Re: [JXTA discuss] problem with secure BiDiPipes

Mohamed Abdelaziz <[email protected]> Fri, 29 Apr 2005 10:16:24 -0700
Newsgroups gmane.comp.java.jxta.general
Message-ID <[email protected]>
Michele,

Ensure the Following :

 - Both peers must have established credentials at the NetPeerGroup 
level, as TLS is shared for all groups and cred. must be established 
within npg (it looks you have done so)
 - Both peers must have exchanged and persisted each's public cert by 
some means (See shell pse.* commands for reference)

Ciao,
Mohamed

amoretti wrote:

>Hello,
>
>I created a private JXTA network with some peers.
>In this scenario, consider an edge peer and a rdv peer.
>The edge peer authenticates itself to PSEMembershipService,
>then creates a secure Pipe advertisement (JXTAUnicastSecure) that is
>published in the
>NetPeerGroup. Finally, edge peer creates a JxtaServerPipe (with this pipe
>adv) and
>waits for an incoming connection:
>
>..
>JxtaServerPipe myServerPipe = null;
>myServerPipe = new JxtaServerPipe( netPeerGroup, securePipeAdv );
>// We want to block until a connection is established
>myServerPipe.setPipeTimeout(0);
>
>bidPipe = myServerPipe.accept();
>if( bidPipe != null ) {
>	System.out.println("JxtaBidiPipe accepted!");
>	...
>}
>..
>
>The rdv peer (which is started later), first authenticates itself to
>PSEMembershipService,
>then searches (by Name) for the secure pipe adv. previously published by edge
>peer: when 
>it founds it, the rdv starts a JxtaBiDiPipe for communicating with edge peer:
>
>..
>JxtaBiDiPipe myBidPipe = null;
>try {
>	myBidPipe = new JxtaBiDiPipe();
>	myBidPipe.setReliable(true);
>
>	myBidPipe.connect( npg,
>			peerID,
>			securePipeAdv,
>			120 * 1000,	// timeout = 2 min
>			this);     	// register as message listener
>} catch( Exception e ) {
>	...
>}
>..
>
>(npg identifies the NetPeerGroup, peerID is the peerID of the edge peer and
>securePipeAdv the
>secure pipe adv found).
>
>Unfortunately, the program shows this error message during BiDiPipe
>synchronization phase:
>
>[RDV size]
>..
>Start-up JXTA BiDiPipe
> [1] ----------------------------------------
>BiDiPipe ad peerID:
>urn:jxta:uuid-59616261646162614A78746150325033B40C0D73F7A74048A90AD5C07966916603
>Printing Pipe Adv content:
> ID:
>urn:jxta:uuid-52FD4619D90D4476ACDBA0EA0AD54482DD22AB289C514936BFC7E26D45A3119E04
> Name: Testing Secure Pipe connection
> Type: JxtaUnicastSecure
> Desc:
>urn:jxta:uuid-59616261646162614A78746150325033B40C0D73F7A74048A90AD5C07966916603
> [1] Attempting to establish a connection...    (1)&lt;DEBUG 2005-04-28
>19:15:35,612 PipeServiceImpl::createInputPipe:370> Create JxtaUnicastSecure
>InputPipe for
>urn:jxta:uuid-52FD4619D90D4476ACDBA0EA0AD544827132EE040D9249178C27E874617CE3CE04
>&lt;INFO  2005-04-28 19:15:35,613 InputPipeImpl::&lt;init>:115> Creating
>InputPipe for
>urn:jxta:uuid-52FD4619D90D4476ACDBA0EA0AD544827132EE040D9249178C27E874617CE3CE04 of type JxtaUnicastSecure with listener
>&lt;DEBUG 2005-04-28 19:15:35,657 PipeServiceImpl::createOutputPipe:518>
>Create JxtaUnicastSecure OutputPipe for
>urn:jxta:uuid-52FD4619D90D4476ACDBA0EA0AD54482DD22AB289C514936BFC7E26D45A3119E04
>&lt;DEBUG 2005-04-28 19:15:35,667 JxtaBiDiPipe::connect:339> Waiting for
>30000 msec
>&lt;INFO  2005-04-28 19:15:35,729 NonBlockingOutputPipe::&lt;init>:264>
>Constructing for
>urn:jxta:uuid-52FD4619D90D4476ACDBA0EA0AD54482DD22AB289C514936BFC7E26D45A3119E04
>&lt;INFO  2005-04-28 19:15:35,738
>NonBlockingOutputPipe::startServiceThread:713> Thread start : Worker Thread
>for NonBlockingOutputPipe :
>urn:jxta:uuid-52FD4619D90D4476ACDBA0EA0AD54482DD22AB289C514936BFC7E26D45A3119E04
>        worker state : ACQUIREMESSENGER queue closed : false    number in
>queue : 0     number queued : 0 number dequeued : 0
>&lt;DEBUG 2005-04-28 19:15:35,738 JxtaBiDiPipe::connect:355> Sending a
>backchannel message
>&lt;INFO  2005-04-28 19:15:35,757 TlsConn::&lt;init>:267> Initiating new
>connection for :
>uuid-59616261646162614A78746150325033B40C0D73F7A74048A90AD5C07966916603
>&lt;INFO  2005-04-28 19:15:35,781 JTlsOutputStream::&lt;init>:805> STARTED
>TLS Retransmit thread, RTO = 1000
>&lt;INFO  2005-04-28 19:15:35,792 TlsManager::getTlsConn:216> Start of client
>handshake for
>uuid-59616261646162614A78746150325033B40C0D73F7A74048A90AD5C07966916603
>&lt;INFO  2005-04-28 19:15:35,793 TlsConn::finishHandshake:376> Client:
>Handshake START
>&lt;INFO  2005-04-28 19:15:35,950 JTlsInputStream::dequeueMessage:509>
>DEQUEUED seqn#1 in 154 msec on input queue
>&lt;INFO  2005-04-28 19:15:36,014 JTlsInputStream::dequeueMessage:509>
>DEQUEUED seqn#2 in 27 msec on input queue
>&lt;INFO  2005-04-28 19:15:36,015 JTlsOutputStream::run:962> STOPPED TLS
>Retransmit thread
>&lt;WARN  2005-04-28 19:15:36,019 TlsManager::getTlsConn:222> Failed making
>connection to
>uuid-59616261646162614A78746150325033B40C0D73F7A74048A90AD5C07966916603
>java.io.IOException: Handshake failed
>        at
>net.jxta.impl.endpoint.tls.TlsConn.finishHandshake(TlsConn.java:385)
>        at
>net.jxta.impl.endpoint.tls.TlsManager.getTlsConn(TlsManager.java:219)
>        at
>net.jxta.impl.endpoint.tls.TlsTransport.getMessenger(TlsTransport.java:572)
>        at
>net.jxta.impl.endpoint.EndpointServiceImpl.getLocalTransportMessenger(EndpointServiceImpl.java:1510)
>        at
>net.jxta.impl.endpoint.EndpointServiceImpl$CanonicalMessenger.connectImpl(EndpointServiceImpl.java:373)
>        at
>net.jxta.endpoint.ThreadedMessenger.connect(ThreadedMessenger.java:521)
>        at
>net.jxta.endpoint.ThreadedMessenger.run(ThreadedMessenger.java:361)
>        at java.lang.Thread.run(Thread.java:534)
>&lt;INFO  2005-04-28 19:15:36,021 TlsConn::close:416> Shutting down
>net.jxta.impl.endpoint.tls.TlsConn@1efb4be/HANDSHAKEFAILED:Client for
>jxta://uuid-59616261646162614A78746150325033B40C0D73F7A74048A90AD5C07966916603
>&lt;ERROR 2005-04-28 19:15:36,021 TlsTransport::getMessenger:576> Cannot get
>a TLS connection for
>jxta://uuid-59616261646162614A78746150325033B40C0D73F7A74048A90AD5C07966916603
>&lt;INFO  2005-04-28 19:15:36,022
>EndpointServiceImpl::getLocalTransportMessenger:1515> Couldn't create
>messenger for :
>'jxtatls://uuid-59616261646162614A78746150325033B40C0D73F7A74048A90AD5C07966916603'
>&lt;WARN  2005-04-28 19:15:36,022 NonBlockingOutputPipe::run:565> Could not
>get messenger to :
>urn:jxta:uuid-59616261646162614A78746150325033B40C0D73F7A74048A90AD5C07966916603.
>&lt;DEBUG 2005-04-28 19:15:36,023 JxtaBiDiPipe::connect:363> Waiting for
>30000 msec for back channel to be established
>&lt;INFO  2005-04-28 19:15:36,066
>NonBlockingOutputPipe::pipeResolveEvent:791> Pipe
>'urn:jxta:uuid-52FD4619D90D4476ACDBA0EA0AD54482DD22AB289C514936BFC7E26D45A3119E04' is verified for null
>&lt;INFO  2005-04-28 19:15:36,066 TlsConn::&lt;init>:267> Initiating new
>connection for :
>uuid-59616261646162614A78746150325033B40C0D73F7A74048A90AD5C07966916603
>&lt;INFO  2005-04-28 19:15:36,069 JTlsOutputStream::&lt;init>:805> STARTED
>TLS Retransmit thread, RTO = 1000
>&lt;INFO  2005-04-28 19:15:36,070 TlsManager::getTlsConn:216> Start of client
>handshake for
>uuid-59616261646162614A78746150325033B40C0D73F7A74048A90AD5C07966916603
>&lt;INFO  2005-04-28 19:15:36,070 TlsConn::finishHandshake:376> Client:
>Handshake START
>&lt;INFO  2005-04-28 19:15:36,096 JTlsInputStream::dequeueMessage:509>
>DEQUEUED seqn#1 in 26 msec on input queue
>&lt;INFO  2005-04-28 19:15:36,121 JTlsInputStream::dequeueMessage:509>
>DEQUEUED seqn#2 in 3 msec on input queue
>&lt;WARN  2005-04-28 19:15:36,123 TlsManager::getTlsConn:222> Failed making
>connection to
>uuid-59616261646162614A78746150325033B40C0D73F7A74048A90AD5C07966916603
>java.io.IOException: Handshake failed
>        at
>net.jxta.impl.endpoint.tls.TlsConn.finishHandshake(TlsConn.java:385)
>        at
>net.jxta.impl.endpoint.tls.TlsManager.getTlsConn(TlsManager.java:219)
>        at
>net.jxta.impl.endpoint.tls.TlsTransport.getMessenger(TlsTransport.java:572)
>        at
>net.jxta.impl.endpoint.EndpointServiceImpl.getLocalTransportMessenger(EndpointServiceImpl.java:1510)
>        at
>net.jxta.impl.endpoint.EndpointServiceImpl$CanonicalMessenger.connectImpl(EndpointServiceImpl.java:373)
>        at
>net.jxta.endpoint.ThreadedMessenger.connect(ThreadedMessenger.java:521)
>        at
>net.jxta.endpoint.ThreadedMessenger.run(ThreadedMessenger.java:361)
>        at java.lang.Thread.run(Thread.java:534)
>..
>forever
>
>
>[Edge side]
>..
>Start-up JXTA Server Pipe
>-------------------------------------------------
> Attempting to establish a connection...        (1) Exception in accept()!
>java.net.SocketTimeoutException: Timeout reached
>        at net.jxta.util.JxtaServerPipe.accept(JxtaServerPipe.java:227)
>        at lib.EdgePeer.startJxtaServerPipe(EdgePeer.java:1112)
>        at lib.EdgePeer.handleAdminConnection(Ed
>
>
>---------------------------------------------------------------------
>To unsubscribe, e-mail: [email protected]
>For additional commands, e-mail: [email protected]
>
>  
>