0006031: Unable to block RC4-MD5 and RC4-SHA cipher suites in jsse_cipher_suites tag in Resin.properties

Viewing Issue Simple Details [ Jump to Notes ]

[ View Advanced ] [ Issue History ] [ Print ]

Category

Severity

Reproducibility

Date Submitted

Last Update

0006031

[Resin]

major

always

12-29-16 07:29

02-01-17 13:19

Reporter

gautham033

View Status

public

Assigned To

ferg

Priority

normal

Resolution

duplicate

Status

closed

Product Version

4.0.49

Summary

0006031: Unable to block RC4-MD5 and RC4-SHA cipher suites in jsse_cipher_suites tag in Resin.properties

Description

Resin 4.0.49 is not supporting TLS v1.0 cipher suites "TLS_RSA_WITH_RC4_128_MD5" (RC4-MD5) and "TLS_RSA_WITH_RC4_128_SHA" (RC4-SHA) when i try to block the same in Resin.properties at jsse_cipher_suites tag

When resin is started it throws "Unsupported ciphersuite TLS_RSA_WITH_RC4_128_MD5"
exception.

Please provide us a solution.

The resin log is also shared for your reference in additional information column.

Additional Information

[16-12-29 07:23:29.288] {resin-40} WebApp[production/webapp/default/ROOT] active

[16-12-29 07:23:29.538] {main} Host[production/host/default] active
[16-12-29 07:23:29.538] {main} ServletService[id=app-0,cluster=app] active
[16-12-29 07:23:29.538] {main}
[16-12-29 07:23:29.554] {main} http listening to netcast:8080
java.lang.IllegalArgumentException: Unsupported ciphersuite TLS_RSA_WITH_RC4_128
_MD5
        at sun.security.ssl.CipherSuite.valueOf(CipherSuite.java:235)
        at sun.security.ssl.CipherSuiteList.<init>(CipherSuiteList.java:82)
        at sun.security.ssl.SSLServerSocketImpl.setEnabledCipherSuites(SSLServer
SocketImpl.java:191)
        at com.caucho.vfs.JsseSSLFactory.create(JsseSSLFactory.java:322)
        at com.caucho.network.listen.TcpPort.bind(TcpPort.java:1116)
        at com.caucho.cloud.network.NetworkListenSystem.start(NetworkListenSyste
m.java:220)
        at com.caucho.env.service.ResinSystem.startServices(ResinSystem.java:544
)
        at com.caucho.env.service.ResinSystem.start(ResinSystem.java:511)
        at com.caucho.server.resin.Resin.start(Resin.java:869)
        at com.caucho.server.resin.Resin.initMain(Resin.java:1001)
        at com.caucho.server.resin.Resin.main(Resin.java:1460)
Unsupported ciphersuite TLS_RSA_WITH_RC4_128_MD5
java.lang.IllegalArgumentException: Unsupported ciphersuite TLS_RSA_WITH_RC4_128
_MD5
        at sun.security.ssl.CipherSuite.valueOf(CipherSuite.java:235)
        at sun.security.ssl.CipherSuiteList.<init>(CipherSuiteList.java:82)
        at sun.security.ssl.SSLServerSocketImpl.setEnabledCipherSuites(SSLServer
SocketImpl.java:191)
        at com.caucho.vfs.JsseSSLFactory.create(JsseSSLFactory.java:322)
        at com.caucho.network.listen.TcpPort.bind(TcpPort.java:1116)
        at com.caucho.cloud.network.NetworkListenSystem.start(NetworkListenSyste
m.java:220)
        at com.caucho.env.service.ResinSystem.startServices(ResinSystem.java:544
)
        at com.caucho.env.service.ResinSystem.start(ResinSystem.java:511)
        at com.caucho.server.resin.Resin.start(Resin.java:869)
        at com.caucho.server.resin.Resin.initMain(Resin.java:1001)
        at com.caucho.server.resin.Resin.main(Resin.java:1460)
[16-12-29 07:23:29.898] {main} java.lang.IllegalArgumentException: Unsupported c
iphersuite TLS_RSA_WITH_RC4_128_MD5
                        at sun.security.ssl.CipherSuite.valueOf(CipherSuite.java
:235)
                        at sun.security.ssl.CipherSuiteList.<init>(CipherSuiteLi
st.java:82)
                        at sun.security.ssl.SSLServerSocketImpl.setEnabledCipher
Suites(SSLServerSocketImpl.java:191)
                        at com.caucho.vfs.JsseSSLFactory.create(JsseSSLFactory.j
ava:322)
                        at com.caucho.network.listen.TcpPort.bind(TcpPort.java:1
116)
                        at com.caucho.cloud.network.NetworkListenSystem.start(Ne
tworkListenSystem.java:220)
                        at com.caucho.env.service.ResinSystem.startServices(Resi
nSystem.java:544)
                        at com.caucho.env.service.ResinSystem.start(ResinSystem.
java:511)
                        at com.caucho.server.resin.Resin.start(Resin.java:869)
                        at com.caucho.server.resin.Resin.initMain(Resin.java:100
1)
                        at com.caucho.server.resin.Resin.main(Resin.java:1460)

[16-12-29 07:23:29.898] {main} java.lang.IllegalArgumentException: Unsupported c
iphersuite TLS_RSA_WITH_RC4_128_MD5
                        at sun.security.ssl.CipherSuite.valueOf(CipherSuite.java
:235)
                        at sun.security.ssl.CipherSuiteList.<init>(CipherSuiteLi
st.java:82)
                        at sun.security.ssl.SSLServerSocketImpl.setEnabledCipher
Suites(SSLServerSocketImpl.java:191)
                        at com.caucho.vfs.JsseSSLFactory.create(JsseSSLFactory.j
ava:322)
                        at com.caucho.network.listen.TcpPort.bind(TcpPort.java:1
116)
                        at com.caucho.cloud.network.NetworkListenSystem.start(Ne
tworkListenSystem.java:220)
                        at com.caucho.env.service.ResinSystem.startServices(Resi
nSystem.java:544)
                        at com.caucho.env.service.ResinSystem.start(ResinSystem.
java:511)
                        at com.caucho.server.resin.Resin.start(Resin.java:869)
                        at com.caucho.server.resin.Resin.initMain(Resin.java:100
1)
                        at com.caucho.server.resin.Resin.main(Resin.java:1460)

Resin-4.0.49 (built Fri, 19 Aug 2016 11:47:48 PDT)
Copyright(c) 1998-2012 Caucho Technology. All rights reserved.

  Using Resin(R) Open Source under the GNU Public License (GPL).

  See http://www.caucho.com [^] for information on Resin Professional,
  including caching, clustering, JNI acceleration, and OpenSSL integration.

Starting Resin on Thu, 29 Dec 2016 07:23:31 -0800 (PST)

[16-12-29 07:23:32.757] {main} Using Resin(R) Open Source under the GNU Public
License (GPL).

                         See http://www.caucho.com [^] for information on Resin Prof
essional,
                         including caching, clustering, JNI acceleration, and Op
enSSL integration.

[16-12-29 07:23:32.851] {main} honor-cipher-order requires JDK 1.8
[16-12-29 07:23:32.913] {main} honor-cipher-order requires JDK 1.8
[16-12-29 07:23:33.054] {main} <proxy-cache> requires Resin Professional. Pleas
e see http://www.caucho.com [^] for Resin Professional information and licensing.
[16-12-29 07:23:33.319] {main}
[16-12-29 07:23:33.319] {main} Resin-4.0.49 (built Fri, 19 Aug 2016 11:47:48 PDT
)
[16-12-29 07:23:33.319] {main}
[16-12-29 07:23:33.319] {main} Windows Server 2012 R2 6.3 amd64
[16-12-29 07:23:33.319] {main} Java(TM) SE Runtime Environment 1.7.0_79-b15, Cp1
252, en
[16-12-29 07:23:33.319] {main} Java HotSpot(TM) 64-Bit Server VM 24.79-b02, 64,
mixed mode, Oracle Corporation
[16-12-29 07:23:33.319] {main}
[16-12-29 07:23:33.319] {main} user.name = netcast
[16-12-29 07:23:33.398] {main}
[16-12-29 07:23:33.398] {main} server listening to 127.0.0.1:6800
[16-12-29 07:23:33.413] {main}
[16-12-29 07:23:33.491] {main} Table[mnode:2,c:\resin-4.0.49\resin-data\app-0\di
stcache\mnode.db] validating indexes due to unclean shutdown.
[16-12-29 07:23:33.507] {main} Table[data:3,c:\resin-4.0.49\resin-data\app-0\dis
tcache\data.db] validating indexes due to unclean shutdown.
[16-12-29 07:23:33.523] {main}
[16-12-29 07:23:33.523] {main} resin.home = c:\resin-4.0.49
[16-12-29 07:23:33.523] {main} resin.root = c:\resin-4.0.49
[16-12-29 07:23:33.523] {main} resin.conf = c:\resin-4.0.49\conf\resin.xml
[16-12-29 07:23:33.523] {main}

Attached Files

Relationships

Notes
(0006738) ferg 02-01-17 13:19	Use cipher-suites-forbidden in jose-ssl.

Issue History
Date Modified	Username	Field	Change
12-29-16 07:29	gautham033	New Issue
02-01-17 13:19	ferg	Note Added: 0006738
02-01-17 13:19	ferg	Assigned To	=> ferg
02-01-17 13:19	ferg	Status	new => closed
02-01-17 13:19	ferg	Resolution	open => duplicate

Mantis 1.0.0rc3[^]

29 total queries executed.
26 unique queries executed.