Uploaded image for project: 'Red Hat Fuse'
  1. Red Hat Fuse
  2. ENTESB-23117

Client that supports TLS 1.3 failed to connect to server that configured with TLS 1.3 only using http undertow transport

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Unresolved
    • Icon: Critical Critical
    • fuse-7.13.1-GA
    • fuse-7.11-GA
    • CXF
    • None
    • False
    • None
    • False
    • % %
    • Todo
    • Important
    • Very Likely

      A CXF endpoint has been configured using http undertow transport:

      <httpu:engine-factory bus="cxf">
          <httpu:engine port="9500" host="0.0.0.0">
            <httpu:tlsServerParameters secureSocketProtocol="TLSv1.3">
              <sec:keyManagers keyPassword="${ssl_keymanager_password}">
                <sec:keyStore url="${ssl_keystore}" password="${ssl_keystore_password}" type="JKS" />
              </sec:keyManagers>
              <sec:trustManagers>
                <sec:keyStore url="${ssl_keystore}" password="${ssl_keystore_password}" type="JKS" />
              </sec:trustManagers>
              <sec:clientAuthentication want="true" required="false" />
      
              <sec:includeProtocols>
                <sec:includeProtocol>TLSv1.3</sec:includeProtocol>
              </sec:includeProtocols>
      
              <sec:excludeProtocols>
                <sec:excludeProtocol>SSLv2Hello</sec:excludeProtocol>
                <sec:excludeProtocol>SSLv3</sec:excludeProtocol>
                <sec:excludeProtocol>TLSv1</sec:excludeProtocol>
                <sec:excludeProtocol>TLSv1.1</sec:excludeProtocol>
              </sec:excludeProtocols>
              
            </httpu:tlsServerParameters>
          </httpu:engine>
        </httpu:engine-factory>
       

      But the client supports TLS 1.3 can't connect to it due to the error:

      javax.net.ssl.SSLHandshakeException: The client supported protocol versions [TLSv1.3] are not accepted by server preferences [TLS12] 

       

       

              yfang@redhat.com Freeman(Yue) Fang
              rhn-support-qluo Joe Luo
              Votes:
              0 Vote for this issue
              Watchers:
              6 Start watching this issue

                Created:
                Updated: