java ssl handshake_failure问题

Question

I'm trying to send a request to one of our server url,but whenever i try to connect I get this expection

java.net.ConnectException: Received fatal alert: handshake_failure

This the certificate details i got from the browser when visiting the website.

Common Name (CN)    Go Daddy Secure Certificate Authority - G2
Organisation (O)    GoDaddy.com, Inc.
Organisational Unit (OU)    http://certs.godaddy.com/repository/

I checked for the same details in cacerts in my java directory

keytool -list -keystore /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.101-3.b13.24.amzn1.x86_64/jre/lib/security/cacerts | grep godaddy

godaddyclass2ca, 23 Sep, 2016, trustedCertEntry, 
godaddyrootcertificateauthority-g2, 23 Sep, 2016, trustedCertEntry,

This is the installed java version:

openjdk version "1.8.0_101"
OpenJDK Runtime Environment (build 1.8.0_101-b13)
OpenJDK 64-Bit Server VM (build 25.101-b13, mixed mode)

I even downloaded the certificate from the browser and imported it into cacerts

keytool -import -keystore cacerts -file test.cer

Please help me to debug it.

Answer 1

You need to install JCE extension for you JVM. Basicly this problem is due to the mismatch cipher between your local JAVA and the https site.

Use https://www.ssllabs.com/ to check if your REST API supports java, check this image example

If it shows like this, you can download the files from http://www.oracle.com/technetwork/java/javase/downloads/jce8-download-2133166.html . Once done, replace the two JARs (local_policy.jar, US_export_policy.jar) under your JRE's lib/security directory with the ones from the downloaded package.

If not, please provide more detail information so we can check in detail.

Check the solution here i just tired How to debug the ssl connection error , it works for me and save my day!