[Grizzly] Wanted some help with SSL

[Abhinav Hardikar]

Hi!

I have some issue setting up SSL with Grizzly server. I am using Grizzly 2 and the web browser as the client. Following is my startup code:

private static SSLEngineConfigurator getSSLEngine() {
        SSLContextConfigurator sslConfig = new SSLContextConfigurator();
        sslConfig.setKeyStoreFile("keystore_server");
        sslConfig.setKeyStorePass("somepassword");
        sslConfig.setTrustStoreFile("truststore_server");
        sslConfig.setKeyPass("somepassword");
        SSLEngineConfigurator engine = new SSLEngineConfigurator(sslConfig);
        engine.setNeedClientAuth(false);
        engine.setClientMode(false);
        return engine;
    }
    
    public static void main(String[] args) {
        try {
            System.setProperty("javax.net.debug", "all");
            enableGrizzlyLogging();
            registerServiceClasses();
            registerProviderClasses();
            registerFilterClasses();
            HttpServer server = GrizzlyHttpServerFactory.createHttpServer(
                    URI.create("http://0.0.0.0:3000/"), 
                    resourceConfig, 
                    true,
                    getSSLEngine());
            ContextManager.openDatabaseSession();
            server.start();
        } catch (IOException ex) {
            Logger.getLogger(ServiceHost.class.getName()).log(Level.SEVERE, null, ex);
}

I generated the certificates using the following method

keytool -genkey -keystore ./keystore_client -alias clientKey -keyalg RSA -keypass changeit -storepass changeit -dname "CN=Client, OU=Jersey, O=changeit, L=KL, ST=SEL, C=MY"
keytool -export -alias clientKey -storepass changeit -keystore ./keystore_client -file ./client.cert
keytool -import -alias clientCert -file ./client.cert -storepass changeit -keystore ./truststore_server


keytool -genkey -keystore ./keystore_server -alias serverKey -keyalg RSA -keyalg RSA -keypass changeit -storepass changeit -dname "CN=changeit, OU=Jersey, O=changeit, L=KL, ST=SEL, C=MY"
keytool -export -alias serverKey -storepass changeit -keystore ./keystore_server -file ./server.cert
keytool -import -alias serverCert -file ./server.cert -storepass changeit -keystore ./truststore_client

So when I browse https://localhost:3000 the browser simply says it could not establish secure connection to server. I checked the debug log and it had thrown an SSLHandshakeException saying that there were no cipher suites in common. Following is the complete debug log http://pastebin.com/Q6U7Q8wW

Can someone help me with this?

Abhinav

[Paul Clapham]

It would be more helpful if you posted the debug log here, rather than making people go to some other site -- which may or may not be trustworthy.

[Abhinav Hardikar]

Paul Clapham wrote:It would be more helpful if you posted the debug log here, rather than making people go to some other site -- which may or may not be trustworthy.

The log is rather big so I thought maybe Pastbin would be better. But ok, I'll update the post.

[Abhinav Hardikar]

Abhinav Hardikar wrote:

Paul Clapham wrote:It would be more helpful if you posted the debug log here, rather than making people go to some other site -- which may or may not be trustworthy.

The log is rather big so I thought maybe Pastbin would be better. But ok, I'll update the post.

I can't update the post, can I :(

[Bear Bibeault]

Wy would you need to update a post that already has replies? Add any extra info as a reply.