-
April 11th, 2014, 10:05 AM
#4
Actually I have just looked at the SSL Certificates document again - is it important that the CN == the lightstreamer host name?
I have enables DEBUG logging level for ssl connections, here is the full stack trace from the server:
11-Apr-14 17:33:28,538|INFO |ghtstreamerLogger.connections.ssl|LS/SSL AUTH POOLED THREAD 6|Handshake failed on "Lightstreamer HTTPS Server" from 0:0:0:0:0:0:0:1:64837
11-Apr-14 17:33:28,538|ERROR|ghtstreamerLogger.connections.s sl|LS/SSL AUTH POOLED THREAD 6|Handshake error on Lightstreamer HTTPS Server: General SSLEngine problem on 0:0:0:0:0:0:0:1:64837.
11-Apr-14 17:33:28,539|DEBUG|ghtstreamerLogger.connections.s sl|LS/SSL AUTH POOLED THREAD 6|Handshake error on Lightstreamer HTTPS Server
javax.net.ssl.SSLHandshakeException: General SSLEngine problem
at sun.security.ssl.Handshaker.checkThrown(Handshaker .java:1290) ~[na:1.7.0_51]
at sun.security.ssl.SSLEngineImpl.checkTaskThrown(SSL EngineImpl.java:513) ~[na:1.7.0_51]
at sun.security.ssl.SSLEngineImpl.writeAppRecord(SSLE ngineImpl.java:1177) ~[na:1.7.0_51]
at sun.security.ssl.SSLEngineImpl.wrap(SSLEngineImpl. java:1149) ~[na:1.7.0_51]
at javax.net.ssl.SSLEngine.wrap(SSLEngine.java:469) ~[na:1.7.0_51]
at com.lightstreamer.j.a.b.s.a(s.java) ~[lightstreamer.jar:na]
at com.lightstreamer.j.a.b.q.a(q.java) ~[lightstreamer.jar:na]
at com.lightstreamer.j.a.q.a(q.java) ~[lightstreamer.jar:na]
at com.lightstreamer.j.a.a.i.b(i.java) [lightstreamer.jar:na]
at com.lightstreamer.j.a.a.n.a(n.java) [lightstreamer.jar:na]
at com.lightstreamer.c.a.i.a(i.java) [lightstreamer.jar:na]
at com.lightstreamer.c.a.o.c(o.java) [lightstreamer.jar:na]
at com.lightstreamer.c.a.l.run(l.java) [lightstreamer.jar:na]
Caused by: javax.net.ssl.SSLHandshakeException: General SSLEngine problem
at sun.security.ssl.Alerts.getSSLException(Alerts.jav a:192) ~[na:1.7.0_51]
at sun.security.ssl.SSLEngineImpl.fatal(SSLEngineImpl .java:1683) ~[na:1.7.0_51]
at sun.security.ssl.Handshaker.fatalSE(Handshaker.jav a:278) ~[na:1.7.0_51]
at sun.security.ssl.Handshaker.fatalSE(Handshaker.jav a:270) ~[na:1.7.0_51]
at sun.security.ssl.ServerHandshaker.clientCertificat e(ServerHandshaker.java:1675) ~[na:1.7.0_51]
at sun.security.ssl.ServerHandshaker.processMessage(S erverHandshaker.java:176) ~[na:1.7.0_51]
at sun.security.ssl.Handshaker.processLoop(Handshaker .java:868) ~[na:1.7.0_51]
at sun.security.ssl.Handshaker$1.run(Handshaker.java: 808) ~[na:1.7.0_51]
at sun.security.ssl.Handshaker$1.run(Handshaker.java: 806) ~[na:1.7.0_51]
at java.security.AccessController.doPrivileged(Native Method) ~[na:1.7.0_51]
at sun.security.ssl.Handshaker$DelegatedTask.run(Hand shaker.java:1227) ~[na:1.7.0_51]
at com.lightstreamer.j.a.b.s.e(s.java) ~[lightstreamer.jar:na]
... 8 common frames omitted
Caused by: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderE xception: unable to find valid certification path to requested target
at sun.security.validator.PKIXValidator.doBuild(PKIXV alidator.java:385) ~[na:1.7.0_51]
at sun.security.validator.PKIXValidator.engineValidat e(PKIXValidator.java:292) ~[na:1.7.0_51]
at sun.security.validator.Validator.validate(Validato r.java:260) ~[na:1.7.0_51]
at sun.security.ssl.X509TrustManagerImpl.validate(X50 9TrustManagerImpl.java:326) ~[na:1.7.0_51]
at sun.security.ssl.X509TrustManagerImpl.checkTrusted (X509TrustManagerImpl.java:281) ~[na:1.7.0_51]
at sun.security.ssl.X509TrustManagerImpl.checkClientT rusted(X509TrustManagerImpl.java:132) ~[na:1.7.0_51]
at sun.security.ssl.ServerHandshaker.clientCertificat e(ServerHandshaker.java:1662) ~[na:1.7.0_51]
... 15 common frames omitted
Caused by: sun.security.provider.certpath.SunCertPathBuilderE xception: unable to find valid certification path to requested target
at sun.security.provider.certpath.SunCertPathBuilder. engineBuild(SunCertPathBuilder.java:196) ~[na:1.7.0_51]
at java.security.cert.CertPathBuilder.build(CertPathB uilder.java:268) ~[na:1.7.0_51]
at sun.security.validator.PKIXValidator.doBuild(PKIXV alidator.java:380) ~[na:1.7.0_51]
... 21 common frames omitted
Last edited by doraintech; April 11th, 2014 at 10:34 AM.
Posting Permissions
- You may not post new threads
- You may not post replies
- You may not post attachments
- You may not edit your posts
-
Forum Rules
All times are GMT +1. The time now is 04:12 AM.
Bookmarks