Re: [Quickfixj-users] Problem with SSL and JdK 11

[Christoph J. <chr...@ma...>]

Hi,

other things to check: did you try without the -Djdk.tls.acknowledgeCloseNotify=true option?
BTW, I think in Java 11 the SSL debug needs to use this syntax: -Djavax.net.debug=ssl:handshake  
(colon instead of comma)
See e.g. 
https://colinpaice.blog/2020/04/05/using-java-djavax-net-debug-to-examine-data-flows-including-tls/

Does this produce more debug output that can be used to pinpoint the problem?

Cheers,
Chris.


On 26.01.21 22:38, seb...@or... wrote:
> QuickFIX/J Documentation: http://www.quickfixj.org/documentation/
> QuickFIX/J Support: http://www.quickfixj.org/support/
>
>
> Hi,
>
> I use an openJdk 11 docker image to run my application, I launch the java command with theese parameters in order to use TLSv1.2 :
> -Djavax.net.debug=ssl,handshake -Djdk.tls.acknowledgeCloseNotify=true -Djdk.tls.client.protocols=TLSv1.2 -Djdk.tls.server.protocols=TLSv1.2
>
> In the configuration of quickfixJ, I use "EnabledProtocols" with value "TLSv1.2".
>
> I check the SSL log, but I don't find TLSv1.3.
> I don't know if this protocol version can be used by something, even if I force the version to 1.2 in the Jdk.
>
> Do you know how I can check if TLSv1.3 is used ?
>
> Cheers,
> Sebastien.
>
> _________________________________________________________________________________________________________________________
>
> Ce message et ses pieces jointes peuvent contenir des informations confidentielles ou privilegiees et ne doivent donc
> pas etre diffuses, exploites ou copies sans autorisation. Si vous avez recu ce message par erreur, veuillez le signaler
> a l'expediteur et le detruire ainsi que les pieces jointes. Les messages electroniques etant susceptibles d'alteration,
> Orange decline toute responsabilite si ce message a ete altere, deforme ou falsifie. Merci.
>
> This message and its attachments may contain confidential or privileged information that may be protected by law;
> they should not be distributed, used or copied without authorisation.
> If you have received this email in error, please notify the sender and delete this message and its attachments.
> As emails may be altered, Orange is not liable for messages that have been modified, changed or falsified.
> Thank you.
>
>
>
> _______________________________________________
> Quickfixj-users mailing list
> Qui...@li...
> https://lists.sourceforge.net/lists/listinfo/quickfixj-users

-- 
Christoph John
Software Engineering
T +49 241 557080-28
chr...@ma...

MACD GmbH
Oppenhoffallee 103
52066 Aachen, Germany
www.macd.com

Amtsgericht Aachen: HRB 8151
Ust.-Id: DE 813021663
Geschäftsführer: George Macdonald