CODEWITHSUNDEEP
javassljboss7.xhandshakeibm-jdk
mahesh kumar
mahesh kumar

Reputation: 1

Unable to Establish a https connection using IBM JDK 1.8. It does work fine with oracle JDK1.8

I am trying to https connection to remote API , used Spring RestTemplate to make the connection .Its a spring boot application

I able to make a connection on my local (oracle JDK 1.8 and tomcat)

When deployed as war in Jboss EAP 7.1.0 GA that uses IBM JDK 1.8, the connection times out and fails. The log below

        SSLContextImpl:  Using X509ExtendedKeyManager com.ibm.jsse2.az
        SSLContextImpl:  Using X509TrustManager com.ibm.jsse2.aD
        JsseJCE:  Using SecureRandom SHA2DRBG from provider IBMJCE version1.8
        trigger seeding of SecureRandom
        done seeding SecureRandom

        Handling error: ResourceAccessException, I/O error on POST request for "https://example.com/auth": 
        A remote host did not respond within the timeout period. (Connection timed out); 
        nested exception is java.net.ConnectException: A remote host did not respond within the timeout period. (Connection timed out):

The same code compiled and packaged with oracle JDK 1.8 work fine in the above mentioned Jboss environment.

I thought it is related to ssl handshake and tried all these options, did not solve my problem. I logged the SSL debug for bothe environments, In the working enviroment i see the Alogrithm and cipher negotiation between server and client after done seeding SecureRandom, but in Jboss IBM JDK 1.8 I dont see anything. after a while it fails with timeout 

        #  JAVA_OPTS="$JAVA_OPTS -Dhttps.protocols=TLSv1,TLSv1.1,TLSv1.2"
        #  JAVA_OPTS="$JAVA_OPTS -Djdk.tls.client.protocols=TLSv1.2"
        #  JAVA_OPTS="-Dcom.ibm.jsse2.renegotiate=DISABLED"
        #  JAVA_OPTS="-Djdk.tls.allowUnsafeServerCertChange=true"
        #  JAVA_OPTS="-Djdk.tls.disabledAlgorithms=SSLv3,TLSv1,TLSv1.1"
        #  JAVA_OPTS="$JAVA_OPTS -Dcom.ibm.jsse2.overrideDefaultTLS=true"
        #  JAVA_OPTS="$JAVA_OPTS -Djavax.net.ssl.trustStore=trustStore"*

Upvotes: 0

Views: 777

Answers (0)

Related Questions