Menu

#247 ERROR: no cipher suites in common

3.12
open
None
1
2014-09-24
2014-09-24
abdul
No

Hi philip

I hava another application using now with https ,this i have mapped my application certificates with the grinder version is 3.11

1) I tired this

So we went down the path of exporting the certificate for the page from both IE and Firefox, using the keytool.exe utility to generate a keystore, and then specifying this keystore before launching the TCPProxy. Below are the steps we follow:

  1. Exported the certificate as type X.509 Certificate (PEM) (*.crt) in Firefox
  2. Run the keytool.exe (JRE 1.7.0.45):
    "C:\Program Files\Java\jre7\bin\keytool.exe" -import -keystore mapsKeystore -file appCert.crt -alias mapClient

NOTE: We also tried these steps with JRE 1.6.0.45, same results.

  1. When launching TCPProxy, we specify the above keystore:
    java -classpath %CLASSPATH% net.grinder.TCPProxy -keyStore mapsKeystore -keyStorePassword ** -console

NOTE: We also looked at this article but didn't feel it was applicable since we are a client, not a server, with a valid certificate from the website exported from Firefox:
http://docs.oracle.com/javase/7/docs/technotes/guides/security/jsse/JSSERefGuide.html

*****it started fine *****
:\grinder\Demo>java -classpath C:\grinder\lib\grinder.jar;C:\grinder\li
ib\security\cacerts" -keyStorePassword changeit -console -http 1>Messa
5:36:05.918 [main] INFO : Initialising as an HTTP/HTTPS proxy with the
Request filters: HTTPRequestFilter
Response filters: HTTPResponseFilter
Local address: localhost:8001
Key store: C:\Program Files\Java\jre7\lib\security\cacerts
Key store password:
*
5:36:06.214 [main] INFO : Engine initialised, listening on port 8001

After this also i tried to record over the browser it show me this errors

**** this errror o got browser ****
Cannot communicate securely with peer: no common encryption algorithm(s).
(Error code: ssl_error_no_cypher_overlap)

******this is console errors******
at java.lang.Thread.run(Unknown Source) [na:1.7.0_67]
8.553 [Filter thread for localhost:1936->ibank37-sys.aibtest.ie:443] ERROR: no cipher suites in common
et.ssl.SSLHandshakeException: no cipher suites in common
at sun.security.ssl.Alerts.getSSLException(Unknown Source) ~[na:1.7.0_67]
at sun.security.ssl.SSLSocketImpl.fatal(Unknown Source) ~[na:1.7.0_67]
at sun.security.ssl.Handshaker.fatalSE(Unknown Source) ~[na:1.7.0_67]
at sun.security.ssl.Handshaker.fatalSE(Unknown Source) ~[na:1.7.0_67]
at sun.security.ssl.ServerHandshaker.chooseCipherSuite(Unknown Source) ~[na:1.7.0_67]
at sun.security.ssl.ServerHandshaker.clientHello(Unknown Source) ~[na:1.7.0_67]
at sun.security.ssl.ServerHandshaker.processMessage(Unknown Source) ~[na:1.7.0_67]
at sun.security.ssl.Handshaker.processLoop(Unknown Source) ~[na:1.7.0_67]
at sun.security.ssl.Handshaker.process_record(Unknown Source) ~[na:1.7.0_67]
at sun.security.ssl.SSLSocketImpl.readRecord(Unknown Source) ~[na:1.7.0_67]
at sun.security.ssl.SSLSocketImpl.performInitialHandshake(Unknown Source) ~[na:1.7.0_67]
at sun.security.ssl.SSLSocketImpl.readDataRecord(Unknown Source) ~[na:1.7.0_67]
at sun.security.ssl.AppInputStream.read(Unknown Source) ~[na:1.7.0_67]
at net.grinder.tools.tcpproxy.AbstractTCPProxyEngine$FilteredStreamThread.interruptibleRun(AbstractTCPProxyEngine.java:431) ~[grinder-http-3.11.jar:na]
at net.grinder.util.thread.InterruptibleRunnableAdapter.run(InterruptibleRunnableAdapter.java:58) [grinder-core-3.11.jar:na]
at java.lang.Thread.run(Unknown Source) [na:1.7.0_67]

please help me to resolve it very important waiting ASAP,if anybody has some proper steps to do t


abdul

Discussion


Log in to post a comment.