windowtext;} span.EmailStyle19 {mso-style-type:personal; font-family:"Calibri",sans-serif; color:windowtext;} span.EmailStyle21 {mso-style-type:personal-reply; font-family:"Calibri",sans-serif; color:windowtext;} .MsoChpDefault {mso-style-type:export-only; font-size:10.0pt;} @page WordSection1 {size:8.5in 11.0in; margin:1.0in 1.0in 1.0in 1.0in;} div.WordSection1 {page:WordSection1;} --></style><!--[if gte mso 9]><xml> <o:shapedefaults v:ext=3D"edit" spidmax=3D"1026" /> </xml><![endif]--><!--[if gte mso 9]><xml> <o:shapelayout v:ext=3D"edit"> <o:idmap v:ext=3D"edit" data=3D"1" /> </o:shapelayout></xml><![endif]--> </head> <body lang=3D"EN-US" link=3D"#0563C1" vlink=3D"#954F72"> <div class=3D"WordSection1"> <p class=3D"MsoNormal">We have about 5% of our code that is written specifi= cally for each environment. All the classes in net.windward.environment are= either Java or .NET (Java code but written with .NET library calls). All t= he classes in this folder are identical in terms of their public signature.<o:p></o:p></p> <p class=3D"MsoNormal"><o:p> </o:p></p> <p class=3D"MsoNormal">I suggest you do that here. Write a class specific f= or each environment to use for this call.<o:p></o:p></p> <p class=3D"MsoNormal"><o:p> </o:p></p> <p class=3D"MsoNormal">- dave<o:p></o:p></p> <p class=3D"MsoNormal"><o:p> </o:p></p> <p class=3D"MsoNormal"><o:p> </o:p></p> <p class=3D"MsoNormal"><o:p> </o:p></p> <div> <div style=3D"border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in = 0in 0in"> <p class=3D"MsoNormal"><b>From:</b> Pradeep Ramaswamy <Pradeep.Ramaswamy= @evry.com> <br> <b>Sent:</b> Monday, October 1, 2018 3:45 AM<br> <b>To:</b> Hannes De Clercq (KSZ-BCSS/eHEALTH) <Hannes.DeClercq@ehealth.= fgov.be><br> <b>Cc:</b> [email protected]<br> <b>Subject:</b> Re: [Ikvm-developers] Need help for enabling TLS2 using IKV= M<o:p></o:p></p> </div> </div> <p class=3D"MsoNormal"><o:p> </o:p></p> <p class=3D"MsoNormal">Hi Hannes,<o:p></o:p></p> <p class=3D"MsoNormal"> <o:p></o:p></p> <p class=3D"MsoNormal">We tried with the below fix, but unfortunately it di= dn’t work. Still we are getting Handshake_failure.<o:p></o:p></p> <p class=3D"MsoNormal"> <o:p></o:p></p> <p class=3D"MsoNormal"><b><u>Error snippet:</u></b><o:p></o:p></p> <p class=3D"MsoNormal">ogMsg Ikke forventet exception oppst=E5tt i metode e= xecuteLogon and cause is due to com.sun.xml.internal.ws.client.ClientTransp= ortException: HTTP transport error: javax.net.ssl.SSLHandshakeException: Re= ceived fatal alert: handshake_failure<o:p></o:p></p> <p class=3D"MsoNormal"> &nbs= p; at com.sun.xml.internal.ws.transport.http.client= .HttpClientTransport.getOutput(HttpClientTransport.java:117)<o:p></o:p></p> <p class=3D"MsoNormal"> &nbs= p; at com.sun.xml.internal.ws.transport.http.client= .HttpTransportPipe.process(HttpTransportPipe.java:194)<o:p></o:p></p> <p class=3D"MsoNormal"> &nbs= p; at com.sun.xml.internal.ws.transport.http.client= .HttpTransportPipe.processRequest(HttpTransportPipe.java:122)<o:p></o:p></p= > <p class=3D"MsoNormal"> &nbs= p; at com.sun.xml.internal.ws.transport.DeferredTra= nsportPipe.processRequest(DeferredTransportPipe.java:123)<o:p></o:p></p> <p class=3D"MsoNormal"> &nbs= p; at com.sun.xml.internal.ws.api.pipe.Fiber.__doRu= n(Fiber.java:626)<o:p></o:p></p> <p class=3D"MsoNormal"> &nbs= p; at com.sun.xml.internal.ws.api.pipe.Fiber._doRun= (Fiber.java:585)<o:p></o:p></p> <p class=3D"MsoNormal"> <o:p></o:p></p> <p class=3D"MsoNormal">Note: <o:p></o:p></p> <p class=3D"MsoNormal">We tried to add the code “<span lang=3D"EN-GB"= > java.lang.System.setProperty ("https.protocols", &q= uot;TLSv1.1, TLSv1.2"); “ in both .net as you suggested and as w= ell as in java client code before the Webservices is called. But in both th= e cases we ended up in same issue.</span><o:p></o:p></p> <p class=3D"MsoNormal"><span lang=3D"EN-GB"> </span><o:p></o:p></p> <p class=3D"MsoNormal">Regards<o:p></o:p></p> <p class=3D"MsoNormal">Pradeep R<o:p></o:p></p> <div> <div style=3D"border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in = 0in 0in"> <p class=3D"MsoNormal"><b>From:</b> Hannes De Clercq (KSZ-BCSS/eHEALTH) <= ;<a href=3D"mailto:[email protected]">Hannes.DeClercq@ehealth= .fgov.be</a>> <br> <b>Sent:</b> Friday, September 28, 2018 6:56 PM<br> <b>To:</b> Pradeep Ramaswamy <<a href=3D"mailto:[email protected]= om">[email protected]</a>><br> <b>Cc:</b> <a href=3D"mailto:[email protected]">ikvm-de= [email protected]</a><br> <b>Subject:</b> Re: [Ikvm-developers] Need help for enabling TLS2 using IKV= M<o:p></o:p></p> </div> </div> <p class=3D"MsoNormal"> <o:p></o:p></p> <p class=3D"MsoNormal"><span lang=3D"EN-GB">Hi,</span><o:p></o:p></p> <p class=3D"MsoNormal"><span lang=3D"EN-GB"> </span><o:p></o:p></p> <p class=3D"MsoNormal"><span lang=3D"EN-GB">Could you try to add the follow= ing line in your .NET code before calling the webservice?</span><o:p></o:p>= </p> <p class=3D"MsoNormal"><span lang=3D"EN-GB"> java.lang.System.s= etProperty ("https.protocols", "TLSv1.1, TLSv1.2");</sp= an><o:p></o:p></p> <p class=3D"MsoNormal"><span lang=3D"EN-GB"> </span><o:p></o:p></p> <p class=3D"MsoNormal"><span lang=3D"EN-GB">I think that this should do the= trick.</span><o:p></o:p></p> <p class=3D"MsoNormal"><span lang=3D"EN-GB"> </span><o:p></o:p></p> <p class=3D"MsoNormal"><span lang=3D"EN-GB">Kind Regards,</span><o:p></o:p>= </p> <p class=3D"MsoNormal"><span lang=3D"EN-GB">Hannes</span><span lang=3D"EN-G= B" style=3D"font-size:9.0pt;mso-fareast-language:EN-GB"> </span><o:p></o:p></p> <p class=3D"MsoNormal"><span lang=3D"EN-GB"> </span><o:p></o:p></p> </div> </body> </html> --_000_SN1PR12MB04306A51E6D7E97399F11947C1EF0SN1PR12MB0430namp_-- --===============3432714514742850305== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline --===============3432714514742850305== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Ikvm-developers mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/ikvm-developers --===============3432714514742850305==--