I'm trying to get an HTTP server I've developed to work over SSL but I'm running into some problems. I've found some references online about it but I'm hoping to find someone here I can get more help from.
The SSLServerSocket is made without throwing any exceptions. The code for creating the SSLServerSocket and enabling its ciphers is given near the bottom.
When a web browser tries to connect, the server throws java.net.ssl.SSLHandshakeException with message "no cipher suites in common". Following is the stack trace:
javax.net.ssl.SSLHandshakeException: no cipher suites in common
at com.sun.net.ssl.internal.ssl.Alerts.getSSLException(Unknown Source)
at com.sun.net.ssl.internal.ssl.SSLSocketImpl.fatal(Unknown Source)
at com.sun.net.ssl.internal.ssl.Handshaker.fatalSE(Unknown Source)
at com.sun.net.ssl.internal.ssl.Handshaker.fatalSE(Unknown Source)
at com.sun.net.ssl.internal.ssl.ServerHandshaker.chooseCipherSuite(Unkno
wn Source)
at com.sun.net.ssl.internal.ssl.ServerHandshaker.clientHello(Unknown Sou
rce)
at com.sun.net.ssl.internal.ssl.ServerHandshaker.processMessage(Unknown
Source)
at com.sun.net.ssl.internal.ssl.Handshaker.processLoop(Unknown Source)
at com.sun.net.ssl.internal.ssl.Handshaker.process_record(Unknown Source
)
at com.sun.net.ssl.internal.ssl.SSLSocketImpl.readRecord(Unknown Source)
at com.sun.net.ssl.internal.ssl.SSLSocketImpl.performInitialHandshake(Un
known Source)
at com.sun.net.ssl.internal.ssl.SSLSocketImpl.readDataRecord(Unknown Sou
rce)
at com.sun.net.ssl.internal.ssl.AppInputStream.read(Unknown Source)
at com.sun.net.ssl.internal.ssl.AppInputStream.read(Unknown Source)
at fileIO.LEDataInputStream.readLine(LEDataInputStream.java:193)
I'm using Java 1.6 and I've enabled all supported ciphers which makes it a little odd that IE, Firefox, and Opera supposedly support none of("no cipher suites in common"). Here is the code I've used to create the SSLServerSocket:
SSLServerSocketFactory sslserversocketfactory =
(SSLServerSocketFactory) SSLServerSocketFactory.getDefault();
SSLServerSocket sslSS = (SSLServerSocket)sslserversocketfactory.createServerSocket(port);
String[] suites = sslSS.getSupportedCipherSuites();
for (String s: suites)
System.err.println(s);
sslSS.setEnabledCipherSuites(suites);
I haven't worked extensively with SSL but have had a working client and server using SSL under its protocol. The difference here is that I didn't make the clients. Firefox, Opera, and IE each are causing problems and I don't know precisely why.
Have you run into a similar problem with SSL before?
Do you have tips or suggestions?