2 Replies Latest reply on Aug 6, 2004 11:44 AM by 666705

    a different handshake exception

    3004

      Hello,

      i am experiencing a different type of handshake exception than i've seen other
      people report lately. I am trying to access a web service running on a remote
      system using https. I've created a keystore and imported the cert (it is not a
      self-signed cert, i can hit the page with IE with no problems) and it didn't help.
      I really don't know what's going on here. Any ideas?

      The error code given is Severity: 2 Type: 40.

      here is the ssl debug output:

      <Dec 10, 2003 1:32:32 PM EST> <Debug> <TLS> <000000> <No JCE support for algorithm
      ECDSA, class java.security.Signature>
      <Dec 10, 2003 1:32:33 PM EST> <Debug> <TLS> <000000> <JCE support for algorithm
      SHA1withDSA, class sun.security.provider.DSA using provider SUN version 1.2>
      <Dec 10, 2003 1:32:33 PM EST> <Debug> <TLS> <000000> <JCE support for algorithm
      MD5withRSA, class java.security.Signature$Delegate using provider SunJSSE version
      1.41>
      <Dec 10, 2003 1:32:33 PM EST> <Debug> <TLS> <000000> <JCE support for algorithm
      SHA1withRSA, class java.security.Signature$Delegate using provider SunJSSE version
      1.41>
      <Dec 10, 2003 1:32:33 PM EST> <Debug> <TLS> <000000> <JCE support for algorithm
      MD2withRSA, class java.security.Signature$Delegate using provider SunJSSE version
      1.41>
      <Dec 10, 2003 1:32:33 PM EST> <Debug> <TLS> <000000> <JCE support for algorithm
      SHA, class java.security.MessageDigest$Delegate using provider SUN version 1.2>

      <Dec 10, 2003 1:32:33 PM EST> <Debug> <TLS> <000000> <JCE support for algorithm
      MD5, class java.security.MessageDigest$Delegate using provider SUN version 1.2>

      <Dec 10, 2003 1:32:36 PM EST> <Debug> <TLS> <000000> <No JCE support for algorithm
      NullMac, class javax.crypto.Mac>
      <Dec 10, 2003 1:32:36 PM EST> <Debug> <TLS> <000000> <No JCE support for algorithm
      HmacSHA1, class javax.crypto.Mac>
      <Dec 10, 2003 1:32:36 PM EST> <Debug> <TLS> <000000> <No JCE support for algorithm
      HmacMD5, class javax.crypto.Mac>
      <Dec 10, 2003 1:32:36 PM EST> <Debug> <TLS> <000000> <No JCE support for algorithm
      DES/CBC/NoPadding, class javax.crypto.Cipher>
      <Dec 10, 2003 1:32:36 PM EST> <Debug> <TLS> <000000> <No JCE support for algorithm
      DESede/CBC/NoPadding, class javax.crypto.Cipher>
      <Dec 10, 2003 1:32:36 PM EST> <Debug> <TLS> <000000> <No JCE support for algorithm
      DESede/ECB/NoPadding, class javax.crypto.Cipher>
      <Dec 10, 2003 1:32:36 PM EST> <Debug> <TLS> <000000> <No JCE support for algorithm
      RC4, class javax.crypto.Cipher>
      <Dec 10, 2003 1:32:36 PM EST> <Debug> <TLS> <000000> <No JCE support for algorithm
      RSA/ECB/PKCS1Padding, class javax.crypto.Cipher>
      <Dec 10, 2003 1:32:36 PM EST> <Debug> <TLS> <000000> <No JCE support for algorithm
      RSA/ECB/NoPadding, class javax.crypto.Cipher>
      <Dec 10, 2003 1:32:36 PM EST> <Debug> <TLS> <000000> <No JCE support for algorithm
      Anonymous, class javax.crypto.KeyAgreement>
      <Dec 10, 2003 1:32:36 PM EST> <Debug> <TLS> <000000> <No JCE support for algorithm
      ECDH, class javax.crypto.KeyAgreement>
      <Dec 10, 2003 1:32:36 PM EST> <Debug> <TLS> <000000> <No JCE support for algorithm
      DiffieHellman, class javax.crypto.KeyAgreement>
      <Dec 10, 2003 1:32:36 PM EST> <Debug> <TLS> <000000> <No JCE support for algorithm
      RSA, class javax.crypto.KeyAgreement>
      <Dec 10, 2003 1:32:36 PM EST> <Debug> <TLS> <000000> <ECDSA | java.security.Signature
      | USEHARDWIRED>
      <Dec 10, 2003 1:32:36 PM EST> <Debug> <TLS> <000000> <SHA1withDSA | java.security.Signature
      | USEJCE | SUN version 1.2>
      <Dec 10, 2003 1:32:36 PM EST> <Debug> <TLS> <000000> <MD5withRSA | java.security.Signature
      | USEJCE | SunJSSE version 1.41>
      <Dec 10, 2003 1:32:36 PM EST> <Debug> <TLS> <000000> <SHA1withRSA | java.security.Signature
      | USEJCE | SunJSSE version 1.41>
      <Dec 10, 2003 1:32:36 PM EST> <Debug> <TLS> <000000> <MD2withRSA | java.security.Signature
      | USEJCE | SunJSSE version 1.41>
      <Dec 10, 2003 1:32:36 PM EST> <Debug> <TLS> <000000> <SHA | java.security.MessageDigest
      | USEJCE | SUN version 1.2>
      <Dec 10, 2003 1:32:36 PM EST> <Debug> <TLS> <000000> <MD5 | java.security.MessageDigest
      | USEJCE | SUN version 1.2>
      <Dec 10, 2003 1:32:36 PM EST> <Debug> <TLS> <000000> <NullMac | javax.crypto.Mac
      | USEHARDWIRED>
      <Dec 10, 2003 1:32:36 PM EST> <Debug> <TLS> <000000> <HmacSHA1 | javax.crypto.Mac
      | USEHARDWIRED>
      <Dec 10, 2003 1:32:36 PM EST> <Debug> <TLS> <000000> <HmacMD5 | javax.crypto.Mac
      | USEHARDWIRED>
      <Dec 10, 2003 1:32:36 PM EST> <Debug> <TLS> <000000> <DES/CBC/NoPadding | javax.crypto.Cipher
      | USEHARDWIRED>
      <Dec 10, 2003 1:32:36 PM EST> <Debug> <TLS> <000000> <DESede/CBC/NoPadding | javax.crypto.Cipher
      | USEHARDWIRED>
      <Dec 10, 2003 1:32:36 PM EST> <Debug> <TLS> <000000> <DESede/ECB/NoPadding | javax.crypto.Cipher
      | USEHARDWIRED>
      <Dec 10, 2003 1:32:36 PM EST> <Debug> <TLS> <000000> <RC4 | javax.crypto.Cipher
      | USEHARDWIRED>
      <Dec 10, 2003 1:32:36 PM EST> <Debug> <TLS> <000000> <RSA/ECB/PKCS1Padding | javax.crypto.Cipher
      | USEHARDWIRED>
      <Dec 10, 2003 1:32:36 PM EST> <Debug> <TLS> <000000> <RSA/ECB/NoPadding | javax.crypto.Cipher
      | USEHARDWIRED>
      <Dec 10, 2003 1:32:36 PM EST> <Debug> <TLS> <000000> <Anonymous | javax.crypto.KeyAgreement
      | USEHARDWIRED>
      <Dec 10, 2003 1:32:36 PM EST> <Debug> <TLS> <000000> <ECDH | javax.crypto.KeyAgreement
      | USEHARDWIRED>
      <Dec 10, 2003 1:32:36 PM EST> <Debug> <TLS> <000000> <DiffieHellman | javax.crypto.KeyAgreement
      | USEHARDWIRED>
      <Dec 10, 2003 1:32:36 PM EST> <Debug> <TLS> <000000> <RSA | javax.crypto.KeyAgreement
      | USEHARDWIRED>
      <Dec 10, 2003 1:32:36 PM EST> <Debug> <TLS> <000000> <JCE used for some SSL =
      true>
      <Dec 10, 2003 1:32:36 PM EST> <Debug> <TLS> <000000> <jsafeJCE used for some SSL
      = false>
      <Dec 10, 2003 1:32:36 PM EST> <Debug> <TLS> <000000> < provider[0] - SUN>
      <Dec 10, 2003 1:32:36 PM EST> <Debug> <TLS> <000000> < SUN (DSA key/parameter
      generation; DSA signing; SHA-1, MD5 digests; SecureRandom; X.509 certificates;
      JKS keystore; PKIX CertPathValidator; PKIX CertPathBuilder; LDAP, Collection CertStores)>

      <Dec 10, 2003 1:32:36 PM EST> <Debug> <TLS> <000000> < provider[1] - SunJSSE>

      <Dec 10, 2003 1:32:36 PM EST> <Debug> <TLS> <000000> < Sun JSSE provider(implements
      RSA Signatures, PKCS12, SunX509 key/trust factories, SSLv3, TLSv1)>
      <Dec 10, 2003 1:32:36 PM EST> <Debug> <TLS> <000000> < provider[2] - SunRsaSign>

      <Dec 10, 2003 1:32:36 PM EST> <Debug> <TLS> <000000> < SUN's provider
      for RSA signatures>
      <Dec 10, 2003 1:32:36 PM EST> <Debug> <TLS> <000000> < provider[3] - SunJCE>

      <Dec 10, 2003 1:32:36 PM EST> <Debug> <TLS> <000000> < SunJCE Provider
      (implements DES, Triple DES, Blowfish, PBE, Diffie-Hellman, HMAC-MD5, HMAC-SHA1)>

      <Dec 10, 2003 1:32:36 PM EST> <Debug> <TLS> <000000> < provider[4] - SunJGSS>

      <Dec 10, 2003 1:32:36 PM EST> <Debug> <TLS> <000000> < Sun (Kerberos
      v5)>
      <Dec 10, 2003 1:32:36 PM EST> <Debug> <TLS> <000000> <Crypto to use for RSA is
      USEHARDWIRED>
      <Dec 10, 2003 1:32:36 PM EST> <Debug> <TLS> <000000> <usingJCE = true>
      <Dec 10, 2003 1:32:36 PM EST> <Debug> <TLS> <000000> <usingJsafeJCE = false>
      <Dec 10, 2003 1:32:36 PM EST> <Debug> <TLS> <000000> <Algorithm DES/CBC/NoPadding
      is not configured for a specific provider>
      <Dec 10, 2003 1:32:37 PM EST> <Debug> <TLS> <000000> <SSL/Export license found>

      <Dec 10, 2003 1:32:37 PM EST> <Debug> <TLS> <000000> <Not in server, Certicom
      SSL license found>
      <Dec 10, 2003 1:32:38 PM EST> <Debug> <TLS> <000000> <Weblogic license is export
      limited>
      <Dec 10, 2003 1:32:38 PM EST> <Debug> <TLS> <000000> <SSLIOContextTable.findContext(is):
      3808966>
      <Dec 10, 2003 1:32:39 PM EST> <Debug> <TLS> <000000> <write SSL_20_RECORD>
      <Dec 10, 2003 1:32:39 PM EST> <Debug> <TLS> <000000> <18945918 readRecord()>
      <Dec 10, 2003 1:32:39 PM EST> <Debug> <TLS> <000000> <18945918 SSL3/TLS MAC>
      <Dec 10, 2003 1:32:39 PM EST> <Debug> <TLS> <000000> <18945918 received HANDSHAKE>

      <Dec 10, 2003 1:32:39 PM EST> <Debug> <TLS> <000000> <HANDSHAKEMESSAGE: ServerHello>

      <Dec 10, 2003 1:32:39 PM EST> <Debug> <TLS> <000000> <HANDSHAKEMESSAGE: Certificate>

      <Dec 10, 2003 1:32:39 PM EST> <Debug> <TLS> <000000> <Exception during handshake,
      stack trace follows
      java.lang.NullPointerException
           at com.certicom.tls.record.handshake.ClientStateReceivedServerHello.handle(Unknown
      Source)
           at com.certicom.tls.record.handshake.HandshakeHandler.handleHandshakeMessage(Unknown
      Source)
           at com.certicom.tls.record.handshake.HandshakeHandler.handleHandshakeMessages(Unknown
      Source)
           at com.certicom.tls.record.ReadHandler.interpretContent(Unknown Source)
           at com.certicom.tls.record.ReadHandler.readRecord(Unknown Source)
           at com.certicom.tls.record.ReadHandler.readUntilHandshakeComplete(Unknown Source)
           at com.certicom.tls.interfaceimpl.TLSConnectionImpl.completeHandshake(Unknown
      Source)
           at com.certicom.tls.record.WriteHandler.write(Unknown Source)
           at java.io.BufferedOutputStream.flushBuffer(BufferedOutputStream.java:69)
           at java.io.BufferedOutputStream.write(BufferedOutputStream.java:108)
           at java.io.FilterOutputStream.write(FilterOutputStream.java:80)
           at weblogic.webservice.binding.soap.HttpClientBinding.writeToStream(HttpClientBinding.java:384)
           at weblogic.webservice.binding.soap.HttpClientBinding.send(HttpClientBinding.java:180)
           at weblogic.webservice.core.handler.ClientHandler.handleRequest(ClientHandler.java:34)
           at weblogic.webservice.core.HandlerChainImpl.handleRequest(HandlerChainImpl.java:125)
           at weblogic.webservice.core.ClientDispatcher.send(ClientDispatcher.java:205)
           at weblogic.webservice.core.ClientDispatcher.dispatch(ClientDispatcher.java:130)
           at weblogic.webservice.core.DefaultOperation.invoke(DefaultOperation.java:430)
           at weblogic.webservice.core.DefaultOperation.invoke(DefaultOperation.java:416)
           at weblogic.webservice.core.rpc.StubImpl._invoke(StubImpl.java:275)
           at weblogic.webservice.core.rpc.StubImpl._invoke(StubImpl.java:250)
           at myapp.myservice.client.AuthenticateSoapPort_Stub.authenticateUser(AuthenticateSoapPort_Stub.java:26)
           at test.Test.main(Test.java:113)
      >
      <Dec 10, 2003 1:32:39 PM EST> <Debug> <TLS> <000000> <NEW ALERT: com.certicom.tls.record.alert.Alert@1f01a29
      Severity: 2 Type: 40
      java.lang.Throwable: Stack trace
           at weblogic.security.utils.SSLSetup.debug(SSLSetup.java:267)
           at com.certicom.tls.record.alert.Alert.<init>(Unknown Source)
           at com.certicom.tls.record.handshake.HandshakeHandler.fireAlert(Unknown Source)
           at com.certicom.tls.record.handshake.HandshakeHandler.handleHandshakeMessage(Unknown
      Source)
           at com.certicom.tls.record.handshake.HandshakeHandler.handleHandshakeMessages(Unknown
      Source)
           at com.certicom.tls.record.ReadHandler.interpretContent(Unknown Source)
           at com.certicom.tls.record.ReadHandler.readRecord(Unknown Source)
           at com.certicom.tls.record.ReadHandler.readUntilHandshakeComplete(Unknown Source)
           at com.certicom.tls.interfaceimpl.TLSConnectionImpl.completeHandshake(Unknown
      Source)
           at com.certicom.tls.record.WriteHandler.write(Unknown Source)
           at java.io.BufferedOutputStream.flushBuffer(BufferedOutputStream.java:69)
           at java.io.BufferedOutputStream.write(BufferedOutputStream.java:108)
           at java.io.FilterOutputStream.write(FilterOutputStream.java:80)
           at weblogic.webservice.binding.soap.HttpClientBinding.writeToStream(HttpClientBinding.java:384)
           at weblogic.webservice.binding.soap.HttpClientBinding.send(HttpClientBinding.java:180)
           at weblogic.webservice.core.handler.ClientHandler.handleRequest(ClientHandler.java:34)
           at weblogic.webservice.core.HandlerChainImpl.handleRequest(HandlerChainImpl.java:125)
           at weblogic.webservice.core.ClientDispatcher.send(ClientDispatcher.java:205)
           at weblogic.webservice.core.ClientDispatcher.dispatch(ClientDispatcher.java:130)
           at weblogic.webservice.core.DefaultOperation.invoke(DefaultOperation.java:430)
           at weblogic.webservice.core.DefaultOperation.invoke(DefaultOperation.java:416)
           at weblogic.webservice.core.rpc.StubImpl._invoke(StubImpl.java:275)
           at weblogic.webservice.core.rpc.StubImpl._invoke(StubImpl.java:250)
           at myapp.myservice.client.AuthenticateSoapPort_Stub.authenticateUser(AuthenticateSoapPort_Stub.java:26)
           at test.Test.main(Test.java:113)
      >
      <Dec 10, 2003 1:32:39 PM EST> <Debug> <TLS> <000000> <write ALERT offset = 0 length
      = 2>
      <Dec 10, 2003 1:32:39 PM EST> <Debug> <TLS> <000000> <close(): 18945918>
      <Dec 10, 2003 1:32:39 PM EST> <Debug> <TLS> <000000> <close(): 18945918>
      <Dec 10, 2003 1:32:39 PM EST> <Info> <webservice> <BEA-220048> <A exception was
      thrown from the client handler sending a JAXM message.>
      <Dec 10, 2003 1:32:39 PM EST> <Info> <webservice> <BEA-220034> <A stack trace
      associated with message 220048 follows:

      javax.net.ssl.SSLHandshakeException: FATAL Alert:HANDSHAKE_FAILURE - The handshake
      handler was unable to negotiate an acceptable set of security parameters.
           at com.certicom.tls.interfaceimpl.TLSConnectionImpl.fireException(Unknown Source)
           at com.certicom.tls.interfaceimpl.TLSConnectionImpl.fireAlertSent(Unknown Source)
           at com.certicom.tls.record.handshake.HandshakeHandler.fireAlert(Unknown Source)
           at com.certicom.tls.record.handshake.HandshakeHandler.fireAlert(Unknown Source)
           at com.certicom.tls.record.handshake.HandshakeHandler.handleHandshakeMessage(Unknown
      Source)
           at com.certicom.tls.record.handshake.HandshakeHandler.handleHandshakeMessages(Unknown
      Source)
           at com.certicom.tls.record.ReadHandler.interpretContent(Unknown Source)
           at com.certicom.tls.record.ReadHandler.readRecord(Unknown Source)
           at com.certicom.tls.record.ReadHandler.readUntilHandshakeComplete(Unknown Source)
           at com.certicom.tls.interfaceimpl.TLSConnectionImpl.completeHandshake(Unknown
      Source)
           at com.certicom.tls.record.WriteHandler.write(Unknown Source)
           at java.io.BufferedOutputStream.flushBuffer(BufferedOutputStream.java:69)
           at java.io.BufferedOutputStream.write(BufferedOutputStream.java:108)
           at java.io.FilterOutputStream.write(FilterOutputStream.java:80)
           at weblogic.webservice.binding.soap.HttpClientBinding.writeToStream(HttpClientBinding.java:384)
           at weblogic.webservice.binding.soap.HttpClientBinding.send(HttpClientBinding.java:180)
           at weblogic.webservice.core.handler.ClientHandler.handleRequest(ClientHandler.java:34)
           at weblogic.webservice.core.HandlerChainImpl.handleRequest(HandlerChainImpl.java:125)
           at weblogic.webservice.core.ClientDispatcher.send(ClientDispatcher.java:205)
           at weblogic.webservice.core.ClientDispatcher.dispatch(ClientDispatcher.java:130)
           at weblogic.webservice.core.DefaultOperation.invoke(DefaultOperation.java:430)
           at weblogic.webservice.core.DefaultOperation.invoke(DefaultOperation.java:416)
           at weblogic.webservice.core.rpc.StubImpl._invoke(StubImpl.java:275)
           at weblogic.webservice.core.rpc.StubImpl._invoke(StubImpl.java:250)
           at myapp.myservice.client.AuthenticateSoapPort_Stub.authenticateUser(AuthenticateSoapPort_Stub.java:26)
           at test.Test.main(Test.java:113)
      >
      <Dec 10, 2003 1:32:39 PM EST> <Info> <webservice> <BEA-220024> <Handler weblogic.webservice.core.handler.ClientHandler
      threw an exception from its handleRequest method. The exception was:
      javax.xml.rpc.JAXRPCException: Failed to send request:javax.net.ssl.SSLHandshakeException:
      FATAL Alert:HANDSHAKE_FAILURE - The handshake handler was unable to negotiate
      an acceptable set of security parameters..>
      java.rmi.RemoteException: SOAP Fault:javax.xml.rpc.soap.SOAPFaultException: FATAL
      Alert:HANDSHAKE_FAILURE - The handshake handler was unable to negotiate an acceptable
      set of security parameters.; nested exception is:
           javax.xml.rpc.soap.SOAPFaultException: FATAL Alert:HANDSHAKE_FAILURE - The handshake
      handler was unable to negotiate an acceptable set of security parameters.
           at myapp.myservice.client.AuthenticateSoapPort_Stub.authenticateUser(AuthenticateSoapPort_Stub.java:29)
           at test.Test.main(Test.java:113)
      Caused by: javax.xml.rpc.soap.SOAPFaultException: FATAL Alert:HANDSHAKE_FAILURE
      - The handshake handler was unable to negotiate an acceptable set of security
      parameters.
           at weblogic.webservice.core.ClientDispatcher.receive(ClientDispatcher.java:270)
           at weblogic.webservice.core.ClientDispatcher.dispatch(ClientDispatcher.java:131)
           at weblogic.webservice.core.DefaultOperation.invoke(DefaultOperation.java:430)
           at weblogic.webservice.core.DefaultOperation.invoke(DefaultOperation.java:416)
           at weblogic.webservice.core.rpc.StubImpl._invoke(StubImpl.java:275)
           at weblogic.webservice.core.rpc.StubImpl._invoke(StubImpl.java:250)
           at myapp.myservice.client.AuthenticateSoapPort_Stub.authenticateUser(AuthenticateSoapPort_Stub.java:26)
           ... 1 more

        • 1. Re: a different handshake exception
          3004
          Hello Weblogic User,

          This looks like a bug. Please contact our outstanding support team
          (http://support.bea.com or support@bea.com) with your trace and
          reference CR112756

          Thanks,
          Bruce



          weblogic user wrote:
          >
          Hello,

          i am experiencing a different type of handshake exception than i've seen other
          people report lately. I am trying to access a web service running on a remote
          system using https. I've created a keystore and imported the cert (it is not a
          self-signed cert, i can hit the page with IE with no problems) and it didn't help.
          I really don't know what's going on here. Any ideas?

          The error code given is Severity: 2 Type: 40.

          here is the ssl debug output:

          <Dec 10, 2003 1:32:32 PM EST> <Debug> <TLS> <000000> <No JCE support for algorithm
          ECDSA, class java.security.Signature>
          <Dec 10, 2003 1:32:33 PM EST> <Debug> <TLS> <000000> <JCE support for algorithm
          SHA1withDSA, class sun.security.provider.DSA using provider SUN version 1.2>
          <Dec 10, 2003 1:32:33 PM EST> <Debug> <TLS> <000000> <JCE support for algorithm
          MD5withRSA, class java.security.Signature$Delegate using provider SunJSSE version
          1.41>
          <Dec 10, 2003 1:32:33 PM EST> <Debug> <TLS> <000000> <JCE support for algorithm
          SHA1withRSA, class java.security.Signature$Delegate using provider SunJSSE version
          1.41>
          <Dec 10, 2003 1:32:33 PM EST> <Debug> <TLS> <000000> <JCE support for algorithm
          MD2withRSA, class java.security.Signature$Delegate using provider SunJSSE version
          1.41>
          <Dec 10, 2003 1:32:33 PM EST> <Debug> <TLS> <000000> <JCE support for algorithm
          SHA, class java.security.MessageDigest$Delegate using provider SUN version 1.2>

          <Dec 10, 2003 1:32:33 PM EST> <Debug> <TLS> <000000> <JCE support for algorithm
          MD5, class java.security.MessageDigest$Delegate using provider SUN version 1.2>

          <Dec 10, 2003 1:32:36 PM EST> <Debug> <TLS> <000000> <No JCE support for algorithm
          NullMac, class javax.crypto.Mac>
          <Dec 10, 2003 1:32:36 PM EST> <Debug> <TLS> <000000> <No JCE support for algorithm
          HmacSHA1, class javax.crypto.Mac>
          <Dec 10, 2003 1:32:36 PM EST> <Debug> <TLS> <000000> <No JCE support for algorithm
          HmacMD5, class javax.crypto.Mac>
          <Dec 10, 2003 1:32:36 PM EST> <Debug> <TLS> <000000> <No JCE support for algorithm
          DES/CBC/NoPadding, class javax.crypto.Cipher>
          <Dec 10, 2003 1:32:36 PM EST> <Debug> <TLS> <000000> <No JCE support for algorithm
          DESede/CBC/NoPadding, class javax.crypto.Cipher>
          <Dec 10, 2003 1:32:36 PM EST> <Debug> <TLS> <000000> <No JCE support for algorithm
          DESede/ECB/NoPadding, class javax.crypto.Cipher>
          <Dec 10, 2003 1:32:36 PM EST> <Debug> <TLS> <000000> <No JCE support for algorithm
          RC4, class javax.crypto.Cipher>
          <Dec 10, 2003 1:32:36 PM EST> <Debug> <TLS> <000000> <No JCE support for algorithm
          RSA/ECB/PKCS1Padding, class javax.crypto.Cipher>
          <Dec 10, 2003 1:32:36 PM EST> <Debug> <TLS> <000000> <No JCE support for algorithm
          RSA/ECB/NoPadding, class javax.crypto.Cipher>
          <Dec 10, 2003 1:32:36 PM EST> <Debug> <TLS> <000000> <No JCE support for algorithm
          Anonymous, class javax.crypto.KeyAgreement>
          <Dec 10, 2003 1:32:36 PM EST> <Debug> <TLS> <000000> <No JCE support for algorithm
          ECDH, class javax.crypto.KeyAgreement>
          <Dec 10, 2003 1:32:36 PM EST> <Debug> <TLS> <000000> <No JCE support for algorithm
          DiffieHellman, class javax.crypto.KeyAgreement>
          <Dec 10, 2003 1:32:36 PM EST> <Debug> <TLS> <000000> <No JCE support for algorithm
          RSA, class javax.crypto.KeyAgreement>
          <Dec 10, 2003 1:32:36 PM EST> <Debug> <TLS> <000000> <ECDSA | java.security.Signature
          | USEHARDWIRED>
          <Dec 10, 2003 1:32:36 PM EST> <Debug> <TLS> <000000> <SHA1withDSA | java.security.Signature
          | USEJCE | SUN version 1.2>
          <Dec 10, 2003 1:32:36 PM EST> <Debug> <TLS> <000000> <MD5withRSA | java.security.Signature
          | USEJCE | SunJSSE version 1.41>
          <Dec 10, 2003 1:32:36 PM EST> <Debug> <TLS> <000000> <SHA1withRSA | java.security.Signature
          | USEJCE | SunJSSE version 1.41>
          <Dec 10, 2003 1:32:36 PM EST> <Debug> <TLS> <000000> <MD2withRSA | java.security.Signature
          | USEJCE | SunJSSE version 1.41>
          <Dec 10, 2003 1:32:36 PM EST> <Debug> <TLS> <000000> <SHA | java.security.MessageDigest
          | USEJCE | SUN version 1.2>
          <Dec 10, 2003 1:32:36 PM EST> <Debug> <TLS> <000000> <MD5 | java.security.MessageDigest
          | USEJCE | SUN version 1.2>
          <Dec 10, 2003 1:32:36 PM EST> <Debug> <TLS> <000000> <NullMac | javax.crypto.Mac
          | USEHARDWIRED>
          <Dec 10, 2003 1:32:36 PM EST> <Debug> <TLS> <000000> <HmacSHA1 | javax.crypto.Mac
          | USEHARDWIRED>
          <Dec 10, 2003 1:32:36 PM EST> <Debug> <TLS> <000000> <HmacMD5 | javax.crypto.Mac
          | USEHARDWIRED>
          <Dec 10, 2003 1:32:36 PM EST> <Debug> <TLS> <000000> <DES/CBC/NoPadding | javax.crypto.Cipher
          | USEHARDWIRED>
          <Dec 10, 2003 1:32:36 PM EST> <Debug> <TLS> <000000> <DESede/CBC/NoPadding | javax.crypto.Cipher
          | USEHARDWIRED>
          <Dec 10, 2003 1:32:36 PM EST> <Debug> <TLS> <000000> <DESede/ECB/NoPadding | javax.crypto.Cipher
          | USEHARDWIRED>
          <Dec 10, 2003 1:32:36 PM EST> <Debug> <TLS> <000000> <RC4 | javax.crypto.Cipher
          | USEHARDWIRED>
          <Dec 10, 2003 1:32:36 PM EST> <Debug> <TLS> <000000> <RSA/ECB/PKCS1Padding | javax.crypto.Cipher
          | USEHARDWIRED>
          <Dec 10, 2003 1:32:36 PM EST> <Debug> <TLS> <000000> <RSA/ECB/NoPadding | javax.crypto.Cipher
          | USEHARDWIRED>
          <Dec 10, 2003 1:32:36 PM EST> <Debug> <TLS> <000000> <Anonymous | javax.crypto.KeyAgreement
          | USEHARDWIRED>
          <Dec 10, 2003 1:32:36 PM EST> <Debug> <TLS> <000000> <ECDH | javax.crypto.KeyAgreement
          | USEHARDWIRED>
          <Dec 10, 2003 1:32:36 PM EST> <Debug> <TLS> <000000> <DiffieHellman | javax.crypto.KeyAgreement
          | USEHARDWIRED>
          <Dec 10, 2003 1:32:36 PM EST> <Debug> <TLS> <000000> <RSA | javax.crypto.KeyAgreement
          | USEHARDWIRED>
          <Dec 10, 2003 1:32:36 PM EST> <Debug> <TLS> <000000> <JCE used for some SSL =
          true>
          <Dec 10, 2003 1:32:36 PM EST> <Debug> <TLS> <000000> <jsafeJCE used for some SSL
          = false>
          <Dec 10, 2003 1:32:36 PM EST> <Debug> <TLS> <000000> < provider[0] - SUN>
          <Dec 10, 2003 1:32:36 PM EST> <Debug> <TLS> <000000> < SUN (DSA key/parameter
          generation; DSA signing; SHA-1, MD5 digests; SecureRandom; X.509 certificates;
          JKS keystore; PKIX CertPathValidator; PKIX CertPathBuilder; LDAP, Collection CertStores)>

          <Dec 10, 2003 1:32:36 PM EST> <Debug> <TLS> <000000> < provider[1] - SunJSSE>

          <Dec 10, 2003 1:32:36 PM EST> <Debug> <TLS> <000000> < Sun JSSE provider(implements
          RSA Signatures, PKCS12, SunX509 key/trust factories, SSLv3, TLSv1)>
          <Dec 10, 2003 1:32:36 PM EST> <Debug> <TLS> <000000> < provider[2] - SunRsaSign>

          <Dec 10, 2003 1:32:36 PM EST> <Debug> <TLS> <000000> < SUN's provider
          for RSA signatures>
          <Dec 10, 2003 1:32:36 PM EST> <Debug> <TLS> <000000> < provider[3] - SunJCE>

          <Dec 10, 2003 1:32:36 PM EST> <Debug> <TLS> <000000> < SunJCE Provider
          (implements DES, Triple DES, Blowfish, PBE, Diffie-Hellman, HMAC-MD5, HMAC-SHA1)>

          <Dec 10, 2003 1:32:36 PM EST> <Debug> <TLS> <000000> < provider[4] - SunJGSS>

          <Dec 10, 2003 1:32:36 PM EST> <Debug> <TLS> <000000> < Sun (Kerberos
          v5)>
          <Dec 10, 2003 1:32:36 PM EST> <Debug> <TLS> <000000> <Crypto to use for RSA is
          USEHARDWIRED>
          <Dec 10, 2003 1:32:36 PM EST> <Debug> <TLS> <000000> <usingJCE = true>
          <Dec 10, 2003 1:32:36 PM EST> <Debug> <TLS> <000000> <usingJsafeJCE = false>
          <Dec 10, 2003 1:32:36 PM EST> <Debug> <TLS> <000000> <Algorithm DES/CBC/NoPadding
          is not configured for a specific provider>
          <Dec 10, 2003 1:32:37 PM EST> <Debug> <TLS> <000000> <SSL/Export license found>

          <Dec 10, 2003 1:32:37 PM EST> <Debug> <TLS> <000000> <Not in server, Certicom
          SSL license found>
          <Dec 10, 2003 1:32:38 PM EST> <Debug> <TLS> <000000> <Weblogic license is export
          limited>
          <Dec 10, 2003 1:32:38 PM EST> <Debug> <TLS> <000000> <SSLIOContextTable.findContext(is):
          3808966>
          <Dec 10, 2003 1:32:39 PM EST> <Debug> <TLS> <000000> <write SSL_20_RECORD>
          <Dec 10, 2003 1:32:39 PM EST> <Debug> <TLS> <000000> <18945918 readRecord()>
          <Dec 10, 2003 1:32:39 PM EST> <Debug> <TLS> <000000> <18945918 SSL3/TLS MAC>
          <Dec 10, 2003 1:32:39 PM EST> <Debug> <TLS> <000000> <18945918 received HANDSHAKE>

          <Dec 10, 2003 1:32:39 PM EST> <Debug> <TLS> <000000> <HANDSHAKEMESSAGE: ServerHello>

          <Dec 10, 2003 1:32:39 PM EST> <Debug> <TLS> <000000> <HANDSHAKEMESSAGE: Certificate>

          <Dec 10, 2003 1:32:39 PM EST> <Debug> <TLS> <000000> <Exception during handshake,
          stack trace follows
          java.lang.NullPointerException
          at com.certicom.tls.record.handshake.ClientStateReceivedServerHello.handle(Unknown
          Source)
          at com.certicom.tls.record.handshake.HandshakeHandler.handleHandshakeMessage(Unknown
          Source)
          at com.certicom.tls.record.handshake.HandshakeHandler.handleHandshakeMessages(Unknown
          Source)
          at com.certicom.tls.record.ReadHandler.interpretContent(Unknown Source)
          at com.certicom.tls.record.ReadHandler.readRecord(Unknown Source)
          at com.certicom.tls.record.ReadHandler.readUntilHandshakeComplete(Unknown Source)
          at com.certicom.tls.interfaceimpl.TLSConnectionImpl.completeHandshake(Unknown
          Source)
          at com.certicom.tls.record.WriteHandler.write(Unknown Source)
          at java.io.BufferedOutputStream.flushBuffer(BufferedOutputStream.java:69)
          at java.io.BufferedOutputStream.write(BufferedOutputStream.java:108)
          at java.io.FilterOutputStream.write(FilterOutputStream.java:80)
          at weblogic.webservice.binding.soap.HttpClientBinding.writeToStream(HttpClientBinding.java:384)
          at weblogic.webservice.binding.soap.HttpClientBinding.send(HttpClientBinding.java:180)
          at weblogic.webservice.core.handler.ClientHandler.handleRequest(ClientHandler.java:34)
          at weblogic.webservice.core.HandlerChainImpl.handleRequest(HandlerChainImpl.java:125)
          at weblogic.webservice.core.ClientDispatcher.send(ClientDispatcher.java:205)
          at weblogic.webservice.core.ClientDispatcher.dispatch(ClientDispatcher.java:130)
          at weblogic.webservice.core.DefaultOperation.invoke(DefaultOperation.java:430)
          at weblogic.webservice.core.DefaultOperation.invoke(DefaultOperation.java:416)
          at weblogic.webservice.core.rpc.StubImpl._invoke(StubImpl.java:275)
          at weblogic.webservice.core.rpc.StubImpl._invoke(StubImpl.java:250)
          at myapp.myservice.client.AuthenticateSoapPort_Stub.authenticateUser(AuthenticateSoapPort_Stub.java:26)
          at test.Test.main(Test.java:113)
          >
          <Dec 10, 2003 1:32:39 PM EST> <Debug> <TLS> <000000> <NEW ALERT: com.certicom.tls.record.alert.Alert@1f01a29
          Severity: 2 Type: 40
          java.lang.Throwable: Stack trace
          at weblogic.security.utils.SSLSetup.debug(SSLSetup.java:267)
          at com.certicom.tls.record.alert.Alert.<init>(Unknown Source)
          at com.certicom.tls.record.handshake.HandshakeHandler.fireAlert(Unknown Source)
          at com.certicom.tls.record.handshake.HandshakeHandler.handleHandshakeMessage(Unknown
          Source)
          at com.certicom.tls.record.handshake.HandshakeHandler.handleHandshakeMessages(Unknown
          Source)
          at com.certicom.tls.record.ReadHandler.interpretContent(Unknown Source)
          at com.certicom.tls.record.ReadHandler.readRecord(Unknown Source)
          at com.certicom.tls.record.ReadHandler.readUntilHandshakeComplete(Unknown Source)
          at com.certicom.tls.interfaceimpl.TLSConnectionImpl.completeHandshake(Unknown
          Source)
          at com.certicom.tls.record.WriteHandler.write(Unknown Source)
          at java.io.BufferedOutputStream.flushBuffer(BufferedOutputStream.java:69)
          at java.io.BufferedOutputStream.write(BufferedOutputStream.java:108)
          at java.io.FilterOutputStream.write(FilterOutputStream.java:80)
          at weblogic.webservice.binding.soap.HttpClientBinding.writeToStream(HttpClientBinding.java:384)
          at weblogic.webservice.binding.soap.HttpClientBinding.send(HttpClientBinding.java:180)
          at weblogic.webservice.core.handler.ClientHandler.handleRequest(ClientHandler.java:34)
          at weblogic.webservice.core.HandlerChainImpl.handleRequest(HandlerChainImpl.java:125)
          at weblogic.webservice.core.ClientDispatcher.send(ClientDispatcher.java:205)
          at weblogic.webservice.core.ClientDispatcher.dispatch(ClientDispatcher.java:130)
          at weblogic.webservice.core.DefaultOperation.invoke(DefaultOperation.java:430)
          at weblogic.webservice.core.DefaultOperation.invoke(DefaultOperation.java:416)
          at weblogic.webservice.core.rpc.StubImpl._invoke(StubImpl.java:275)
          at weblogic.webservice.core.rpc.StubImpl._invoke(StubImpl.java:250)
          at myapp.myservice.client.AuthenticateSoapPort_Stub.authenticateUser(AuthenticateSoapPort_Stub.java:26)
          at test.Test.main(Test.java:113)
          >
          <Dec 10, 2003 1:32:39 PM EST> <Debug> <TLS> <000000> <write ALERT offset = 0 length
          = 2>
          <Dec 10, 2003 1:32:39 PM EST> <Debug> <TLS> <000000> <close(): 18945918>
          <Dec 10, 2003 1:32:39 PM EST> <Debug> <TLS> <000000> <close(): 18945918>
          <Dec 10, 2003 1:32:39 PM EST> <Info> <webservice> <BEA-220048> <A exception was
          thrown from the client handler sending a JAXM message.>
          <Dec 10, 2003 1:32:39 PM EST> <Info> <webservice> <BEA-220034> <A stack trace
          associated with message 220048 follows:

          javax.net.ssl.SSLHandshakeException: FATAL Alert:HANDSHAKE_FAILURE - The handshake
          handler was unable to negotiate an acceptable set of security parameters.
          at com.certicom.tls.interfaceimpl.TLSConnectionImpl.fireException(Unknown Source)
          at com.certicom.tls.interfaceimpl.TLSConnectionImpl.fireAlertSent(Unknown Source)
          at com.certicom.tls.record.handshake.HandshakeHandler.fireAlert(Unknown Source)
          at com.certicom.tls.record.handshake.HandshakeHandler.fireAlert(Unknown Source)
          at com.certicom.tls.record.handshake.HandshakeHandler.handleHandshakeMessage(Unknown
          Source)
          at com.certicom.tls.record.handshake.HandshakeHandler.handleHandshakeMessages(Unknown
          Source)
          at com.certicom.tls.record.ReadHandler.interpretContent(Unknown Source)
          at com.certicom.tls.record.ReadHandler.readRecord(Unknown Source)
          at com.certicom.tls.record.ReadHandler.readUntilHandshakeComplete(Unknown Source)
          at com.certicom.tls.interfaceimpl.TLSConnectionImpl.completeHandshake(Unknown
          Source)
          at com.certicom.tls.record.WriteHandler.write(Unknown Source)
          at java.io.BufferedOutputStream.flushBuffer(BufferedOutputStream.java:69)
          at java.io.BufferedOutputStream.write(BufferedOutputStream.java:108)
          at java.io.FilterOutputStream.write(FilterOutputStream.java:80)
          at weblogic.webservice.binding.soap.HttpClientBinding.writeToStream(HttpClientBinding.java:384)
          at weblogic.webservice.binding.soap.HttpClientBinding.send(HttpClientBinding.java:180)
          at weblogic.webservice.core.handler.ClientHandler.handleRequest(ClientHandler.java:34)
          at weblogic.webservice.core.HandlerChainImpl.handleRequest(HandlerChainImpl.java:125)
          at weblogic.webservice.core.ClientDispatcher.send(ClientDispatcher.java:205)
          at weblogic.webservice.core.ClientDispatcher.dispatch(ClientDispatcher.java:130)
          at weblogic.webservice.core.DefaultOperation.invoke(DefaultOperation.java:430)
          at weblogic.webservice.core.DefaultOperation.invoke(DefaultOperation.java:416)
          at weblogic.webservice.core.rpc.StubImpl._invoke(StubImpl.java:275)
          at weblogic.webservice.core.rpc.StubImpl._invoke(StubImpl.java:250)
          at myapp.myservice.client.AuthenticateSoapPort_Stub.authenticateUser(AuthenticateSoapPort_Stub.java:26)
          at test.Test.main(Test.java:113)
          >
          <Dec 10, 2003 1:32:39 PM EST> <Info> <webservice> <BEA-220024> <Handler weblogic.webservice.core.handler.ClientHandler
          threw an exception from its handleRequest method. The exception was:
          javax.xml.rpc.JAXRPCException: Failed to send request:javax.net.ssl.SSLHandshakeException:
          FATAL Alert:HANDSHAKE_FAILURE - The handshake handler was unable to negotiate
          an acceptable set of security parameters..>
          java.rmi.RemoteException: SOAP Fault:javax.xml.rpc.soap.SOAPFaultException: FATAL
          Alert:HANDSHAKE_FAILURE - The handshake handler was unable to negotiate an acceptable
          set of security parameters.; nested exception is:
          javax.xml.rpc.soap.SOAPFaultException: FATAL Alert:HANDSHAKE_FAILURE - The handshake
          handler was unable to negotiate an acceptable set of security parameters.
          at myapp.myservice.client.AuthenticateSoapPort_Stub.authenticateUser(AuthenticateSoapPort_Stub.java:29)
          at test.Test.main(Test.java:113)
          Caused by: javax.xml.rpc.soap.SOAPFaultException: FATAL Alert:HANDSHAKE_FAILURE
          - The handshake handler was unable to negotiate an acceptable set of security
          parameters.
          at weblogic.webservice.core.ClientDispatcher.receive(ClientDispatcher.java:270)
          at weblogic.webservice.core.ClientDispatcher.dispatch(ClientDispatcher.java:131)
          at weblogic.webservice.core.DefaultOperation.invoke(DefaultOperation.java:430)
          at weblogic.webservice.core.DefaultOperation.invoke(DefaultOperation.java:416)
          at weblogic.webservice.core.rpc.StubImpl._invoke(StubImpl.java:275)
          at weblogic.webservice.core.rpc.StubImpl._invoke(StubImpl.java:250)
          at myapp.myservice.client.AuthenticateSoapPort_Stub.authenticateUser(AuthenticateSoapPort_Stub.java:26)
          ... 1 more
          • 2. Re: a different handshake exception
            666705
            What happened to the CR112756 ???
            Is this fixed and patch available or any alternative to overcome this problem.

            Thanks
            Jay