SSL problem: renegotiation is not allowed

Question

Hi all,
I'm trying to build a SSL client/server app (something simple, for learning purposes), and I got some pointers on the internet. However, when I ran both client and server, I got an exception on the client side: javax.net.ssl.SSLHandshakeException: renegotiation is not allowed
Here are my codes:
Server
//server.jks = keystore
          //ServerJKS = keystore password
          //SeverKey = certificate's password (certificate = server_full)
          if (args.length<3) {
               System.out.println("Usage:");
             System.out.println("   java AdminApp keyStoreName keyStorePass certPass");
             return;
          String keyStoreName = args[0];
         char[] keyStorePass = args[1].toCharArray();
         char[] certPass = args[2].toCharArray();
         System.setProperty("javax.net.ssl.trustStore", args[0]);
         System.setProperty("javax.net.ssl.trustStorePassword", args[1]);
         try {
              KeyStore keystore = KeyStore.getInstance("JKS");
             keystore.load(new FileInputStream(keyStoreName), keyStorePass);
             KeyManagerFactory kmf = KeyManagerFactory.getInstance("SunX509");
             kmf.init(keystore, certPass);
             SSLContext context = SSLContext.getInstance("SSL");
             context.init(kmf.getKeyManagers(), null, null);
             SSLServerSocketFactory factory = context.getServerSocketFactory();
             SSLServerSocket server = (SSLServerSocket) factory.createServerSocket(8888);
             server.setNeedClientAuth(true);
             //call method printServerSocketInfo
             printServerSocketInfo(server);
             SSLSocket socket = (SSLSocket) server.accept();
             //call method printSocketInfo
             printSocketInfo(socket);
             BufferedWriter writer = new BufferedWriter(new OutputStreamWriter(socket.getOutputStream()));
             BufferedReader reader = new BufferedReader(new InputStreamReader(socket.getInputStream()));
             String msg = "Welcome to SSL Reverse Echo Server."+ " Please type in some words.";
             writer.write(msg,0,msg.length());
             writer.newLine();
             writer.flush();
             while ((msg = reader.readLine())!= null) {
                  if (msg.equals("."))
                       break;
                 char[] a = msg.toCharArray();
                 int n = a.length;
                 for(int i = 0; i < n/2; i++) {
                      char t = a;
          a[i] = a[n-1-i];
          a[n-i-1] = t;
     writer.write(a,0,n);
     writer.newLine();
     writer.flush();
     writer.close();
     reader.close();
     socket.close();
     server.close();
     } catch (Exception e) {
     System.err.println(e.toString());
_Client_if (args.length<3) {
               System.out.println("Usage:");
               System.out.println(" java SslReverseEchoerRevised keyStoreName keyStorePass certPass");
               return;
          String keyStoreName = args[0];
     char[] keyStorePass = args[1].toCharArray();
     char[] certPass = args[2].toCharArray();
     System.setProperty("javax.net.ssl.trustStore", args[0]);
     System.setProperty("javax.net.ssl.trustStorePassword", args[1]);
     //these two, to get messages out and in
     BufferedReader in = new BufferedReader(new InputStreamReader(System.in));
     PrintStream out = System.out;
     try {
          KeyStore keystore = KeyStore.getInstance("JKS");
     keystore.load(new FileInputStream(keyStoreName), keyStorePass);
     KeyManagerFactory kmf = KeyManagerFactory.getInstance("SunX509");
     kmf.init(keystore, certPass);
     SSLContext context = SSLContext.getInstance("SSL");
     context.init(kmf.getKeyManagers(), null, null);
     SSLSocketFactory factory = context.getSocketFactory();
     SSLSocket socket = (SSLSocket) factory.createSocket("localhost", 8888);
     //call printSocketInfo method
     printSocketInfo(socket);
     //start handshake
     socket.startHandshake();
     BufferedWriter writer = new BufferedWriter(new OutputStreamWriter(socket.getOutputStream()));
     BufferedReader reader = new BufferedReader(new InputStreamReader(socket.getInputStream()));
     String msg = null;
     while ((msg = reader.readLine())!= null) {
          out.println(msg);
     msg = in.readLine();
     writer.write(msg,0,msg.length());
     writer.newLine();
     writer.flush();
     writer.close();
     reader.close();
     socket.close();
     } catch (Exception e) {
          System.err.println(e.toString());

Answer 1

I think you need to setup your proxy server to allow 7002 port,
or use port 443 for SSL ( it is the default proxy secured port)
Hope this will help
Mohds
"Paul Patrick" <[email protected]> wrote:
If this is a production problem, you should file a problem report with BEA
Support.
But I didn't see any certificates for the server registered. Without
certificates and a private
key the SSL protocol will not work.
Paul Patrick
"Antimo" <[email protected]> wrote in message
news:3a12cc80$[email protected]..
Hello there,
we have a BIG PROBLEM on a production system.
Some user on internet using IEXplore 5.0x could'nt access our https page.
Error reported are:
SSL Forbidden
SSL port specified is not allowed
We are using SSL on port 7002
This is the weblogic properties reagrd SSL:.
weblogic.security.ssl.enable=true
# SSL listen port
weblogic.system.SSLListenPort=7002
Any suggestion?
Is there a possibility to use port 80 both for https and http?
Any help will be apprciated.
THANK'S!