Problems with Anonymous authentication !!

Question

Hi All,
I hope this is the right forum to ask my problem. And also, I would like to say that I dont have any idea in Java.
Our problem is
1. We are using Java SSL as server and OpenSSL as client.
2. For server authentication, the connection is successful.
3. But for Anonymous authentication, the connection fails in read server hello.
I am not sure why this connection is failing. I have referred to client log file but did not get any information to solve the problem.
I dont know how to check log information in the server side if it provides.
Our settings are like this in server.xml for server side :
<Connector port="8443" protocol="HTTP/1.1" SSLEnabled="true"
maxThreads="150" scheme="https" secure="false"
clientAuth="false" sslProtocol="TLS" />
Please let me know whether above settings are OK for Anonymous authentication or not.
If above settings are OK, please let me know how can I debug into the problem.
Server is being run with TomCat.
As I am not familiar with Java, May be I did not provide enough details.
You may think that if I am not familiar, why I am posting ? :) I am supporting some other project team for SSL. So, we have faced this problem. I am familiar with SSL but not Java.
Please let me know if you need any further details.
Thank you very much !
Regards
Satish.

Answer 1

3. But for Anonymous authenticationAnonymous authentication is a contradiction in terms. What you are doing is anonymous SSL, i.e. with no authentication.
the connection fails in read server hello. Fails how? With what exception? stack trace? message? What happens if you run the server with -Djavax.net.debug=ssl,handshake?
Please let me know whether above settings are OK for Anonymous authentication or not.They are not. You would have to enable one or more of the anonymous cipher suites. They are disabled by default.
Next question, why are you doing anonymous SSL? Are you aware that it isn't secure?