671 questions
0 votes
1 answer
169 views
Java two-way SSL with client certificate results in HTTP 403, but works in Postman
I am integrating with a SOAP server that uses two-way SSL (mutual TLS). To validate my certificates were okay, I make a request using Postman and curl. Via POSTMAN: I enable SSL certificate validation ...
0 votes
1 answer
109 views
How to view handshake/certificate information for attempted but failed connection, Python ssl
I am attempting to connect a client and server with sslContext.wrap_socket with the Python ssl library. I am getting some strange SSL errors including WRONG_VERSION_NUMBER and UNKNOWN_CA even though ...
0 votes
1 answer
58 views
Sec-WebSocket-Accept digest verification in the Client
Studying the WebSocket protocol a little bit and I am a little confused about the lack of mentioning any client verification of the digest that the server generates in Sec-WebSocket-Accept header. ...
0 votes
0 answers
41 views
Cannot Establish Handshake with STOMP API after Deployment
I'm currently learning about WebSockets and have developed a Spring Boot API that uses the STOMP protocol to support a real-time multiplayer game. This API connects with Android clients built in Java, ...
-1 votes
1 answer
235 views
TlsException: Handshake failed after sending a bunch of web requests
After i send about 1500-1700 web requests (it's always in that range), i get this error: TlsException: Handshake failed - error code: UNITYTLS_INTERNAL_ERROR, verify result: ...
0 votes
1 answer
64 views
Disable the handshake for Java Californium Coap client/server
Currently I have a Coap server that processed request from IOT devices. It does handshake, validates certificate, identity.... before processing every request. Now, in other to optimize the battery ...
1 vote
1 answer
321 views
OpenSSL BIO_do_handshake does not put any errors on the stack
I'm trying to debug a TLS handshake problem from the server side. The client sends something the server doesn't like in the Client Hello packet, and I'm trying to figure out what it is. After setting ...
1 vote
1 answer
518 views
Using CertificateVerifier in GRPC C++ to manage custom tls handshake
I'm using C++ Grpc to implement a custom tls handshake on the server and client side. The handshake will: Check fields in the certificate Check vars related to the operating system I believe ...
-1 votes
2 answers
850 views
Getting Gradle handshake_failure error on new installation
I have a new user on our system. He is trying to build the software for the first time, and is getting the following error. FAILURE: Build failed with an exception. * What went wrong: A problem ...
1 vote
0 answers
219 views
vsslproxy: Client {IP} failed SSL negotiation (ssl/record/ssl3_record.c/350): error:1408F1BB:SSL routines:ssl3_get_record:bad record type)
During the last few weeks, some client complained that they are "kicked" from our website and after some digging around, we found that the load balancer return this error for those client (...
1 vote
0 answers
493 views
How to determine what causes a SSL handshake failure
Update: PCAP file: https://fastupload.io/0362cd55628fb281 I have an application built in 2017 that uses OpenSSL 1.0.1h (file named ssleay32.dll). I have a new version of this application that uses a ...
0 votes
0 answers
282 views
Enable HTTPS in Spring Boot and make use of the WINDOWS-ROOT trust store type
I am trying to enable HTTPS in my Spring Boot application and make use of the WINDOWS-ROOT trust store type. I need this so that my Spring Boot application will act as a client and call another ...
0 votes
0 answers
151 views
"Incorrect inner plaintext: no content type" in SSL communication
Multiple computers works with the same application. And every day after few hour of work small part of them have a problem with handshake to external services. javax.net.ssl.SSLHandshakeException: ...
2 votes
1 answer
1k views
Enable a specific cipher suite for Java 11
We've been having trouble starting a Java application due to handshake failures. Upon inspection, we've discovered that the application can't connect to the server because the server expects a ...
0 votes
2 answers
372 views
Using tokio::time::timeout does not trap delayed response from TCPReadStream
I'm writing a PoC P2P node handshake to a BitCoin server. I send a 'version' message to the target node and it responds with its corresponding version message. So far so good. However, every now and ...