Re: [Jessie-discuss] unknown protocol name: SSLv2Hello

[chinmaya]

>From JSEE JDK 1.5 Guide I extracted this as notes for SSLv2Hello

-- snippet --
Currently, the SSLv3 and TLSv1 protocols allow you to
send SSLv3 and
TLSv1 hellos encapsulated in an SSLv2 format hello. For more details on
the reasons for allowing this compatibility in these protocols, see
Appendix E in RFC 2246:
The TLS Protocol Version 1.0.

Note that some SSL/TLS servers do not support the v2 hello format and require that client hellos conform to the SSLv3 or TLSv1 client hello formats.

          The SSLv2Hello option controls the SSLv2 encapsulation.
If SSLv2Hello is disabled on the client, then all outgoing messages
will conform to the SSLv3/TLSv1 client hello format. If SSLv2Hello
is disabled on the server, then all incoming messages must conform
to the SSLv3/TLSv1 client hello format
-- snippet --


Sounds like both IE and Firefox sends Client Hello in SSLv2 encapsulation format !!

Is there a way I could get implementation for this please??
As I have integrated Jessie with Tomcat I need this support desperately !!

thanks
chinmaya

On 4/3/07, Casey Marshall < address@hidden> wrote:

Your code or the Apache code is calling setEnabledProtocols with
"SSLv2Hello" as one of the protocols. Jessie doesn't support
"SSLv2Hello," and I'm not entirely sure what it is supposed to do.

(The SSLv2Hello bit may even be in a config file someplace)


On Apr 3, 2007, at 6:31 PM, chinmaya wrote:

> Hi,
>
> I integrated Jessie code into Tomcat 5.0.28. I am getting following
> error, however it works fine if I am using Sun's JSSE. I am using a
> web-browser (IE/Firefox) to connect to server.
> Can you please help me understand this problem.
> How do I get this working?
>
> thanks in advance
> chinmaya
>
> java.lang.IllegalArgumentException : unknown protocol name: SSLv2Hello
>         at gnu.javax.net.ssl.provider.ProtocolVersion.forName
> (ProtocolVersion.java :86)
>         at gnu.javax.net.ssl.provider.ServerHandshake.chooseProtocol
> (ServerHandshake.java:176)
>         at
> gnu.javax.net.ssl.provider.ServerHandshake.implHandleInput
> (ServerHandshake.java:334)
>         at gnu.javax.net.ssl.provider.AbstractHandshake.handleInput
> (AbstractHandshake.java:241)
>         at gnu.javax.net.ssl.provider.SSLEngineImpl.unwrap
> (SSLEngineImpl.java:622)
>         at javax.net.ssl.SSLEngine.unwrap(SSLEngine.java:566)
>         at gnu.javax.net.ssl.provider.SSLSocketImpl.doHandshake
> (SSLSocketImpl.java:473)
>         at gnu.javax.net.ssl.provider.SSLSocketImpl
> $SocketInputStream.read(SSLSocketImpl.java:150)
>         at org.apache.coyote.http11.InternalInputBuffer.fill
> (InternalInputBuffer.java:737)
>         at
> org.apache.coyote.http11.InternalInputBuffer.parseRequestLine
> (InternalInputBuffer.java:398)
>         at org.apache.coyote.http11.Http11Processor.process
> (Http11Processor.java:761)
>         at org.apache.coyote.http11.Http11Protocol
> $Http11ConnectionHandler.processConnection (Http11Protocol.java:705)
>         at org.apache.tomcat.util.net.TcpWorkerThread.runIt
> (PoolTcpEndpoint.java:577)
>         at org.apache.tomcat.util.threads.ThreadPool
> $ControlRunnable.run(ThreadPool.java:683)
>         at java.lang.Thread.run(Thread.java:595)
> _______________________________________________
> Jessie-discuss mailing list
> address@hidden
> http://lists.nongnu.org/mailman/listinfo/jessie-discuss