For some ciphers you need to install the Java Cryptography Extension Unlimited Strength Jurisdiction Policy Files 5.0
see http://java.sun.com/javase/downloads/index.jsp#docs see also: http://java.sun.com/j2se/1.5.0/docs/guide/security/jsse/JSSERefGuide.html#AppA Maarten On 9/11/07, GBullock <[EMAIL PROTECTED]> wrote: > > > > > Will Tao-2 wrote: > > > > Hi all, > > > > I have download mina 1.0 and when I run the echoserver example with > > TLS/SSL protocol, I got exception as followings. > > Also, when I tried to print the value in the > > sslFilter.getEnabledCipherSuites(), it returns null. > > I also tried to use sslFilter.setEnabledCipherSuites() method to set > > various cipher, but I got exception as the algorithm is not supported. > > Any help would be very helpful, thanks. > > > > > > > > 06-11-29 10:42:38,092 ERROR impl.JCLLoggerAdapter.error(ln:443) - > > [/127.0.0.1:38478] EXCEPTION: > > javax.net.ssl.SSLHandshakeException: Initial SSL handshake failed. > > at > > org.apache.mina.filter.SSLFilter.messageReceived(SSLFilter.java:424) > > at > > > org.apache.mina.common.support.AbstractIoFilterChain.callNextMessageReceived > (AbstractIoFilterChain.java:502) > > at > > org.apache.mina.common.support.AbstractIoFilterChain.access$1000( > AbstractIoFilterChain.java:52) > > at > > > org.apache.mina.common.support.AbstractIoFilterChain$EntryImpl$1.messageReceived > (AbstractIoFilterChain.java:777) > > at > > org.apache.mina.filter.executor.ExecutorFilter.processEvent( > ExecutorFilter.java:243) > > at > > org.apache.mina.filter.executor.ExecutorFilter$ProcessEventsRunnable.run > (ExecutorFilter.java:305) > > at > > > edu.emory.mathcs.backport.java.util.concurrent.ThreadPoolExecutor.runWorker > (ThreadPoolExecutor.java:987) > > at > > > edu.emory.mathcs.backport.java.util.concurrent.ThreadPoolExecutor$Worker.run > (ThreadPoolExecutor.java:528) > > at java.lang.Thread.run(Thread.java:595) > > Caused by: javax.net.ssl.SSLHandshakeException: no cipher suites in > common > > at > > com.sun.net.ssl.internal.ssl.Handshaker.checkThrown(Handshaker.java:994) > > at > > com.sun.net.ssl.internal.ssl.SSLEngineImpl.checkTaskThrown( > SSLEngineImpl.java:459) > > at > > com.sun.net.ssl.internal.ssl.SSLEngineImpl.writeAppRecord( > SSLEngineImpl.java:1054) > > at > > com.sun.net.ssl.internal.ssl.SSLEngineImpl.wrap(SSLEngineImpl.java:1026) > > at javax.net.ssl.SSLEngine.wrap(SSLEngine.java:411) > > at > > org.apache.mina.filter.support.SSLHandler.handshake(SSLHandler.java:520) > > at > > org.apache.mina.filter.support.SSLHandler.messageReceived( > SSLHandler.java:293) > > at > > org.apache.mina.filter.SSLFilter.messageReceived(SSLFilter.java:392) > > ... 8 more > > Caused by: javax.net.ssl.SSLHandshakeException: no cipher suites in > common > > at > > com.sun.net.ssl.internal.ssl.Alerts.getSSLException(Alerts.java:150) > > at > > com.sun.net.ssl.internal.ssl.SSLEngineImpl.fatal(SSLEngineImpl.java > :1352) > > at > > com.sun.net.ssl.internal.ssl.Handshaker.fatalSE(Handshaker.java:176) > > at > > com.sun.net.ssl.internal.ssl.Handshaker.fatalSE(Handshaker.java:164) > > at > > com.sun.net.ssl.internal.ssl.ServerHandshaker.chooseCipherSuite( > ServerHandshaker.java:639) > > at > > com.sun.net.ssl.internal.ssl.ServerHandshaker.clientHello( > ServerHandshaker.java:450) > > at > > com.sun.net.ssl.internal.ssl.ServerHandshaker.processMessage( > ServerHandshaker.java:178) > > at > > com.sun.net.ssl.internal.ssl.Handshaker.processLoop(Handshaker.java:495) > > at > > com.sun.net.ssl.internal.ssl.Handshaker$1.run(Handshaker.java:437) > > at java.security.AccessController.doPrivileged(Native Method) > > at > > com.sun.net.ssl.internal.ssl.Handshaker$DelegatedTask.run( > Handshaker.java:932) > > at > > org.apache.mina.filter.support.SSLHandler.doTasks(SSLHandler.java:747) > > at > > org.apache.mina.filter.support.SSLHandler.handshake(SSLHandler.java:485) > > ... 10 more > > > > > > -- > > Will Tao > > > > > > > > > > FYI, When I got this message it was the result of my borrowed > "BogusSSLContextFactory" not finding my new certificate in its classpath. > The keyStore.load method didn't complain that it got a null inputStream > (although I have since asked it to). I also changed it to use a > FileInputStream instead of the getResourceAsStream. > > That "no cipher suites in common" message was rather unintuitive, but > whatcha gonna do. > > HTH > -- > View this message in context: > http://www.nabble.com/no-cipher-suites-in-common-for-SslFilter-tf2722500s16868.html#a12617740 > Sent from the Apache MINA Support Forum mailing list archive at Nabble.com > . > >
