Mantis Bugtracker
Main | My View | View Issues | Change Log | Docs
  

Viewing Issue Advanced Details [ Jump to Notes ] [ View Simple ] [ Issue History ] [ Print ]
ID Category Severity Reproducibility Date Submitted Last Update
0006031 [Resin] major always 12-29-16 07:29 02-01-17 13:19
Reporter gautham033 View Status public  
Assigned To ferg
Priority normal Resolution duplicate Platform
Status closed   OS
Projection none   OS Version
ETA none Fixed in Version Product Version 4.0.49
  Product Build
Summary 0006031: Unable to block RC4-MD5 and RC4-SHA cipher suites in jsse_cipher_suites tag in Resin.properties
Description Resin 4.0.49 is not supporting TLS v1.0 cipher suites "TLS_RSA_WITH_RC4_128_MD5" (RC4-MD5) and "TLS_RSA_WITH_RC4_128_SHA" (RC4-SHA) when i try to block the same in Resin.properties at jsse_cipher_suites tag

When resin is started it throws "Unsupported ciphersuite TLS_RSA_WITH_RC4_128_MD5"
exception.

Please provide us a solution.

The resin log is also shared for your reference in additional information column.
Steps To Reproduce
Additional Information [16-12-29 07:23:29.288] {resin-40} WebApp[production/webapp/default/ROOT] active

[16-12-29 07:23:29.538] {main} Host[production/host/default] active
[16-12-29 07:23:29.538] {main} ServletService[id=app-0,cluster=app] active
[16-12-29 07:23:29.538] {main}
[16-12-29 07:23:29.554] {main} http listening to netcast:8080
java.lang.IllegalArgumentException: Unsupported ciphersuite TLS_RSA_WITH_RC4_128
_MD5
        at sun.security.ssl.CipherSuite.valueOf(CipherSuite.java:235)
        at sun.security.ssl.CipherSuiteList.<init>(CipherSuiteList.java:82)
        at sun.security.ssl.SSLServerSocketImpl.setEnabledCipherSuites(SSLServer
SocketImpl.java:191)
        at com.caucho.vfs.JsseSSLFactory.create(JsseSSLFactory.java:322)
        at com.caucho.network.listen.TcpPort.bind(TcpPort.java:1116)
        at com.caucho.cloud.network.NetworkListenSystem.start(NetworkListenSyste
m.java:220)
        at com.caucho.env.service.ResinSystem.startServices(ResinSystem.java:544
)
        at com.caucho.env.service.ResinSystem.start(ResinSystem.java:511)
        at com.caucho.server.resin.Resin.start(Resin.java:869)
        at com.caucho.server.resin.Resin.initMain(Resin.java:1001)
        at com.caucho.server.resin.Resin.main(Resin.java:1460)
Unsupported ciphersuite TLS_RSA_WITH_RC4_128_MD5
java.lang.IllegalArgumentException: Unsupported ciphersuite TLS_RSA_WITH_RC4_128
_MD5
        at sun.security.ssl.CipherSuite.valueOf(CipherSuite.java:235)
        at sun.security.ssl.CipherSuiteList.<init>(CipherSuiteList.java:82)
        at sun.security.ssl.SSLServerSocketImpl.setEnabledCipherSuites(SSLServer
SocketImpl.java:191)
        at com.caucho.vfs.JsseSSLFactory.create(JsseSSLFactory.java:322)
        at com.caucho.network.listen.TcpPort.bind(TcpPort.java:1116)
        at com.caucho.cloud.network.NetworkListenSystem.start(NetworkListenSyste
m.java:220)
        at com.caucho.env.service.ResinSystem.startServices(ResinSystem.java:544
)
        at com.caucho.env.service.ResinSystem.start(ResinSystem.java:511)
        at com.caucho.server.resin.Resin.start(Resin.java:869)
        at com.caucho.server.resin.Resin.initMain(Resin.java:1001)
        at com.caucho.server.resin.Resin.main(Resin.java:1460)
[16-12-29 07:23:29.898] {main} java.lang.IllegalArgumentException: Unsupported c
iphersuite TLS_RSA_WITH_RC4_128_MD5
                        at sun.security.ssl.CipherSuite.valueOf(CipherSuite.java
:235)
                        at sun.security.ssl.CipherSuiteList.<init>(CipherSuiteLi
st.java:82)
                        at sun.security.ssl.SSLServerSocketImpl.setEnabledCipher
Suites(SSLServerSocketImpl.java:191)
                        at com.caucho.vfs.JsseSSLFactory.create(JsseSSLFactory.j
ava:322)
                        at com.caucho.network.listen.TcpPort.bind(TcpPort.java:1
116)
                        at com.caucho.cloud.network.NetworkListenSystem.start(Ne
tworkListenSystem.java:220)
                        at com.caucho.env.service.ResinSystem.startServices(Resi
nSystem.java:544)
                        at com.caucho.env.service.ResinSystem.start(ResinSystem.
java:511)
                        at com.caucho.server.resin.Resin.start(Resin.java:869)
                        at com.caucho.server.resin.Resin.initMain(Resin.java:100
1)
                        at com.caucho.server.resin.Resin.main(Resin.java:1460)

[16-12-29 07:23:29.898] {main} java.lang.IllegalArgumentException: Unsupported c
iphersuite TLS_RSA_WITH_RC4_128_MD5
                        at sun.security.ssl.CipherSuite.valueOf(CipherSuite.java
:235)
                        at sun.security.ssl.CipherSuiteList.<init>(CipherSuiteLi
st.java:82)
                        at sun.security.ssl.SSLServerSocketImpl.setEnabledCipher
Suites(SSLServerSocketImpl.java:191)
                        at com.caucho.vfs.JsseSSLFactory.create(JsseSSLFactory.j
ava:322)
                        at com.caucho.network.listen.TcpPort.bind(TcpPort.java:1
116)
                        at com.caucho.cloud.network.NetworkListenSystem.start(Ne
tworkListenSystem.java:220)
                        at com.caucho.env.service.ResinSystem.startServices(Resi
nSystem.java:544)
                        at com.caucho.env.service.ResinSystem.start(ResinSystem.
java:511)
                        at com.caucho.server.resin.Resin.start(Resin.java:869)
                        at com.caucho.server.resin.Resin.initMain(Resin.java:100
1)
                        at com.caucho.server.resin.Resin.main(Resin.java:1460)

Resin-4.0.49 (built Fri, 19 Aug 2016 11:47:48 PDT)
Copyright(c) 1998-2012 Caucho Technology. All rights reserved.

  Using Resin(R) Open Source under the GNU Public License (GPL).

  See http://www.caucho.com [^] for information on Resin Professional,
  including caching, clustering, JNI acceleration, and OpenSSL integration.

Starting Resin on Thu, 29 Dec 2016 07:23:31 -0800 (PST)

[16-12-29 07:23:32.757] {main} Using Resin(R) Open Source under the GNU Public
 License (GPL).

                         See http://www.caucho.com [^] for information on Resin Prof
essional,
                         including caching, clustering, JNI acceleration, and Op
enSSL integration.

[16-12-29 07:23:32.851] {main} honor-cipher-order requires JDK 1.8
[16-12-29 07:23:32.913] {main} honor-cipher-order requires JDK 1.8
[16-12-29 07:23:33.054] {main} <proxy-cache> requires Resin Professional. Pleas
e see http://www.caucho.com [^] for Resin Professional information and licensing.
[16-12-29 07:23:33.319] {main}
[16-12-29 07:23:33.319] {main} Resin-4.0.49 (built Fri, 19 Aug 2016 11:47:48 PDT
)
[16-12-29 07:23:33.319] {main}
[16-12-29 07:23:33.319] {main} Windows Server 2012 R2 6.3 amd64
[16-12-29 07:23:33.319] {main} Java(TM) SE Runtime Environment 1.7.0_79-b15, Cp1
252, en
[16-12-29 07:23:33.319] {main} Java HotSpot(TM) 64-Bit Server VM 24.79-b02, 64,
mixed mode, Oracle Corporation
[16-12-29 07:23:33.319] {main}
[16-12-29 07:23:33.319] {main} user.name = netcast
[16-12-29 07:23:33.398] {main}
[16-12-29 07:23:33.398] {main} server listening to 127.0.0.1:6800
[16-12-29 07:23:33.413] {main}
[16-12-29 07:23:33.491] {main} Table[mnode:2,c:\resin-4.0.49\resin-data\app-0\di
stcache\mnode.db] validating indexes due to unclean shutdown.
[16-12-29 07:23:33.507] {main} Table[data:3,c:\resin-4.0.49\resin-data\app-0\dis
tcache\data.db] validating indexes due to unclean shutdown.
[16-12-29 07:23:33.523] {main}
[16-12-29 07:23:33.523] {main} resin.home = c:\resin-4.0.49
[16-12-29 07:23:33.523] {main} resin.root = c:\resin-4.0.49
[16-12-29 07:23:33.523] {main} resin.conf = c:\resin-4.0.49\conf\resin.xml
[16-12-29 07:23:33.523] {main}
Attached Files

- Relationships

- Notes
(0006738)
ferg
02-01-17 13:19

 Use cipher-suites-forbidden in jose-ssl.
 

- Issue History
Date Modified Username Field Change
12-29-16 07:29 gautham033 New Issue
02-01-17 13:19 ferg Note Added: 0006738
02-01-17 13:19 ferg Assigned To  => ferg
02-01-17 13:19 ferg Status new => closed
02-01-17 13:19 ferg Resolution open => duplicate

Mantis 1.0.0rc3[^]
Copyright © 2000 - 2005 Mantis Group
29 total queries executed.
26 unique queries executed.
Powered by Mantis Bugtracker