Re: [Jessie-discuss] Exception in GNUSecurityParameters.decrypt when using SSL socket

[Martin Egholm Nielsen]

Hi there,

> I tried to create a test SSL server application with jessie-1.0.0 (in
> kaffe-1.1.6). I connected to this application using s_client from openssl.
>
> If I run s_client with -tls1, I get the following exception stack trace:
>
> org.metastatic.jessie.provider.MacException
>    at org.metastatic.jessie.provider.GNUSecurityParameters.decrypt
> (GNUSecurityParameters.java:307)
>    at org.metastatic.jessie.provider.RecordInput.readRecord
> (RecordInput.java:207)
>    at org.metastatic.jessie.provider.RecordInput.read (RecordInput.java:109)
>    at org.metastatic.jessie.provider.RecordInputStream.read
> (RecordInputStream.java:102)
>    at org.metastatic.jessie.provider.RecordInputStream.read
> (RecordInputStream.java:97)
>    at org.metastatic.jessie.provider.RecordInputStream.read
> (RecordInputStream.java:84)
>    at org.metastatic.jessie.provider.SSLSocketInputStream.read
> (SSLSocketInputStream.java:112)
>    at org.metastatic.jessie.provider.DigestInputStream.read
> (DigestInputStream.java:82)
>    at org.metastatic.jessie.provider.Handshake$Type.read
> (Handshake.java:372)
>    at org.metastatic.jessie.provider.Handshake.read (Handshake.java:117)
>    at org.metastatic.jessie.provider.Handshake.read (Handshake.java:104)
>    at org.metastatic.jessie.provider.SSLSocket.doServerHandshake
> (SSLSocket.java:2997)
>    at org.metastatic.jessie.provider.SSLSocket.startHandshake
> (SSLSocket.java:523)
>
>
> And if I add -bugs, I get the following:
>
> java.lang.ArrayIndexOutOfBoundsException
>    at org.metastatic.jessie.provider.GNUSecurityParameters.decrypt
> (GNUSecurityParameters.java:263)
>    at org.metastatic.jessie.provider.RecordInput.readRecord
> (RecordInput.java:207)
>    at org.metastatic.jessie.provider.RecordInput.read (RecordInput.java:109)
>    at org.metastatic.jessie.provider.RecordInputStream.read
> (RecordInputStream.java:102)
>    at org.metastatic.jessie.provider.RecordInputStream.read
> (RecordInputStream.java:97)
>    at org.metastatic.jessie.provider.RecordInputStream.read
> (RecordInputStream.java:84)
>    at org.metastatic.jessie.provider.SSLSocketInputStream.read
> (SSLSocketInputStream.java:112)
>    at org.metastatic.jessie.provider.DigestInputStream.read
> (DigestInputStream.java:82)
>    at org.metastatic.jessie.provider.Handshake$Type.read
> (Handshake.java:372)
>    at org.metastatic.jessie.provider.Handshake.read (Handshake.java:117)
>    at org.metastatic.jessie.provider.Handshake.read (Handshake.java:104)
>    at org.metastatic.jessie.provider.SSLSocket.doServerHandshake
> (SSLSocket.java:2997)
>    at org.metastatic.jessie.provider.SSLSocket.startHandshake
> (SSLSocket.java:523)
>
> I think this is a bug in Jessie, and I'd like to help debug/fix it, but I
> don't know where to start.

Sounds very much like the stuff I went through back in april/may:

http://lists.gnu.org/archive/html/jessie-discuss/2005-04/msg00006.html
http://lists.gnu.org/archive/html/jessie-discuss/2005-05/msg00006.html

I didn't get 1.0.0 to work either... However, turning to 0.9.7 it works 
like a charm... As you can see in the postings I merged a couple of 
files from Jessie CVS/1.0 to implement some of the improvements from 
1.0/CVS.
Moreover, I had to disable some ciphersuites in order to make a Mozilla 
client work along with my server...

Sorry I cannot help you with getting 1.0.0 to work - I tried, but gave up...

BR,
 Martin