Re: Exception while modifying for Open LDAP 2.3 via TLS

["Narayana Murthy Pedapudi" <p.narayanamurthy@gmail.com>]

On Thu, Mar 13, 2008 at 11:01 AM, Narayana Murthy Pedapudi <p.narayanamurthy@gmail.com> wrote:

    Please note that I have not used TLSVerifyClient property at all....
    # moduleload    back_shell.la

    TLSCipherSuite ALL:!ADH:RC4+RSA:+HIGH:+MEDIUM
    :+LOW:+SSLv2:+SSLv3:+EXP
    TLSCACertificateFile /usr/local/var/openldap-data/cacert.pem
    TLSCertificateFile /usr/local/var/openldap-data/servercrt.pem
    TLSCertificateKeyFile /usr/local/var/openldap-data/serverkey.pem

    # Client verification not required
    #TLSVerifyClient never

    But I get a different error if I use TLSVerifyclient demand
    # Client verification not required
    TLSVerifyClient demand

    Please find below exception for this
    java.net.SocketException: Software caused connection abort: recv failed
            at java.net.SocketInputStream.socketRead0(Native Method)
            at java.net.SocketInputStream.read(SocketInputStream.java:129)
            at com.sun.net.ssl.internal.ssl.InputRecord.readFully(InputRecord.java:293)
            at com.sun.net.ssl.internal.ssl.InputRecord.read(InputRecord.java:331)
            at com.sun.net.ssl.internal.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:723)
            at com.sun.net.ssl.internal.ssl.SSLSocketImpl.waitForClose(SSLSocketImpl.java:1366)
            at com.sun.net.ssl.internal.ssl.HandshakeOutStream.flush(HandshakeOutStream.java:103)
            at com.sun.net.ssl.internal.ssl.Handshaker.sendChangeCipherSpec(Handshaker.java:590)
            at com.sun.net.ssl.internal.ssl.ClientHandshaker.sendChangeCipherAndFinish(ClientHandshak
    java:698)
            at com.sun.net.ssl.internal.ssl.ClientHandshaker.serverHelloDone(ClientHandshaker.java:62
            at com.sun.net.ssl.internal.ssl.ClientHandshaker.processMessage(ClientHandshaker.java:160
            at com.sun.net.ssl.internal.ssl.Handshaker.processLoop(Handshaker.java:495)
            at com.sun.net.ssl.internal.ssl.Handshaker.process_record(Handshaker.java:433)
            at com.sun.net.ssl.internal.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:818)
            at com.sun.net.ssl.internal.ssl.SSLSocketImpl.performInitialHandshake(SSLSocketImpl.java:
    0)
            at com.sun.net.ssl.internal.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1057)
            at com.sun.net.ssl.internal.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1041)
            at com.sun.jndi.ldap.ext.StartTlsResponseImpl.startHandshake(StartTlsResponseImpl.java:34
            at com.sun.jndi.ldap.ext.StartTlsResponseImpl.negotiate(StartTlsResponseImpl.java:208)
            at com.sun.jndi.ldap.ext.StartTlsResponseImpl.negotiate(StartTlsResponseImpl.java:161)
            at ModifyAttr.main(ModifyAttr.java:38)

    Thanks in advance..


    -- 
    Narayana Murthy