Ununtu 12.04 LTS
apt-cache policy openjdk-7-jdk openjdk-7-jdk: Installed: 7~u3-2.1.1~pre1-1ubuntu2 Candidate: 7~u3-2.1.1~pre1-1ubuntu2 Version table: *** 7~u3-2.1.1~pre1-1ubuntu2 0 500 http://za.archive.ubuntu.com/ubuntu/ precise/universe i386 Packages 100 /var/lib/dpkg/status
From the OpenJDK7 server (broken):
Allow unsafe renegotiation: true Allow legacy hello messages: true Is initial handshake: true Is secure renegotiation: false MessageManager, setSoTimeout(20000) called MessageManager, READ: TLSv1 Handshake, length = 221 *** ClientHello, TLSv1.1 RandomCookie: GMT: 1321675401 bytes = { 45, 56, 62, 197, 251, 165, 178, 142, 76, 186, 140, 230, 174, 158, 214, 5, 72, 177, 23, 221, 215, 202, 222, 100, 112, 251, 116, 222 } Session ID: {} Cipher Suites: [TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA, TLS_SRP_SHA_DSS_WITH_AES_256_CBC_SHA, TLS_SRP_SHA_RSA_WITH_AES_256_CBC_SHA, TLS_DHE_RSA_WITH_AES_256_CBC_SHA, TLS_DHE_DSS_WITH_AES_256_CBC_SHA, TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA, TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA, TLS_ECDH_RSA_WITH_AES_256_CBC_SHA, TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA, TLS_RSA_WITH_AES_256_CBC_SHA, TLS_RSA_WITH_CAMELLIA_256_CBC_SHA, TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA, TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA, TLS_SRP_SHA_DSS_WITH_3DES_EDE_CBC_SHA, TLS_SRP_SHA_RSA_WITH_3DES_EDE_CBC_SHA, SSL_DHE_RSA_WITH_3DES_EDE_CBC_SHA, SSL_DHE_DSS_WITH_3DES_EDE_CBC_SHA, TLS_ECDH_RSA_WITH_3DES_EDE_CBC_SHA, TLS_ECDH_ECDSA_WITH_3DES_EDE_CBC_SHA, SSL_RSA_WITH_3DES_EDE_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA, TLS_SRP_SHA_DSS_WITH_AES_128_CBC_SHA, TLS_SRP_SHA_RSA_WITH_AES_128_CBC_SHA, TLS_DHE_RSA_WITH_AES_128_CBC_SHA, TLS_DHE_DSS_WITH_AES_128_CBC_SHA, TLS_DHE_RSA_WITH_SEED_CBC_SHA, TLS_DHE_DSS_WITH_SEED_CBC_SHA, TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA, TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA, TLS_ECDH_RSA_WITH_AES_128_CBC_SHA, TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_SEED_CBC_SHA, TLS_RSA_WITH_CAMELLIA_128_CBC_SHA, TLS_ECDHE_RSA_WITH_RC4_128_SHA, TLS_ECDHE_ECDSA_WITH_RC4_128_SHA, TLS_ECDH_RSA_WITH_RC4_128_SHA, TLS_ECDH_ECDSA_WITH_RC4_128_SHA, SSL_RSA_WITH_RC4_128_SHA, SSL_RSA_WITH_RC4_128_MD5, SSL_DHE_RSA_WITH_DES_CBC_SHA, SSL_DHE_DSS_WITH_DES_CBC_SHA, SSL_RSA_WITH_DES_CBC_SHA, SSL_DHE_RSA_EXPORT_WITH_DES40_CBC_SHA, SSL_DHE_DSS_EXPORT_WITH_DES40_CBC_SHA, SSL_RSA_EXPORT_WITH_DES40_CBC_SHA, SSL_RSA_EXPORT_WITH_RC2_CBC_40_MD5, SSL_RSA_EXPORT_WITH_RC4_40_MD5, TLS_EMPTY_RENEGOTIATION_INFO_SCSV] Compression Methods: { 1, 0 } Extension ec_point_formats, formats: [uncompressed, ansiX962_compressed_prime, ansiX962_compressed_char2] Extension elliptic_curves, curve names: {sect571r1, sect571k1, secp521r1, sect409k1, sect409r1, secp384r1, sect283k1, sect283r1, secp256k1, secp256r1, sect239k1, sect233k1, sect233r1, secp224k1, secp224r1, sect193r1, sect193r2, secp192k1, secp192r1, sect163k1, sect163r1, sect163r2, secp160k1, secp160r1, secp160r2} Unsupported extension type_35, data: Unsupported extension type_15, data: 01 *** %% Initialized: [Session-1, SSL_NULL_WITH_NULL_NULL] matching alias: fmsrns MessageManager, handling exception: java.security.ProviderException: sun.security.pkcs11.wrapper.PKCS11Exception: CKR_DOMAIN_PARAMS_INVALID %% Invalidated: [Session-1, SSL_NULL_WITH_NULL_NULL] MessageManager, SEND TLSv1.1 ALERT: fatal, description = internal_error MessageManager, WRITE: TLSv1.1 Alert, length = 2 MessageManager, called closeSocket() MessageManager, IOException in getSession(): javax.net.ssl.SSLException: java.security.ProviderException: sun.security.pkcs11.wrapper.PKCS11Exception: CKR_DOMAIN_PARAMS_INVALID
From the sun-jdk server(works):
Allow unsafe renegotiation: true Allow legacy hello messages: true Is initial handshake: true Is secure renegotiation: false pool-2-thread-1, setSoTimeout(20000) called pool-2-thread-1, READ: TLSv1 Handshake, length = 221 *** ClientHello, TLSv1.1 RandomCookie: GMT: 1321675506 bytes = { 188, 132, 89, 108, 237, 169, 129, 49, 160, 33, 112, 237, 203, 27, 146, 187, 53, 152, 148, 219, 10, 93, 44, 51, 49, 209, 241, 18 } Session ID: {} Cipher Suites: [TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA, Unknown 0xc0:0x22, Unknown 0xc0:0x21, TLS_DHE_RSA_WITH_AES_256_CBC_SHA, TLS_DHE_DSS_WITH_AES_256_CBC_SHA, Unknown 0x0:0x88, Unknown 0x0:0x87, TLS_ECDH_RSA_WITH_AES_256_CBC_SHA, TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA, TLS_RSA_WITH_AES_256_CBC_SHA, Unknown 0x0:0x84, TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA, TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA, Unknown 0xc0:0x1c, Unknown 0xc0:0x1b, SSL_DHE_RSA_WITH_3DES_EDE_CBC_SHA, SSL_DHE_DSS_WITH_3DES_EDE_CBC_SHA, TLS_ECDH_RSA_WITH_3DES_EDE_CBC_SHA, TLS_ECDH_ECDSA_WITH_3DES_EDE_CBC_SHA, SSL_RSA_WITH_3DES_EDE_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA, Unknown 0xc0:0x1f, Unknown 0xc0:0x1e, TLS_DHE_RSA_WITH_AES_128_CBC_SHA, TLS_DHE_DSS_WITH_AES_128_CBC_SHA, Unknown 0x0:0x9a, Unknown 0x0:0x99, Unknown 0x0:0x45, Unknown 0x0:0x44, TLS_ECDH_RSA_WITH_AES_128_CBC_SHA, TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_AES_128_CBC_SHA, Unknown 0x0:0x96, Unknown 0x0:0x41, TLS_ECDHE_RSA_WITH_RC4_128_SHA, TLS_ECDHE_ECDSA_WITH_RC4_128_SHA, TLS_ECDH_RSA_WITH_RC4_128_SHA, TLS_ECDH_ECDSA_WITH_RC4_128_SHA, SSL_RSA_WITH_RC4_128_SHA, SSL_RSA_WITH_RC4_128_MD5, SSL_DHE_RSA_WITH_DES_CBC_SHA, SSL_DHE_DSS_WITH_DES_CBC_SHA, SSL_RSA_WITH_DES_CBC_SHA, SSL_DHE_RSA_EXPORT_WITH_DES40_CBC_SHA, SSL_DHE_DSS_EXPORT_WITH_DES40_CBC_SHA, SSL_RSA_EXPORT_WITH_DES40_CBC_SHA, SSL_RSA_EXPORT_WITH_RC2_CBC_40_MD5, SSL_RSA_EXPORT_WITH_RC4_40_MD5, TLS_EMPTY_RENEGOTIATION_INFO_SCSV] Compression Methods: { 1, 0 } Extension ec_point_formats, formats: [uncompressed, ansiX962_compressed_prime, ansiX962_compressed_char2] Extension elliptic_curves, curve names: {sect571r1, sect571k1, secp521r1, sect409k1, sect409r1, secp384r1, sect283k1, sect283r1, secp256k1, secp256r1, sect239k1, sect233k1, sect233r1, secp224k1, secp224r1, sect193r1, sect193r2, secp192k1, secp192r1, sect163k1, sect163r1, sect163r2, secp160k1, secp160r1, secp160r2} Unsupported extension type_35, data: Unsupported extension type_15, data: 01 *** %% Created: [Session-1, TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA] *** ServerHello, TLSv1 RandomCookie: GMT: 1321675506 bytes = { 141, 15, 202, 217, 253, 174, 240, 169, 172, 62, 151, 132, 183, 87, 204, 146, 37, 174, 38, 204, 18, 234, 112, 30, 174, 165, 57, 117 } Session ID: {79, 199, 43, 242, 167, 217, 237, 76, 85, 242, 195, 126, 53, 209, 252, 103, 58, 71, 185, 6, 181, 52, 206, 70, 75, 13, 117, 143, 21, 183, 5, 142} Cipher Suite: TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA Compression Method: 0 Extension renegotiation_info, renegotiated_connection: <empty> *** Cipher suite: TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA *** Certificate chain
Ununtu 12.04 LTS
apt-cache policy openjdk-7-jdk 1.1~pre1- 1ubuntu2 1.1~pre1- 1ubuntu2 1.1~pre1- 1ubuntu2 0 za.archive. ubuntu. com/ubuntu/ precise/universe i386 Packages dpkg/status
openjdk-7-jdk:
Installed: 7~u3-2.
Candidate: 7~u3-2.
Version table:
*** 7~u3-2.
500 http://
100 /var/lib/
From the OpenJDK7 server (broken):
Allow unsafe renegotiation: true RSA_WITH_ AES_256_ CBC_SHA, TLS_ECDHE_ ECDSA_WITH_ AES_256_ CBC_SHA, TLS_SRP_ SHA_DSS_ WITH_AES_ 256_CBC_ SHA, TLS_SRP_ SHA_RSA_ WITH_AES_ 256_CBC_ SHA, TLS_DHE_ RSA_WITH_ AES_256_ CBC_SHA, TLS_DHE_ DSS_WITH_ AES_256_ CBC_SHA, TLS_DHE_ RSA_WITH_ CAMELLIA_ 256_CBC_ SHA, TLS_DHE_ DSS_WITH_ CAMELLIA_ 256_CBC_ SHA, TLS_ECDH_ RSA_WITH_ AES_256_ CBC_SHA, TLS_ECDH_ ECDSA_WITH_ AES_256_ CBC_SHA, TLS_RSA_ WITH_AES_ 256_CBC_ SHA, TLS_RSA_ WITH_CAMELLIA_ 256_CBC_ SHA, TLS_ECDHE_ RSA_WITH_ 3DES_EDE_ CBC_SHA, TLS_ECDHE_ ECDSA_WITH_ 3DES_EDE_ CBC_SHA, TLS_SRP_ SHA_DSS_ WITH_3DES_ EDE_CBC_ SHA, TLS_SRP_ SHA_RSA_ WITH_3DES_ EDE_CBC_ SHA, SSL_DHE_ RSA_WITH_ 3DES_EDE_ CBC_SHA, SSL_DHE_ DSS_WITH_ 3DES_EDE_ CBC_SHA, TLS_ECDH_ RSA_WITH_ 3DES_EDE_ CBC_SHA, TLS_ECDH_ ECDSA_WITH_ 3DES_EDE_ CBC_SHA, SSL_RSA_ WITH_3DES_ EDE_CBC_ SHA, TLS_ECDHE_ RSA_WITH_ AES_128_ CBC_SHA, TLS_ECDHE_ ECDSA_WITH_ AES_128_ CBC_SHA, TLS_SRP_ SHA_DSS_ WITH_AES_ 128_CBC_ SHA, TLS_SRP_ SHA_RSA_ WITH_AES_ 128_CBC_ SHA, TLS_DHE_ RSA_WITH_ AES_128_ CBC_SHA, TLS_DHE_ DSS_WITH_ AES_128_ CBC_SHA, TLS_DHE_ RSA_WITH_ SEED_CBC_ SHA, TLS_DHE_ DSS_WITH_ SEED_CBC_ SHA, TLS_DHE_ RSA_WITH_ CAMELLIA_ 128_CBC_ SHA, TLS_DHE_ DSS_WITH_ CAMELLIA_ 128_CBC_ SHA, TLS_ECDH_ RSA_WITH_ AES_128_ CBC_SHA, TLS_ECDH_ ECDSA_WITH_ AES_128_ CBC_SHA, TLS_RSA_ WITH_AES_ 128_CBC_ SHA, TLS_RSA_ WITH_SEED_ CBC_SHA, TLS_RSA_ WITH_CAMELLIA_ 128_CBC_ SHA, TLS_ECDHE_ RSA_WITH_ RC4_128_ SHA, TLS_ECDHE_ ECDSA_WITH_ RC4_128_ SHA, TLS_ECDH_ RSA_WITH_ RC4_128_ SHA, TLS_ECDH_ ECDSA_WITH_ RC4_128_ SHA, SSL_RSA_ WITH_RC4_ 128_SHA, SSL_RSA_ WITH_RC4_ 128_MD5, SSL_DHE_ RSA_WITH_ DES_CBC_ SHA, SSL_DHE_ DSS_WITH_ DES_CBC_ SHA, SSL_RSA_ WITH_DES_ CBC_SHA, SSL_DHE_ RSA_EXPORT_ WITH_DES40_ CBC_SHA, SSL_DHE_ DSS_EXPORT_ WITH_DES40_ CBC_SHA, SSL_RSA_ EXPORT_ WITH_DES40_ CBC_SHA, SSL_RSA_ EXPORT_ WITH_RC2_ CBC_40_ MD5, SSL_RSA_ EXPORT_ WITH_RC4_ 40_MD5, TLS_EMPTY_ RENEGOTIATION_ INFO_SCSV] compressed_ prime, ansiX962_ compressed_ char2] WITH_NULL_ NULL] ProviderExcepti on: sun.security. pkcs11. wrapper. PKCS11Exception : CKR_DOMAIN_ PARAMS_ INVALID WITH_NULL_ NULL] ssl.SSLExceptio n: java.security. ProviderExcepti on: sun.security. pkcs11. wrapper. PKCS11Exception : CKR_DOMAIN_ PARAMS_ INVALID
Allow legacy hello messages: true
Is initial handshake: true
Is secure renegotiation: false
MessageManager, setSoTimeout(20000) called
MessageManager, READ: TLSv1 Handshake, length = 221
*** ClientHello, TLSv1.1
RandomCookie: GMT: 1321675401 bytes = { 45, 56, 62, 197, 251, 165, 178, 142, 76, 186, 140, 230, 174, 158, 214, 5, 72, 177, 23, 221, 215, 202, 222, 100, 112, 251, 116, 222 }
Session ID: {}
Cipher Suites: [TLS_ECDHE_
Compression Methods: { 1, 0 }
Extension ec_point_formats, formats: [uncompressed, ansiX962_
Extension elliptic_curves, curve names: {sect571r1, sect571k1, secp521r1, sect409k1, sect409r1, secp384r1, sect283k1, sect283r1, secp256k1, secp256r1, sect239k1, sect233k1, sect233r1, secp224k1, secp224r1, sect193r1, sect193r2, secp192k1, secp192r1, sect163k1, sect163r1, sect163r2, secp160k1, secp160r1, secp160r2}
Unsupported extension type_35, data:
Unsupported extension type_15, data: 01
***
%% Initialized: [Session-1, SSL_NULL_
matching alias: fmsrns
MessageManager, handling exception: java.security.
%% Invalidated: [Session-1, SSL_NULL_
MessageManager, SEND TLSv1.1 ALERT: fatal, description = internal_error
MessageManager, WRITE: TLSv1.1 Alert, length = 2
MessageManager, called closeSocket()
MessageManager, IOException in getSession(): javax.net.
From the sun-jdk server(works):
Allow unsafe renegotiation: true RSA_WITH_ AES_256_ CBC_SHA, TLS_ECDHE_ ECDSA_WITH_ AES_256_ CBC_SHA, Unknown 0xc0:0x22, Unknown 0xc0:0x21, TLS_DHE_ RSA_WITH_ AES_256_ CBC_SHA, TLS_DHE_ DSS_WITH_ AES_256_ CBC_SHA, Unknown 0x0:0x88, Unknown 0x0:0x87, TLS_ECDH_ RSA_WITH_ AES_256_ CBC_SHA, TLS_ECDH_ ECDSA_WITH_ AES_256_ CBC_SHA, TLS_RSA_ WITH_AES_ 256_CBC_ SHA, Unknown 0x0:0x84, TLS_ECDHE_ RSA_WITH_ 3DES_EDE_ CBC_SHA, TLS_ECDHE_ ECDSA_WITH_ 3DES_EDE_ CBC_SHA, Unknown 0xc0:0x1c, Unknown 0xc0:0x1b, SSL_DHE_ RSA_WITH_ 3DES_EDE_ CBC_SHA, SSL_DHE_ DSS_WITH_ 3DES_EDE_ CBC_SHA, TLS_ECDH_ RSA_WITH_ 3DES_EDE_ CBC_SHA, TLS_ECDH_ ECDSA_WITH_ 3DES_EDE_ CBC_SHA, SSL_RSA_ WITH_3DES_ EDE_CBC_ SHA, TLS_ECDHE_ RSA_WITH_ AES_128_ CBC_SHA, TLS_ECDHE_ ECDSA_WITH_ AES_128_ CBC_SHA, Unknown 0xc0:0x1f, Unknown 0xc0:0x1e, TLS_DHE_ RSA_WITH_ AES_128_ CBC_SHA, TLS_DHE_ DSS_WITH_ AES_128_ CBC_SHA, Unknown 0x0:0x9a, Unknown 0x0:0x99, Unknown 0x0:0x45, Unknown 0x0:0x44, TLS_ECDH_ RSA_WITH_ AES_128_ CBC_SHA, TLS_ECDH_ ECDSA_WITH_ AES_128_ CBC_SHA, TLS_RSA_ WITH_AES_ 128_CBC_ SHA, Unknown 0x0:0x96, Unknown 0x0:0x41, TLS_ECDHE_ RSA_WITH_ RC4_128_ SHA, TLS_ECDHE_ ECDSA_WITH_ RC4_128_ SHA, TLS_ECDH_ RSA_WITH_ RC4_128_ SHA, TLS_ECDH_ ECDSA_WITH_ RC4_128_ SHA, SSL_RSA_ WITH_RC4_ 128_SHA, SSL_RSA_ WITH_RC4_ 128_MD5, SSL_DHE_ RSA_WITH_ DES_CBC_ SHA, SSL_DHE_ DSS_WITH_ DES_CBC_ SHA, SSL_RSA_ WITH_DES_ CBC_SHA, SSL_DHE_ RSA_EXPORT_ WITH_DES40_ CBC_SHA, SSL_DHE_ DSS_EXPORT_ WITH_DES40_ CBC_SHA, SSL_RSA_ EXPORT_ WITH_DES40_ CBC_SHA, SSL_RSA_ EXPORT_ WITH_RC2_ CBC_40_ MD5, SSL_RSA_ EXPORT_ WITH_RC4_ 40_MD5, TLS_EMPTY_ RENEGOTIATION_ INFO_SCSV] compressed_ prime, ansiX962_ compressed_ char2] RSA_WITH_ 3DES_EDE_ CBC_SHA] RSA_WITH_ 3DES_EDE_ CBC_SHA connection: <empty> RSA_WITH_ 3DES_EDE_ CBC_SHA
Allow legacy hello messages: true
Is initial handshake: true
Is secure renegotiation: false
pool-2-thread-1, setSoTimeout(20000) called
pool-2-thread-1, READ: TLSv1 Handshake, length = 221
*** ClientHello, TLSv1.1
RandomCookie: GMT: 1321675506 bytes = { 188, 132, 89, 108, 237, 169, 129, 49, 160, 33, 112, 237, 203, 27, 146, 187, 53, 152, 148, 219, 10, 93, 44, 51, 49, 209, 241, 18 }
Session ID: {}
Cipher Suites: [TLS_ECDHE_
Compression Methods: { 1, 0 }
Extension ec_point_formats, formats: [uncompressed, ansiX962_
Extension elliptic_curves, curve names: {sect571r1, sect571k1, secp521r1, sect409k1, sect409r1, secp384r1, sect283k1, sect283r1, secp256k1, secp256r1, sect239k1, sect233k1, sect233r1, secp224k1, secp224r1, sect193r1, sect193r2, secp192k1, secp192r1, sect163k1, sect163r1, sect163r2, secp160k1, secp160r1, secp160r2}
Unsupported extension type_35, data:
Unsupported extension type_15, data: 01
***
%% Created: [Session-1, TLS_ECDHE_
*** ServerHello, TLSv1
RandomCookie: GMT: 1321675506 bytes = { 141, 15, 202, 217, 253, 174, 240, 169, 172, 62, 151, 132, 183, 87, 204, 146, 37, 174, 38, 204, 18, 234, 112, 30, 174, 165, 57, 117 }
Session ID: {79, 199, 43, 242, 167, 217, 237, 76, 85, 242, 195, 126, 53, 209, 252, 103, 58, 71, 185, 6, 181, 52, 206, 70, 75, 13, 117, 143, 21, 183, 5, 142}
Cipher Suite: TLS_ECDHE_
Compression Method: 0
Extension renegotiation_info, renegotiated_
***
Cipher suite: TLS_ECDHE_
*** Certificate chain