dropwizard conscrypt protocol error

16 views
Skip to first unread message

Michael

unread,
Jan 19, 2021, 12:15:53 PM1/19/21
to dropwizard-user
I have been using conscrypt with dropwizard 1.3 and jdk1.8 without issue.

Then this happens whenever a client tries to make a https connection - in this case it was the AWS LB doing a health check.

avax.net.ssl.SSLProtocolException: Read error: ssl=0x7f5b7809d498: Failure in SSL library, usually a protocol error
Jan 19 16:31:51 ip-10-0-1-47 nohup[14558]: ! error:100000b8:SSL routines:OPENSSL_internal:NO_SHARED_CIPHER (../ssl/handshake_server.cc:712 0x7f5b9c3ff700:0x00000000

Any ideas what is causing this - I saw a note about 1.8 and TLSv1.3 being not supported in the docs. I upgraded to latest conscrypt uber but the error persists.

thanks

Michael

unread,
Jan 19, 2021, 12:22:47 PM1/19/21
to dropwizard-user
server:
  registerDefaultExceptionMappers: false
  applicationConnectors:
    - type: https
      port: 443
      jceProvider: Conscrypt
      keyStorePath: keystore.pkcs12
      keyStorePassword: abcdef
      validateCerts: false
      validatePeers: false
      certAlias: mycert

My config
Reply all
Reply to author
Forward
0 new messages