Comment 4 for bug 1006776

Revision history for this message
Christoph W (wech) wrote :

Same as https://bugs.launchpad.net/ubuntu/+source/openjdk-7/+bug/989240

sun.security.pkcs11.wrapper.PKCS11Exception of CKR_DOMAIN_PARAMS_INVALID while creating private

    // Called by ServerHandshaker for ephemeral ECDH
    ECDHCrypt(String curveName, SecureRandom random) {
        try {
            KeyPairGenerator kpg = JsseJce.getKeyPairGenerator("EC");
            ECGenParameterSpec params = new ECGenParameterSpec(curveName);
            kpg.initialize(params, random);
            KeyPair kp = kpg.generateKeyPair(); <<<<<<<< ***BOOOM

I expierience the crash in jetty7 when connecting with libssl>=1.0.0.

It does work fine when I run jetty sun/oracles jdk7u4 and it also worked on ubuntu 8.04 lts with openjdk6b18, but not on ubuntu 10.04 lts with openjdk6b20 or on 12.04 with openjdk6b24 or openjdk7u3.

The ciphersuite chosen in my case is TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 in my case. When I disable all Elliptic Curve cipher suites trough jettys ssl configuration, the problem gets away.

This bug had been fixed for openjdk-6 - 6b18-1.8-0ubuntu1 (see https://bugs.launchpad.net/ubuntu/+source/openjdk-6/+bug/556549), but produced another bug so was undone it seems (https://bugs.launchpad.net/ubuntu/+source/openjdk-6/+bug/580982)