Error: "javax.net.ssl.SSLHandshakeException: Remote host closed connection during handshake"

[Behrooz Aghakhanian]

Hello

I'm using following environment:
 - ZAP: D-20150330
 - Java: 1.8.0.25
 - Browser: Firefox 37.0.1

I'm testing two websites with same content but different SSL protocol stack
 1 - TLS 1.2, ECDHE-RSA (authentication), AES_128_GCM-SHA265
 2 - TLS 1.2, RSA (authentication), AES_256_CBC-SHA

I get this error: "javax.net.ssl.SSLHandshakeException: Remote host closed connection during handshake" when ZAP try to connect to second website. I works fine with the first website.
Same issue with latest stable version of ZAP

[kingthorin+owaspzap]

Are you able to connect directly with Firefox?

[Matt Seil]

What does ZAP's SSL configs look like?  When I've faced this in the past, its because the website was defaulting to SSLv3 (!) and so I had to manually set it to exactly the protocol we needed. 

--
You received this message because you are subscribed to the Google Groups "OWASP ZAP User Group" group.
To unsubscribe from this group and stop receiving emails from it, send an email to zaproxy-user...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

--

Matt Seil
Cyber Security Software Engineer

Member ACM/OWASP

[Behrooz Aghakhanian]

Yes. I can.

[Simon Bennetts]

Does this FAQ help?
https://code.google.com/p/zaproxy/wiki/FAQsslHandshake

[Behrooz Aghakhanian]

I tried all protocols in "Option -> Local Proxy" but did not solve the issue. Is there anywhere else I need to changes. Meanwhile, I faced this issue by IE and Chrome. I have tried Gatling Stress tool which also act as proxy and perform SSL man in the middle.Same issue was there also. Only Fiddler decrypted the traffic successfully.

[Behrooz Aghakhanian]

Thanks. It solved the issue. I downloaded version 8 as I'm using Java 1.8. I should read this FAQ before.

[pink_devsec]

Hi

I know this is an old thread but I'm having the same issues and the FAQ link that seem to resolve this issue isn't working for me.

"I downloaded version 8", just wondering what was version 8 or how was this resolved?

Thank you.

[Peter Hauschulz]

Looks like 'version 8' meant Java version 8

You are probably already using that but it's worth a guess, what does 'java --version' show for you?

Do you have the TLS Debug Add-on for ZAP, and what does it show for the URL you are having a problem with?

Does every site have the same problem, or only certain ones? 

Also if you are keen to use Wireshark, that could give a lot of information about what is happening during the handshake failure