Best code snippets using javax.net.ssl.SSLHandshakeException(Showing top 20 results out of 531)

private SSLException shutdownWithError(String operation, String err) {
  if (logger.isDebugEnabled()) {
    logger.debug("{} failed: OpenSSL error: {}", operation, err);
  }
  // There was an internal error -- shutdown
  shutdown();
  if (handshakeState == HandshakeState.FINISHED) {
    return new SSLException(err);
  }
  return new SSLHandshakeException(err);
}

private SSLEngineResult sslReadErrorResult(int err, int bytesConsumed, int bytesProduced) throws SSLException {
  String errStr = SSL.getErrorString(err);
  // Check if we have a pending handshakeException and if so see if we need to consume all pending data from the
  // BIO first or can just shutdown and throw it now.
  // This is needed so we ensure close_notify etc is correctly send to the remote peer.
  // See https://github.com/netty/netty/issues/3900
  if (SSL.bioLengthNonApplication(networkBIO) > 0) {
    if (handshakeException == null && handshakeState != HandshakeState.FINISHED) {
      // we seems to have data left that needs to be transfered and so the user needs
      // call wrap(...). Store the error so we can pick it up later.
      handshakeException = new SSLHandshakeException(errStr);
    }
    return new SSLEngineResult(OK, NEED_WRAP, bytesConsumed, bytesProduced);
  }
  throw shutdownWithError("SSL_read", errStr);
}

@Override
public KeyMaterial requested(long ssl, byte[] keyTypeBytes, byte[][] asn1DerEncodedPrincipals) {
  final ReferenceCountedOpenSslEngine engine = engineMap.get(ssl);
  try {
    final Set<String> keyTypesSet = supportedClientKeyTypes(keyTypeBytes);
    final String[] keyTypes = keyTypesSet.toArray(new String[keyTypesSet.size()]);
    final X500Principal[] issuers;
    if (asn1DerEncodedPrincipals == null) {
      issuers = null;
    } else {
      issuers = new X500Principal[asn1DerEncodedPrincipals.length];
      for (int i = 0; i < asn1DerEncodedPrincipals.length; i++) {
        issuers[i] = new X500Principal(asn1DerEncodedPrincipals[i]);
      }
    }
    return keyManagerHolder.keyMaterial(engine, keyTypes, issuers);
  } catch (Throwable cause) {
    logger.debug("request of key failed", cause);
    SSLHandshakeException e = new SSLHandshakeException("General OpenSslEngine problem");
    e.initCause(cause);
    engine.handshakeException = e;
    return null;
  }
}

throw new SSLHandshakeException("SSL session not available");
this.log.debug(" negotiated protocol: " + session.getProtocol());
this.log.debug(" negotiated cipher suite: " + session.getCipherSuite());
  final Certificate[] certs = session.getPeerCertificates();
  final X509Certificate x509 = (X509Certificate) certs[0];
  final X500Principal peer = x509.getSubjectX500Principal();
  this.log.debug(" peer principal: " + peer.toString());
  final Collection<List<?>> altNames1 = x509.getSubjectAlternativeNames();
  if (altNames1 != null) {
  this.log.debug(" issuer principal: " + issuer.toString());
  final Collection<List<?>> altNames2 = x509.getIssuerAlternativeNames();
  if (altNames2 != null) {

private SSLException shutdownWithError(String operation, String err) {
  if (logger.isDebugEnabled()) {
    logger.debug("{} failed: OpenSSL error: {}", operation, err);
  }
  // There was an internal error -- shutdown
  shutdown();
  if (handshakeState == HandshakeState.FINISHED) {
    return new SSLException(err);
  }
  return new SSLHandshakeException(err);
}

 // Open SSLSocket directly to gmail.com
SocketFactory sf = SSLSocketFactory.getDefault();
SSLSocket socket = (SSLSocket) sf.createSocket("gmail.com", 443);
HostnameVerifier hv = HttpsURLConnection.getDefaultHostnameVerifier();
SSLSession s = socket.getSession();

// Verify that the certicate hostname is for mail.google.com
// This is due to lack of SNI support in the current SSLSocket.
if (!hv.verify("mail.google.com", s)) {
  throw new SSLHandshakeException("Expected mail.google.com, "
                  "found " + s.getPeerPrincipal());
}

// At this point SSLSocket performed certificate verificaiton and
// we have performed hostname verification, so it is safe to proceed.

// ... use socket ...
socket.close();

private SSLException shutdownWithError(String operation, String err) {
  if (logger.isDebugEnabled()) {
    logger.debug("{} failed: OpenSSL error: {}", operation, err);
  }
  // There was an internal error -- shutdown
  shutdown();
  if (handshakeState == HandshakeState.FINISHED) {
    return new SSLException(err);
  }
  return new SSLHandshakeException(err);
}

@Override
public KeyMaterial requested(long ssl, byte[] keyTypeBytes, byte[][] asn1DerEncodedPrincipals) {
  final ReferenceCountedOpenSslEngine engine = engineMap.get(ssl);
  try {
    final Set<String> keyTypesSet = supportedClientKeyTypes(keyTypeBytes);
    final String[] keyTypes = keyTypesSet.toArray(new String[keyTypesSet.size()]);
    final X500Principal[] issuers;
    if (asn1DerEncodedPrincipals == null) {
      issuers = null;
    } else {
      issuers = new X500Principal[asn1DerEncodedPrincipals.length];
      for (int i = 0; i < asn1DerEncodedPrincipals.length; i++) {
        issuers[i] = new X500Principal(asn1DerEncodedPrincipals[i]);
      }
    }
    return keyManagerHolder.keyMaterial(engine, keyTypes, issuers);
  } catch (Throwable cause) {
    logger.debug("request of key failed", cause);
    SSLHandshakeException e = new SSLHandshakeException("General OpenSslEngine problem");
    e.initCause(cause);
    engine.handshakeException = e;
    return null;
  }
}

private SSLEngineResult sslReadErrorResult(int err, int bytesConsumed, int bytesProduced) throws SSLException {
  String errStr = SSL.getErrorString(err);
  // Check if we have a pending handshakeException and if so see if we need to consume all pending data from the
  // BIO first or can just shutdown and throw it now.
  // This is needed so we ensure close_notify etc is correctly send to the remote peer.
  // See https://github.com/netty/netty/issues/3900
  if (SSL.bioLengthNonApplication(networkBIO) > 0) {
    if (handshakeException == null && handshakeState != HandshakeState.FINISHED) {
      // we seems to have data left that needs to be transfered and so the user needs
      // call wrap(...). Store the error so we can pick it up later.
      handshakeException = new SSLHandshakeException(errStr);
    }
    return new SSLEngineResult(OK, NEED_WRAP, bytesConsumed, bytesProduced);
  }
  throw shutdownWithError("SSL_read", errStr);
}

@Override
public KeyMaterial requested(long ssl, byte[] keyTypeBytes, byte[][] asn1DerEncodedPrincipals) {
  final ReferenceCountedOpenSslEngine engine = engineMap.get(ssl);
  try {
    final Set<String> keyTypesSet = supportedClientKeyTypes(keyTypeBytes);
    final String[] keyTypes = keyTypesSet.toArray(new String[keyTypesSet.size()]);
    final X500Principal[] issuers;
    if (asn1DerEncodedPrincipals == null) {
      issuers = null;
    } else {
      issuers = new X500Principal[asn1DerEncodedPrincipals.length];
      for (int i = 0; i < asn1DerEncodedPrincipals.length; i++) {
        issuers[i] = new X500Principal(asn1DerEncodedPrincipals[i]);
      }
    }
    return keyManagerHolder.keyMaterial(engine, keyTypes, issuers);
  } catch (Throwable cause) {
    logger.debug("request of key failed", cause);
    SSLHandshakeException e = new SSLHandshakeException("General OpenSslEngine problem");
    e.initCause(cause);
    engine.handshakeException = e;
    return null;
  }
}

final ByteBuffer appDataBuffer = appDataManager.prepareForWrite(engine.getSession().getApplicationBufferSize());
unwrapResponse = engine.unwrap(streamInBuffer, appDataBuffer);
logger.trace("{} When reading data, (handshake={}) Unwrap response: {}", this, handshaking, unwrapResponse);
switch (unwrapResponse.getStatus()) {
  case BUFFER_OVERFLOW:
    throw new SSLHandshakeException("Buffer Overflow, which is not allowed to happen from an unwrap");
  case BUFFER_UNDERFLOW: {
    final ByteBuffer writableInBuffer = streamInManager.prepareForWrite(engine.getSession().getPacketBufferSize());
    final int bytesRead = readData(writableInBuffer);
    if (bytesRead < 0) {

private SSLException shutdownWithError(String operation, String err) {
  if (logger.isDebugEnabled()) {
    logger.debug("{} failed: OpenSSL error: {}", operation, err);
  }
  // There was an internal error -- shutdown
  shutdown();
  if (handshakeState == HandshakeState.FINISHED) {
    return new SSLException(err);
  }
  return new SSLHandshakeException(err);
}

  final ByteBuffer appDataOut = ByteBuffer.wrap(emptyMessage);
  final ByteBuffer outboundBuffer = streamOutManager.prepareForWrite(engine.getSession().getApplicationBufferSize());
  if (wrapHelloResult.getStatus() == Status.BUFFER_OVERFLOW) {
    streamOutManager.prepareForWrite(engine.getSession().getApplicationBufferSize());
    continue;
  if (wrapHelloResult.getStatus() != Status.OK) {
    throw new SSLHandshakeException("Could not generate SSL Handshake information: SSLEngineResult: "
        + wrapHelloResult.toString());
case NEED_UNWRAP: {
  final ByteBuffer readableDataIn = streamInManager.prepareForRead(0);
  final ByteBuffer appData = appDataManager.prepareForWrite(engine.getSession().getApplicationBufferSize());
      throw new SSLHandshakeException("Reached End-of-File marker while performing handshake");
  } else if (handshakeResponseResult.getStatus() == Status.CLOSED) {

sslEngine.getSession().invalidate();
  if (e.toString().toLowerCase().contains("insecure renegotiation")) {
    if (LOGGER.isLoggable(Level.SEVERE)) {
      LOGGER.severe("Secure SSL/TLS renegotiation is not "

private SSLEngineResult sslReadErrorResult(int err, int bytesConsumed, int bytesProduced) throws SSLException {
  String errStr = SSL.getErrorString(err);
  // Check if we have a pending handshakeException and if so see if we need to consume all pending data from the
  // BIO first or can just shutdown and throw it now.
  // This is needed so we ensure close_notify etc is correctly send to the remote peer.
  // See https://github.com/netty/netty/issues/3900
  if (SSL.bioLengthNonApplication(networkBIO) > 0) {
    if (handshakeException == null && handshakeState != HandshakeState.FINISHED) {
      // we seems to have data left that needs to be transfered and so the user needs
      // call wrap(...). Store the error so we can pick it up later.
      handshakeException = new SSLHandshakeException(errStr);
    }
    return new SSLEngineResult(OK, NEED_WRAP, bytesConsumed, bytesProduced);
  }
  throw shutdownWithError("SSL_read", errStr);
}

private SSLException shutdownWithError(String operation, String err) {
  if (logger.isDebugEnabled()) {
    logger.debug("{} failed: OpenSSL error: {}", operation, err);
  }
  // There was an internal error -- shutdown
  shutdown();
  if (handshakeState == HandshakeState.FINISHED) {
    return new SSLException(err);
  }
  return new SSLHandshakeException(err);
}

private SSLEngineResult sslReadErrorResult(int err, int bytesConsumed, int bytesProduced) throws SSLException {
  String errStr = SSL.getErrorString(err);
  // Check if we have a pending handshakeException and if so see if we need to consume all pending data from the
  // BIO first or can just shutdown and throw it now.
  // This is needed so we ensure close_notify etc is correctly send to the remote peer.
  // See https://github.com/netty/netty/issues/3900
  if (SSL.bioLengthNonApplication(networkBIO) > 0) {
    if (handshakeException == null && handshakeState != HandshakeState.FINISHED) {
      // we seems to have data left that needs to be transfered and so the user needs
      // call wrap(...). Store the error so we can pick it up later.
      handshakeException = new SSLHandshakeException(errStr);
    }
    return new SSLEngineResult(OK, NEED_WRAP, bytesConsumed, bytesProduced);
  }
  throw shutdownWithError("SSL_read", errStr);
}

@Override
public KeyMaterial requested(long ssl, byte[] keyTypeBytes, byte[][] asn1DerEncodedPrincipals) {
  final ReferenceCountedOpenSslEngine engine = engineMap.get(ssl);
  try {
    final Set<String> keyTypesSet = supportedClientKeyTypes(keyTypeBytes);
    final String[] keyTypes = keyTypesSet.toArray(new String[keyTypesSet.size()]);
    final X500Principal[] issuers;
    if (asn1DerEncodedPrincipals == null) {
      issuers = null;
    } else {
      issuers = new X500Principal[asn1DerEncodedPrincipals.length];
      for (int i = 0; i < asn1DerEncodedPrincipals.length; i++) {
        issuers[i] = new X500Principal(asn1DerEncodedPrincipals[i]);
      }
    }
    return keyManagerHolder.keyMaterial(engine, keyTypes, issuers);
  } catch (Throwable cause) {
    logger.debug("request of key failed", cause);
    SSLHandshakeException e = new SSLHandshakeException("General OpenSslEngine problem");
    e.initCause(cause);
    engine.handshakeException = e;
    return null;
  }
}

private SSLException shutdownWithError(String operation, String err) {
  if (logger.isDebugEnabled()) {
    logger.debug("{} failed: OpenSSL error: {}", operation, err);
  }
  // There was an internal error -- shutdown
  shutdown();
  if (handshakeState == HandshakeState.FINISHED) {
    return new SSLException(err);
  }
  return new SSLHandshakeException(err);
}

private SSLEngineResult sslReadErrorResult(int err, int bytesConsumed, int bytesProduced) throws SSLException {
  String errStr = SSL.getErrorString(err);
  // Check if we have a pending handshakeException and if so see if we need to consume all pending data from the
  // BIO first or can just shutdown and throw it now.
  // This is needed so we ensure close_notify etc is correctly send to the remote peer.
  // See https://github.com/netty/netty/issues/3900
  if (SSL.pendingWrittenBytesInBIO(networkBIO) > 0) {
    if (handshakeException == null && handshakeState != HandshakeState.FINISHED) {
      // we seems to have data left that needs to be transfered and so the user needs
      // call wrap(...). Store the error so we can pick it up later.
      handshakeException = new SSLHandshakeException(errStr);
    }
    return new SSLEngineResult(OK, NEED_WRAP, bytesConsumed, bytesProduced);
  }
  throw shutdownWithError("SSL_read", errStr);
}