TLSv.1.3 interropt problems with OpenSSL 1.1.1 when used on the client side with mutual auth
Norman Maurer
norman.maurer at googlemail.com
Thu Sep 20 18:34:26 UTC 2018
Got it... just keep in mind that this bug make it kind of unusable on the client-side so I think it should be a high priority to fix it rather sooner then later. Especially as the fix is really a one line change
Norman
> Am 20.09.2018 um 11:30 schrieb Bradford Wetmore <bradford.wetmore at oracle.com>:
>
> Just to followup on your (Norman's) earlier question:
>
> On 9/19/2018, Norman wrote:
> >> Is this just the
> >> initial version set or do you not plan to fix it in Java11 ?
>
> and
>
> On 9/19/2018 9:34 AM, Xuelei Fan wrote:
> > It is just a initial version set.
>
> Getting this fix into JDK 12 was easy as 12 is in the early development stages. However, the GA release of JDK 11 is very close now and the bar is high for any changes.
>
> That said, we are currently looking into which JDK 11 update release would be appropriate for this and a couple of other needed fixes.
>
> Hope this helps.
>
> Brad
>
>
>
>
>> On 9/19/2018 9:34 AM, Xuelei Fan wrote:
>> Hi Norman,
>> It is just a initial version set.
>> Thanks,
>> Xuelei
>>> On 9/19/2018 8:49 AM, Norman Maurer wrote:
>>> I see this is now tracked as https://bugs.openjdk.java.net/projects/JDK/issues/JDK-8210846?filter=allopenissues :)
>>>
>>> Just one question, I saw it list 12 as fix version. Is this just the initial version set or do you not plan to fix it in Java11 ? IMHO this is a quite an important thing to fix as otherwise you may run into issues when using SSL on the client-side as most real-world apps use OpenSSL on the server-side.
>>>
>>> Bye
>>> Norman
>>>
>>>
>>>> On 17. Sep 2018, at 10:44, Norman Maurer <norman.maurer at googlemail.com <mailto:norman.maurer at googlemail.com>> wrote:
>>>>
>>>> Of course not…
>>>>
>>>> ID: 9057280
>>>>
>>>> Thanks
>>>> Norman
>>>>
>>>>
>>>>> On 17. Sep 2018, at 19:35, Xuelei Fan <xuelei.fan at oracle.com <mailto:xuelei.fan at oracle.com>> wrote:
>>>>>
>>>>> Hi Norman,
>>>>>
>>>>> Thank you so much for the reproducing code. Would you mind file a bug for this issue?
>>>>>
>>>>> Thanks,
>>>>> Xuelei
>>>>>
>>>>>> On 9/17/2018 3:39 AM, Norman Maurer wrote:
>>>>>> Hi all,
>>>>>> As requested I pushed a pure JDK reproducer to GitHub which you can easily use to reproduce the problem. All the details how to run it etc are in the README.md file. I also included a server to show that all works if we use the JDK on the client side and server side.
>>>>>> Also as stated before you will see that the cert will be send even if you use OpenSSL on the serverside if you replace “-Verify 1” with “-verify 1” (which is kind of the same as setWantClientAuth(true)).
>>>>>> Please don't hesitate to ping me if you need any more details or have any more questions.
>>>>>> https://github.com/normanmaurer/jdktls13bugreproducer
>>>>>> Here is the output with debugging enabled on the client side.
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.515 CEST|SSLContextImpl.java:427|System property jdk.tls.client.cipherSuites is set to 'null'
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.529 CEST|SSLContextImpl.java:427|System property jdk.tls.server.cipherSuites is set to 'null'
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.563 CEST|SSLCipher.java:437|jdk.tls.keyLimits: entry = AES/GCM/NoPadding KeyUpdate 2^37. AES/GCM/NOPADDING:KEYUPDATE = 137438953472
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.577 CEST|SSLContextImpl.java:401|Ignore disabled cipher suite: TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA
>>>>>> javax.net.ssl|ALL|01|main|2018-09-17 11:51:54.577 CEST|SSLContextImpl.java:410|Ignore unsupported cipher suite: TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.578 CEST|SSLContextImpl.java:401|Ignore disabled cipher suite: TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA
>>>>>> javax.net.ssl|ALL|01|main|2018-09-17 11:51:54.578 CEST|SSLContextImpl.java:410|Ignore unsupported cipher suite: TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.578 CEST|SSLContextImpl.java:401|Ignore disabled cipher suite: SSL_RSA_WITH_3DES_EDE_CBC_SHA
>>>>>> javax.net.ssl|ALL|01|main|2018-09-17 11:51:54.578 CEST|SSLContextImpl.java:410|Ignore unsupported cipher suite: SSL_RSA_WITH_3DES_EDE_CBC_SHA
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.578 CEST|SSLContextImpl.java:401|Ignore disabled cipher suite: TLS_ECDH_ECDSA_WITH_3DES_EDE_CBC_SHA
>>>>>> javax.net.ssl|ALL|01|main|2018-09-17 11:51:54.579 CEST|SSLContextImpl.java:410|Ignore unsupported cipher suite: TLS_ECDH_ECDSA_WITH_3DES_EDE_CBC_SHA
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.579 CEST|SSLContextImpl.java:401|Ignore disabled cipher suite: TLS_ECDH_RSA_WITH_3DES_EDE_CBC_SHA
>>>>>> javax.net.ssl|ALL|01|main|2018-09-17 11:51:54.579 CEST|SSLContextImpl.java:410|Ignore unsupported cipher suite: TLS_ECDH_RSA_WITH_3DES_EDE_CBC_SHA
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.579 CEST|SSLContextImpl.java:401|Ignore disabled cipher suite: SSL_DHE_RSA_WITH_3DES_EDE_CBC_SHA
>>>>>> javax.net.ssl|ALL|01|main|2018-09-17 11:51:54.579 CEST|SSLContextImpl.java:410|Ignore unsupported cipher suite: SSL_DHE_RSA_WITH_3DES_EDE_CBC_SHA
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.580 CEST|SSLContextImpl.java:401|Ignore disabled cipher suite: SSL_DHE_DSS_WITH_3DES_EDE_CBC_SHA
>>>>>> javax.net.ssl|ALL|01|main|2018-09-17 11:51:54.580 CEST|SSLContextImpl.java:410|Ignore unsupported cipher suite: SSL_DHE_DSS_WITH_3DES_EDE_CBC_SHA
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.581 CEST|SSLContextImpl.java:401|Ignore disabled cipher suite: TLS_ECDH_anon_WITH_3DES_EDE_CBC_SHA
>>>>>> javax.net.ssl|ALL|01|main|2018-09-17 11:51:54.581 CEST|SSLContextImpl.java:410|Ignore unsupported cipher suite: TLS_ECDH_anon_WITH_3DES_EDE_CBC_SHA
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.581 CEST|SSLContextImpl.java:401|Ignore disabled cipher suite: SSL_DH_anon_WITH_3DES_EDE_CBC_SHA
>>>>>> javax.net.ssl|ALL|01|main|2018-09-17 11:51:54.581 CEST|SSLContextImpl.java:410|Ignore unsupported cipher suite: SSL_DH_anon_WITH_3DES_EDE_CBC_SHA
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.581 CEST|SSLContextImpl.java:401|Ignore disabled cipher suite: TLS_ECDHE_ECDSA_WITH_RC4_128_SHA
>>>>>> javax.net.ssl|ALL|01|main|2018-09-17 11:51:54.582 CEST|SSLContextImpl.java:410|Ignore unsupported cipher suite: TLS_ECDHE_ECDSA_WITH_RC4_128_SHA
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.582 CEST|SSLContextImpl.java:401|Ignore disabled cipher suite: TLS_ECDHE_RSA_WITH_RC4_128_SHA
>>>>>> javax.net.ssl|ALL|01|main|2018-09-17 11:51:54.582 CEST|SSLContextImpl.java:410|Ignore unsupported cipher suite: TLS_ECDHE_RSA_WITH_RC4_128_SHA
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.582 CEST|SSLContextImpl.java:401|Ignore disabled cipher suite: SSL_RSA_WITH_RC4_128_SHA
>>>>>> javax.net.ssl|ALL|01|main|2018-09-17 11:51:54.582 CEST|SSLContextImpl.java:410|Ignore unsupported cipher suite: SSL_RSA_WITH_RC4_128_SHA
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.582 CEST|SSLContextImpl.java:401|Ignore disabled cipher suite: TLS_ECDH_ECDSA_WITH_RC4_128_SHA
>>>>>> javax.net.ssl|ALL|01|main|2018-09-17 11:51:54.583 CEST|SSLContextImpl.java:410|Ignore unsupported cipher suite: TLS_ECDH_ECDSA_WITH_RC4_128_SHA
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.583 CEST|SSLContextImpl.java:401|Ignore disabled cipher suite: TLS_ECDH_RSA_WITH_RC4_128_SHA
>>>>>> javax.net.ssl|ALL|01|main|2018-09-17 11:51:54.583 CEST|SSLContextImpl.java:410|Ignore unsupported cipher suite: TLS_ECDH_RSA_WITH_RC4_128_SHA
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.583 CEST|SSLContextImpl.java:401|Ignore disabled cipher suite: SSL_RSA_WITH_RC4_128_MD5
>>>>>> javax.net.ssl|ALL|01|main|2018-09-17 11:51:54.583 CEST|SSLContextImpl.java:410|Ignore unsupported cipher suite: SSL_RSA_WITH_RC4_128_MD5
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.583 CEST|SSLContextImpl.java:401|Ignore disabled cipher suite: TLS_ECDH_anon_WITH_RC4_128_SHA
>>>>>> javax.net.ssl|ALL|01|main|2018-09-17 11:51:54.583 CEST|SSLContextImpl.java:410|Ignore unsupported cipher suite: TLS_ECDH_anon_WITH_RC4_128_SHA
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.584 CEST|SSLContextImpl.java:401|Ignore disabled cipher suite: SSL_DH_anon_WITH_RC4_128_MD5
>>>>>> javax.net.ssl|ALL|01|main|2018-09-17 11:51:54.584 CEST|SSLContextImpl.java:410|Ignore unsupported cipher suite: SSL_DH_anon_WITH_RC4_128_MD5
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.584 CEST|SSLContextImpl.java:401|Ignore disabled cipher suite: SSL_RSA_EXPORT_WITH_DES40_CBC_SHA
>>>>>> javax.net.ssl|ALL|01|main|2018-09-17 11:51:54.584 CEST|SSLContextImpl.java:410|Ignore unsupported cipher suite: SSL_RSA_EXPORT_WITH_DES40_CBC_SHA
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.585 CEST|SSLContextImpl.java:401|Ignore disabled cipher suite: SSL_DHE_RSA_EXPORT_WITH_DES40_CBC_SHA
>>>>>> javax.net.ssl|ALL|01|main|2018-09-17 11:51:54.585 CEST|SSLContextImpl.java:410|Ignore unsupported cipher suite: SSL_DHE_RSA_EXPORT_WITH_DES40_CBC_SHA
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.585 CEST|SSLContextImpl.java:401|Ignore disabled cipher suite: SSL_DHE_DSS_EXPORT_WITH_DES40_CBC_SHA
>>>>>> javax.net.ssl|ALL|01|main|2018-09-17 11:51:54.585 CEST|SSLContextImpl.java:410|Ignore unsupported cipher suite: SSL_DHE_DSS_EXPORT_WITH_DES40_CBC_SHA
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.585 CEST|SSLContextImpl.java:401|Ignore disabled cipher suite: SSL_DH_anon_EXPORT_WITH_DES40_CBC_SHA
>>>>>> javax.net.ssl|ALL|01|main|2018-09-17 11:51:54.585 CEST|SSLContextImpl.java:410|Ignore unsupported cipher suite: SSL_DH_anon_EXPORT_WITH_DES40_CBC_SHA
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.586 CEST|SSLContextImpl.java:401|Ignore disabled cipher suite: SSL_RSA_EXPORT_WITH_RC4_40_MD5
>>>>>> javax.net.ssl|ALL|01|main|2018-09-17 11:51:54.586 CEST|SSLContextImpl.java:410|Ignore unsupported cipher suite: SSL_RSA_EXPORT_WITH_RC4_40_MD5
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.586 CEST|SSLContextImpl.java:401|Ignore disabled cipher suite: SSL_DH_anon_EXPORT_WITH_RC4_40_MD5
>>>>>> javax.net.ssl|ALL|01|main|2018-09-17 11:51:54.586 CEST|SSLContextImpl.java:410|Ignore unsupported cipher suite: SSL_DH_anon_EXPORT_WITH_RC4_40_MD5
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.589 CEST|SSLContextImpl.java:401|Ignore disabled cipher suite: TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA
>>>>>> javax.net.ssl|ALL|01|main|2018-09-17 11:51:54.589 CEST|SSLContextImpl.java:410|Ignore unsupported cipher suite: TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.589 CEST|SSLContextImpl.java:401|Ignore disabled cipher suite: TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA
>>>>>> javax.net.ssl|ALL|01|main|2018-09-17 11:51:54.589 CEST|SSLContextImpl.java:410|Ignore unsupported cipher suite: TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.589 CEST|SSLContextImpl.java:401|Ignore disabled cipher suite: SSL_RSA_WITH_3DES_EDE_CBC_SHA
>>>>>> javax.net.ssl|ALL|01|main|2018-09-17 11:51:54.590 CEST|SSLContextImpl.java:410|Ignore unsupported cipher suite: SSL_RSA_WITH_3DES_EDE_CBC_SHA
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.590 CEST|SSLContextImpl.java:401|Ignore disabled cipher suite: TLS_ECDH_ECDSA_WITH_3DES_EDE_CBC_SHA
>>>>>> javax.net.ssl|ALL|01|main|2018-09-17 11:51:54.590 CEST|SSLContextImpl.java:410|Ignore unsupported cipher suite: TLS_ECDH_ECDSA_WITH_3DES_EDE_CBC_SHA
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.590 CEST|SSLContextImpl.java:401|Ignore disabled cipher suite: TLS_ECDH_RSA_WITH_3DES_EDE_CBC_SHA
>>>>>> javax.net.ssl|ALL|01|main|2018-09-17 11:51:54.590 CEST|SSLContextImpl.java:410|Ignore unsupported cipher suite: TLS_ECDH_RSA_WITH_3DES_EDE_CBC_SHA
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.590 CEST|SSLContextImpl.java:401|Ignore disabled cipher suite: SSL_DHE_RSA_WITH_3DES_EDE_CBC_SHA
>>>>>> javax.net.ssl|ALL|01|main|2018-09-17 11:51:54.591 CEST|SSLContextImpl.java:410|Ignore unsupported cipher suite: SSL_DHE_RSA_WITH_3DES_EDE_CBC_SHA
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.591 CEST|SSLContextImpl.java:401|Ignore disabled cipher suite: SSL_DHE_DSS_WITH_3DES_EDE_CBC_SHA
>>>>>> javax.net.ssl|ALL|01|main|2018-09-17 11:51:54.591 CEST|SSLContextImpl.java:410|Ignore unsupported cipher suite: SSL_DHE_DSS_WITH_3DES_EDE_CBC_SHA
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.593 CEST|SSLContextImpl.java:401|Ignore disabled cipher suite: TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA
>>>>>> javax.net.ssl|ALL|01|main|2018-09-17 11:51:54.593 CEST|SSLContextImpl.java:410|Ignore unsupported cipher suite: TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.594 CEST|SSLContextImpl.java:401|Ignore disabled cipher suite: TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA
>>>>>> javax.net.ssl|ALL|01|main|2018-09-17 11:51:54.594 CEST|SSLContextImpl.java:410|Ignore unsupported cipher suite: TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.594 CEST|SSLContextImpl.java:401|Ignore disabled cipher suite: SSL_RSA_WITH_3DES_EDE_CBC_SHA
>>>>>> javax.net.ssl|ALL|01|main|2018-09-17 11:51:54.594 CEST|SSLContextImpl.java:410|Ignore unsupported cipher suite: SSL_RSA_WITH_3DES_EDE_CBC_SHA
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.594 CEST|SSLContextImpl.java:401|Ignore disabled cipher suite: TLS_ECDH_ECDSA_WITH_3DES_EDE_CBC_SHA
>>>>>> javax.net.ssl|ALL|01|main|2018-09-17 11:51:54.594 CEST|SSLContextImpl.java:410|Ignore unsupported cipher suite: TLS_ECDH_ECDSA_WITH_3DES_EDE_CBC_SHA
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.595 CEST|SSLContextImpl.java:401|Ignore disabled cipher suite: TLS_ECDH_RSA_WITH_3DES_EDE_CBC_SHA
>>>>>> javax.net.ssl|ALL|01|main|2018-09-17 11:51:54.595 CEST|SSLContextImpl.java:410|Ignore unsupported cipher suite: TLS_ECDH_RSA_WITH_3DES_EDE_CBC_SHA
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.595 CEST|SSLContextImpl.java:401|Ignore disabled cipher suite: SSL_DHE_RSA_WITH_3DES_EDE_CBC_SHA
>>>>>> javax.net.ssl|ALL|01|main|2018-09-17 11:51:54.595 CEST|SSLContextImpl.java:410|Ignore unsupported cipher suite: SSL_DHE_RSA_WITH_3DES_EDE_CBC_SHA
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.595 CEST|SSLContextImpl.java:401|Ignore disabled cipher suite: SSL_DHE_DSS_WITH_3DES_EDE_CBC_SHA
>>>>>> javax.net.ssl|ALL|01|main|2018-09-17 11:51:54.595 CEST|SSLContextImpl.java:410|Ignore unsupported cipher suite: SSL_DHE_DSS_WITH_3DES_EDE_CBC_SHA
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.597 CEST|SSLContextImpl.java:401|Ignore disabled cipher suite: TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA
>>>>>> javax.net.ssl|ALL|01|main|2018-09-17 11:51:54.597 CEST|SSLContextImpl.java:410|Ignore unsupported cipher suite: TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.597 CEST|SSLContextImpl.java:401|Ignore disabled cipher suite: TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA
>>>>>> javax.net.ssl|ALL|01|main|2018-09-17 11:51:54.597 CEST|SSLContextImpl.java:410|Ignore unsupported cipher suite: TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.598 CEST|SSLContextImpl.java:401|Ignore disabled cipher suite: SSL_RSA_WITH_3DES_EDE_CBC_SHA
>>>>>> javax.net.ssl|ALL|01|main|2018-09-17 11:51:54.598 CEST|SSLContextImpl.java:410|Ignore unsupported cipher suite: SSL_RSA_WITH_3DES_EDE_CBC_SHA
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.598 CEST|SSLContextImpl.java:401|Ignore disabled cipher suite: TLS_ECDH_ECDSA_WITH_3DES_EDE_CBC_SHA
>>>>>> javax.net.ssl|ALL|01|main|2018-09-17 11:51:54.598 CEST|SSLContextImpl.java:410|Ignore unsupported cipher suite: TLS_ECDH_ECDSA_WITH_3DES_EDE_CBC_SHA
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.598 CEST|SSLContextImpl.java:401|Ignore disabled cipher suite: TLS_ECDH_RSA_WITH_3DES_EDE_CBC_SHA
>>>>>> javax.net.ssl|ALL|01|main|2018-09-17 11:51:54.598 CEST|SSLContextImpl.java:410|Ignore unsupported cipher suite: TLS_ECDH_RSA_WITH_3DES_EDE_CBC_SHA
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.598 CEST|SSLContextImpl.java:401|Ignore disabled cipher suite: SSL_DHE_RSA_WITH_3DES_EDE_CBC_SHA
>>>>>> javax.net.ssl|ALL|01|main|2018-09-17 11:51:54.598 CEST|SSLContextImpl.java:410|Ignore unsupported cipher suite: SSL_DHE_RSA_WITH_3DES_EDE_CBC_SHA
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.599 CEST|SSLContextImpl.java:401|Ignore disabled cipher suite: SSL_DHE_DSS_WITH_3DES_EDE_CBC_SHA
>>>>>> javax.net.ssl|ALL|01|main|2018-09-17 11:51:54.599 CEST|SSLContextImpl.java:410|Ignore unsupported cipher suite: SSL_DHE_DSS_WITH_3DES_EDE_CBC_SHA
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.642 CEST|SunX509KeyManagerImpl.java:164|found key for : 1 (
>>>>>> "certificate" : {
>>>>>> "version" : "v3",
>>>>>> "serial number" : "20 C3 8D C4 49 66 D0 02",
>>>>>> "signature algorithm": "SHA256withRSA",
>>>>>> "issuer" : "CN=e8ac02fa0d65a84219016045db8b05c485b4ecdf.netty.test",
>>>>>> "not before" : "2013-08-02 09:51:36.000 CEST",
>>>>>> "not after" : "10000-01-01 24:59:59.000 CET",
>>>>>> "subject" : "CN=e8ac02fa0d65a84219016045db8b05c485b4ecdf.netty.test",
>>>>>> "subject public key" : "RSA"}
>>>>>> )
>>>>>> javax.net.ssl|ALL|01|main|2018-09-17 11:51:54.643 CEST|SSLContextImpl.java:115|trigger seeding of SecureRandom
>>>>>> javax.net.ssl|ALL|01|main|2018-09-17 11:51:54.643 CEST|SSLContextImpl.java:119|done seeding of SecureRandom
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.665 CEST|HandshakeContext.java:290|Ignore unsupported cipher suite: TLS_AES_128_GCM_SHA256 for TLS12
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.666 CEST|HandshakeContext.java:290|Ignore unsupported cipher suite: TLS_AES_256_GCM_SHA384 for TLS12
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.671 CEST|HandshakeContext.java:290|Ignore unsupported cipher suite: TLS_AES_128_GCM_SHA256 for TLS11
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.671 CEST|HandshakeContext.java:290|Ignore unsupported cipher suite: TLS_AES_256_GCM_SHA384 for TLS11
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.671 CEST|HandshakeContext.java:290|Ignore unsupported cipher suite: TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384 for TLS11
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.671 CEST|HandshakeContext.java:290|Ignore unsupported cipher suite: TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 for TLS11
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.671 CEST|HandshakeContext.java:290|Ignore unsupported cipher suite: TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 for TLS11
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.672 CEST|HandshakeContext.java:290|Ignore unsupported cipher suite: TLS_RSA_WITH_AES_256_GCM_SHA384 for TLS11
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.672 CEST|HandshakeContext.java:290|Ignore unsupported cipher suite: TLS_ECDH_ECDSA_WITH_AES_256_GCM_SHA384 for TLS11
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.672 CEST|HandshakeContext.java:290|Ignore unsupported cipher suite: TLS_ECDH_RSA_WITH_AES_256_GCM_SHA384 for TLS11
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.672 CEST|HandshakeContext.java:290|Ignore unsupported cipher suite: TLS_DHE_RSA_WITH_AES_256_GCM_SHA384 for TLS11
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.672 CEST|HandshakeContext.java:290|Ignore unsupported cipher suite: TLS_DHE_DSS_WITH_AES_256_GCM_SHA384 for TLS11
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.673 CEST|HandshakeContext.java:290|Ignore unsupported cipher suite: TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 for TLS11
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.673 CEST|HandshakeContext.java:290|Ignore unsupported cipher suite: TLS_RSA_WITH_AES_128_GCM_SHA256 for TLS11
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.673 CEST|HandshakeContext.java:290|Ignore unsupported cipher suite: TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256 for TLS11
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.673 CEST|HandshakeContext.java:290|Ignore unsupported cipher suite: TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256 for TLS11
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.673 CEST|HandshakeContext.java:290|Ignore unsupported cipher suite: TLS_DHE_RSA_WITH_AES_128_GCM_SHA256 for TLS11
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.673 CEST|HandshakeContext.java:290|Ignore unsupported cipher suite: TLS_DHE_DSS_WITH_AES_128_GCM_SHA256 for TLS11
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.673 CEST|HandshakeContext.java:290|Ignore unsupported cipher suite: TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384 for TLS11
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.674 CEST|HandshakeContext.java:290|Ignore unsupported cipher suite: TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 for TLS11
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.674 CEST|HandshakeContext.java:290|Ignore unsupported cipher suite: TLS_RSA_WITH_AES_256_CBC_SHA256 for TLS11
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.674 CEST|HandshakeContext.java:290|Ignore unsupported cipher suite: TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA384 for TLS11
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.674 CEST|HandshakeContext.java:290|Ignore unsupported cipher suite: TLS_ECDH_RSA_WITH_AES_256_CBC_SHA384 for TLS11
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.674 CEST|HandshakeContext.java:290|Ignore unsupported cipher suite: TLS_DHE_RSA_WITH_AES_256_CBC_SHA256 for TLS11
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.674 CEST|HandshakeContext.java:290|Ignore unsupported cipher suite: TLS_DHE_DSS_WITH_AES_256_CBC_SHA256 for TLS11
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.674 CEST|HandshakeContext.java:290|Ignore unsupported cipher suite: TLS_AES_128_GCM_SHA256 for TLS10
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.674 CEST|HandshakeContext.java:290|Ignore unsupported cipher suite: TLS_AES_256_GCM_SHA384 for TLS10
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.675 CEST|HandshakeContext.java:290|Ignore unsupported cipher suite: TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384 for TLS10
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.675 CEST|HandshakeContext.java:290|Ignore unsupported cipher suite: TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 for TLS10
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.675 CEST|HandshakeContext.java:290|Ignore unsupported cipher suite: TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 for TLS10
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.675 CEST|HandshakeContext.java:290|Ignore unsupported cipher suite: TLS_RSA_WITH_AES_256_GCM_SHA384 for TLS10
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.675 CEST|HandshakeContext.java:290|Ignore unsupported cipher suite: TLS_ECDH_ECDSA_WITH_AES_256_GCM_SHA384 for TLS10
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.675 CEST|HandshakeContext.java:290|Ignore unsupported cipher suite: TLS_ECDH_RSA_WITH_AES_256_GCM_SHA384 for TLS10
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.675 CEST|HandshakeContext.java:290|Ignore unsupported cipher suite: TLS_DHE_RSA_WITH_AES_256_GCM_SHA384 for TLS10
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.675 CEST|HandshakeContext.java:290|Ignore unsupported cipher suite: TLS_DHE_DSS_WITH_AES_256_GCM_SHA384 for TLS10
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.675 CEST|HandshakeContext.java:290|Ignore unsupported cipher suite: TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 for TLS10
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.676 CEST|HandshakeContext.java:290|Ignore unsupported cipher suite: TLS_RSA_WITH_AES_128_GCM_SHA256 for TLS10
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.676 CEST|HandshakeContext.java:290|Ignore unsupported cipher suite: TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256 for TLS10
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.676 CEST|HandshakeContext.java:290|Ignore unsupported cipher suite: TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256 for TLS10
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.676 CEST|HandshakeContext.java:290|Ignore unsupported cipher suite: TLS_DHE_RSA_WITH_AES_128_GCM_SHA256 for TLS10
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.676 CEST|HandshakeContext.java:290|Ignore unsupported cipher suite: TLS_DHE_DSS_WITH_AES_128_GCM_SHA256 for TLS10
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.676 CEST|HandshakeContext.java:290|Ignore unsupported cipher suite: TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384 for TLS10
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.677 CEST|HandshakeContext.java:290|Ignore unsupported cipher suite: TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 for TLS10
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.677 CEST|HandshakeContext.java:290|Ignore unsupported cipher suite: TLS_RSA_WITH_AES_256_CBC_SHA256 for TLS10
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.677 CEST|HandshakeContext.java:290|Ignore unsupported cipher suite: TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA384 for TLS10
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.677 CEST|HandshakeContext.java:290|Ignore unsupported cipher suite: TLS_ECDH_RSA_WITH_AES_256_CBC_SHA384 for TLS10
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.677 CEST|HandshakeContext.java:290|Ignore unsupported cipher suite: TLS_DHE_RSA_WITH_AES_256_CBC_SHA256 for TLS10
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.677 CEST|HandshakeContext.java:290|Ignore unsupported cipher suite: TLS_DHE_DSS_WITH_AES_256_CBC_SHA256 for TLS10
>>>>>> javax.net.ssl|WARNING|01|main|2018-09-17 11:51:54.690 CEST|ServerNameExtension.java:255|Unable to indicate server name
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.690 CEST|SSLExtensions.java:235|Ignore, context unavailable extension: server_name
>>>>>> javax.net.ssl|WARNING|01|main|2018-09-17 11:51:54.701 CEST|SignatureScheme.java:282|Signature algorithm, ed25519, is not supported by the underlying providers
>>>>>> javax.net.ssl|WARNING|01|main|2018-09-17 11:51:54.702 CEST|SignatureScheme.java:282|Signature algorithm, ed448, is not supported by the underlying providers
>>>>>> javax.net.ssl|ALL|01|main|2018-09-17 11:51:54.706 CEST|SignatureScheme.java:358|Ignore disabled signature sheme: rsa_md5
>>>>>> javax.net.ssl|INFO|01|main|2018-09-17 11:51:54.706 CEST|AlpnExtension.java:161|No available application protocols
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.706 CEST|SSLExtensions.java:235|Ignore, context unavailable extension: application_layer_protocol_negotiation
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.707 CEST|SSLExtensions.java:235|Ignore, context unavailable extension: cookie
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.711 CEST|SSLExtensions.java:235|Ignore, context unavailable extension: renegotiation_info
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.711 CEST|PreSharedKeyExtension.java:606|No session to resume.
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.711 CEST|SSLExtensions.java:235|Ignore, context unavailable extension: pre_shared_key
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.714 CEST|ClientHello.java:633|Produced ClientHello handshake message (
>>>>>> "ClientHello": {
>>>>>> "client version" : "TLSv1.2",
>>>>>> "random" : "66 2E BE D3 8A 77 39 06 3B 5A 34 03 7D EE 74 BB 08 D2 19 FD 50 17 2D 84 29 AA FB E0 EE ED 50 69",
>>>>>> "session id" : "0B 03 C8 E2 D2 A5 CD 3A 22 C5 85 17 06 64 A9 30 14 62 C0 AF AB 67 CE 63 50 41 50 7F 6B FD 4C 9F",
>>>>>> "cipher suites" : "[TLS_AES_128_GCM_SHA256(0x1301), TLS_AES_256_GCM_SHA384(0x1302), TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384(0xC02C), TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256(0xC02B), TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384(0xC030), TLS_RSA_WITH_AES_256_GCM_SHA384(0x009D), TLS_ECDH_ECDSA_WITH_AES_256_GCM_SHA384(0xC02E), TLS_ECDH_RSA_WITH_AES_256_GCM_SHA384(0xC032), TLS_DHE_RSA_WITH_AES_256_GCM_SHA384(0x009F), TLS_DHE_DSS_WITH_AES_256_GCM_SHA384(0x00A3), TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256(0xC02F), TLS_RSA_WITH_AES_128_GCM_SHA256(0x009C), TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256(0xC02D), TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256(0xC031), TLS_DHE_RSA_WITH_AES_128_GCM_SHA256(0x009E), TLS_DHE_DSS_WITH_AES_128_GCM_SHA256(0x00A2), TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384(0xC024), TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384(0xC028), TLS_RSA_WITH_AES_256_CBC_SHA256(0x003D), TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA384(0xC026), TLS_ECDH_RSA_WITH_AES_256_CBC_SHA384(0xC02A), TLS_DHE_RSA_WITH_AES_256_CBC_SHA256(0x006B), TLS_DHE_DSS_WITH_AES_256_CBC_SHA256(0x006A), TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA(0xC00A), TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA(0xC014), TLS_RSA_WITH_AES_256_CBC_SHA(0x0035), TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA(0xC005), TLS_ECDH_RSA_WITH_AES_256_CBC_SHA(0xC00F), TLS_DHE_RSA_WITH_AES_256_CBC_SHA(0x0039), TLS_DHE_DSS_WITH_AES_256_CBC_SHA(0x0038), TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256(0xC023), TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256(0xC027), TLS_RSA_WITH_AES_128_CBC_SHA256(0x003C), TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA256(0xC025), TLS_ECDH_RSA_WITH_AES_128_CBC_SHA256(0xC029), TLS_DHE_RSA_WITH_AES_128_CBC_SHA256(0x0067), TLS_DHE_DSS_WITH_AES_128_CBC_SHA256(0x0040), TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA(0xC009), TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA(0xC013), TLS_RSA_WITH_AES_128_CBC_SHA(0x002F), TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA(0xC004), TLS_ECDH_RSA_WITH_AES_128_CBC_SHA(0xC00E), TLS_DHE_RSA_WITH_AES_128_CBC_SHA(0x0033), TLS_DHE_DSS_WITH_AES_128_CBC_SHA(0x0032), TLS_EMPTY_RENEGOTIATION_INFO_SCSV(0x00FF)]",
>>>>>> "compression methods" : "00",
>>>>>> "extensions" : [
>>>>>> "status_request (5)": {
>>>>>> "certificate status type": ocsp
>>>>>> "OCSP status request": {
>>>>>> "responder_id": <empty>
>>>>>> "request extensions": {
>>>>>> <empty>
>>>>>> }
>>>>>> }
>>>>>> },
>>>>>> "supported_groups (10)": {
>>>>>> "versions": [secp256r1, secp384r1, secp521r1, sect283k1, sect283r1, sect409k1, sect409r1, sect571k1, sect571r1, secp256k1, ffdhe2048, ffdhe3072, ffdhe4096, ffdhe6144, ffdhe8192]
>>>>>> },
>>>>>> "ec_point_formats (11)": {
>>>>>> "formats": [uncompressed]
>>>>>> },
>>>>>> "signature_algorithms (13)": {
>>>>>> "signature schemes": [ecdsa_secp256r1_sha256, ecdsa_secp384r1_sha384, ecdsa_secp512r1_sha512, rsa_pss_rsae_sha256, rsa_pss_rsae_sha384, rsa_pss_rsae_sha512, rsa_pss_pss_sha256, rsa_pss_pss_sha384, rsa_pss_pss_sha512, rsa_pkcs1_sha256, rsa_pkcs1_sha384, rsa_pkcs1_sha512, dsa_sha256, ecdsa_sha224, rsa_sha224, dsa_sha224, ecdsa_sha1, rsa_pkcs1_sha1, dsa_sha1]
>>>>>> },
>>>>>> "signature_algorithms_cert (50)": {
>>>>>> "signature schemes": [ecdsa_secp256r1_sha256, ecdsa_secp384r1_sha384, ecdsa_secp512r1_sha512, rsa_pss_rsae_sha256, rsa_pss_rsae_sha384, rsa_pss_rsae_sha512, rsa_pss_pss_sha256, rsa_pss_pss_sha384, rsa_pss_pss_sha512, rsa_pkcs1_sha256, rsa_pkcs1_sha384, rsa_pkcs1_sha512, dsa_sha256, ecdsa_sha224, rsa_sha224, dsa_sha224, ecdsa_sha1, rsa_pkcs1_sha1, dsa_sha1]
>>>>>> },
>>>>>> "status_request_v2 (17)": {
>>>>>> "cert status request": {
>>>>>> "certificate status type": ocsp_multi
>>>>>> "OCSP status request": {
>>>>>> "responder_id": <empty>
>>>>>> "request extensions": {
>>>>>> <empty>
>>>>>> }
>>>>>> }
>>>>>> }
>>>>>> },
>>>>>> "extended_master_secret (23)": {
>>>>>> <empty>
>>>>>> },
>>>>>> "supported_versions (43)": {
>>>>>> "versions": [TLSv1.3, TLSv1.2, TLSv1.1, TLSv1]
>>>>>> },
>>>>>> "psk_key_exchange_modes (45)": {
>>>>>> "ke_modes": [psk_dhe_ke]
>>>>>> },
>>>>>> "key_share (51)": {
>>>>>> "client_shares": [
>>>>>> {
>>>>>> "named group": secp256r1
>>>>>> "key_exchange": {
>>>>>> 0000: 04 A3 9F B9 05 27 00 38 C4 D7 61 6C 66 1F 4A 8D .....'.8..alf.J.
>>>>>> 0010: B1 02 6F 0B F6 E1 BD 50 93 52 86 2C D2 3C 8D 1A ..o....P.R.,.<..
>>>>>> 0020: 10 A9 CD F0 40 F4 CD 04 25 A1 11 E2 58 23 A3 24 .... at ...%...X#.$
>>>>>> 0030: CA E8 8F 28 F7 2B 65 96 B2 E3 A1 AE 99 24 94 28 ...(.+e......$.(
>>>>>> 0040: 83
>>>>>> }
>>>>>> },
>>>>>> ]
>>>>>> }
>>>>>> ]
>>>>>> }
>>>>>> )
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.714 CEST|SSLSocketOutputRecord.java:241|WRITE: TLS13 handshake, length = 417
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.719 CEST|SSLSocketOutputRecord.java:255|Raw write (
>>>>>> 0000: 16 03 03 01 A1 01 00 01 9D 03 03 66 2E BE D3 8A ...........f....
>>>>>> 0010: 77 39 06 3B 5A 34 03 7D EE 74 BB 08 D2 19 FD 50 w9.;Z4...t.....P
>>>>>> 0020: 17 2D 84 29 AA FB E0 EE ED 50 69 20 0B 03 C8 E2 .-.).....Pi ....
>>>>>> 0030: D2 A5 CD 3A 22 C5 85 17 06 64 A9 30 14 62 C0 AF ...:"....d.0.b..
>>>>>> 0040: AB 67 CE 63 50 41 50 7F 6B FD 4C 9F 00 5A 13 01 .g.cPAP.k.L..Z..
>>>>>> 0050: 13 02 C0 2C C0 2B C0 30 00 9D C0 2E C0 32 00 9F ...,.+.0.....2..
>>>>>> 0060: 00 A3 C0 2F 00 9C C0 2D C0 31 00 9E 00 A2 C0 24 .../...-.1.....$
>>>>>> 0070: C0 28 00 3D C0 26 C0 2A 00 6B 00 6A C0 0A C0 14 .(.=.&.*.k.j....
>>>>>> 0080: 00 35 C0 05 C0 0F 00 39 00 38 C0 23 C0 27 00 3C .5.....9.8.#.'.<
>>>>>> 0090: C0 25 C0 29 00 67 00 40 C0 09 C0 13 00 2F C0 04 .%.).g. at ...../..
>>>>>> 00A0: C0 0E 00 33 00 32 00 FF 01 00 00 FA 00 05 00 05 ...3.2..........
>>>>>> 00B0: 01 00 00 00 00 00 0A 00 20 00 1E 00 17 00 18 00 ........ .......
>>>>>> 00C0: 19 00 09 00 0A 00 0B 00 0C 00 0D 00 0E 00 16 01 ................
>>>>>> 00D0: 00 01 01 01 02 01 03 01 04 00 0B 00 02 01 00 00 ................
>>>>>> 00E0: 0D 00 28 00 26 04 03 05 03 06 03 08 04 08 05 08 ..(.&...........
>>>>>> 00F0: 06 08 09 08 0A 08 0B 04 01 05 01 06 01 04 02 03 ................
>>>>>> 0100: 03 03 01 03 02 02 03 02 01 02 02 00 32 00 28 00 ............2.(.
>>>>>> 0110: 26 04 03 05 03 06 03 08 04 08 05 08 06 08 09 08 &...............
>>>>>> 0120: 0A 08 0B 04 01 05 01 06 01 04 02 03 03 03 01 03 ................
>>>>>> 0130: 02 02 03 02 01 02 02 00 11 00 09 00 07 02 00 04 ................
>>>>>> 0140: 00 00 00 00 00 17 00 00 00 2B 00 09 08 03 04 03 .........+......
>>>>>> 0150: 03 03 02 03 01 00 2D 00 02 01 01 00 33 00 47 00 ......-.....3.G.
>>>>>> 0160: 45 00 17 00 41 04 A3 9F B9 05 27 00 38 C4 D7 61 E...A.....'.8..a
>>>>>> 0170: 6C 66 1F 4A 8D B1 02 6F 0B F6 E1 BD 50 93 52 86 lf.J...o....P.R.
>>>>>> 0180: 2C D2 3C 8D 1A 10 A9 CD F0 40 F4 CD 04 25 A1 11 ,.<...... at ...%..
>>>>>> 0190: E2 58 23 A3 24 CA E8 8F 28 F7 2B 65 96 B2 E3 A1 .X#.$...(.+e....
>>>>>> 01A0: AE 99 24 94 28 83 ..$.(.
>>>>>> )
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.720 CEST|SSLSocketInputRecord.java:458|Raw read (
>>>>>> 0000: 16 03 03 00 9B .....
>>>>>> )
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.720 CEST|SSLSocketInputRecord.java:213|READ: TLSv1.2 handshake, length = 155
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.721 CEST|SSLSocketInputRecord.java:458|Raw read (
>>>>>> 0000: 02 00 00 97 03 03 AB 76 F1 BA F3 B1 F0 DD 53 AC .......v......S.
>>>>>> 0010: 5B 54 E9 E4 2E F8 44 D2 5E B2 59 85 0D 16 79 EE [T....D.^.Y...y.
>>>>>> 0020: A7 66 8A 84 69 2A 20 0B 03 C8 E2 D2 A5 CD 3A 22 .f..i* .......:"
>>>>>> 0030: C5 85 17 06 64 A9 30 14 62 C0 AF AB 67 CE 63 50 ....d.0.b...g.cP
>>>>>> 0040: 41 50 7F 6B FD 4C 9F 13 01 00 00 4F 00 2B 00 02 AP.k.L.....O.+..
>>>>>> 0050: 03 04 00 33 00 45 00 17 00 41 04 18 4A 46 BB 73 ...3.E...A..JF.s
>>>>>> 0060: F4 6F 5D F0 3C 98 AD 70 7E 13 D6 C0 E5 C0 28 5A .o].<..p......(Z
>>>>>> 0070: D7 42 78 95 68 E0 85 B7 06 CD DB 3C 35 DA AF E8 .Bx.h......<5...
>>>>>> 0080: 95 D6 A2 3C 77 CF 7E 8E C8 94 50 BA CD 18 3F DA ...<w.....P...?.
>>>>>> 0090: E3 A3 25 E9 F3 C9 A9 7F 4E B6 A9 ..%.....N..
>>>>>> )
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.721 CEST|SSLSocketInputRecord.java:249|READ: TLSv1.2 handshake, length = 155
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.722 CEST|ServerHello.java:866|Consuming ServerHello handshake message (
>>>>>> "ServerHello": {
>>>>>> "server version" : "TLSv1.2",
>>>>>> "random" : "AB 76 F1 BA F3 B1 F0 DD 53 AC 5B 54 E9 E4 2E F8 44 D2 5E B2 59 85 0D 16 79 EE A7 66 8A 84 69 2A",
>>>>>> "session id" : "0B 03 C8 E2 D2 A5 CD 3A 22 C5 85 17 06 64 A9 30 14 62 C0 AF AB 67 CE 63 50 41 50 7F 6B FD 4C 9F",
>>>>>> "cipher suite" : "TLS_AES_128_GCM_SHA256(0x1301)",
>>>>>> "compression methods" : "00",
>>>>>> "extensions" : [
>>>>>> "supported_versions (43)": {
>>>>>> "selected version": [TLSv1.3]
>>>>>> },
>>>>>> "key_share (51)": {
>>>>>> "server_share": {
>>>>>> "named group": secp256r1
>>>>>> "key_exchange": {
>>>>>> 0000: 04 18 4A 46 BB 73 F4 6F 5D F0 3C 98 AD 70 7E 13 ..JF.s.o].<..p..
>>>>>> 0010: D6 C0 E5 C0 28 5A D7 42 78 95 68 E0 85 B7 06 CD ....(Z.Bx.h.....
>>>>>> 0020: DB 3C 35 DA AF E8 95 D6 A2 3C 77 CF 7E 8E C8 94 .<5......<w.....
>>>>>> 0030: 50 BA CD 18 3F DA E3 A3 25 E9 F3 C9 A9 7F 4E B6 P...?...%.....N.
>>>>>> 0040: A9
>>>>>> }
>>>>>> },
>>>>>> }
>>>>>> ]
>>>>>> }
>>>>>> )
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.723 CEST|SSLExtensions.java:167|Consumed extension: supported_versions
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.723 CEST|ServerHello.java:962|Negotiated protocol version: TLSv1.3
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.723 CEST|SSLExtensions.java:138|Ignore unsupported extension: server_name
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.723 CEST|SSLExtensions.java:138|Ignore unsupported extension: max_fragment_length
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.723 CEST|SSLExtensions.java:138|Ignore unsupported extension: status_request
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.724 CEST|SSLExtensions.java:138|Ignore unsupported extension: ec_point_formats
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.724 CEST|SSLExtensions.java:138|Ignore unsupported extension: application_layer_protocol_negotiation
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.724 CEST|SSLExtensions.java:138|Ignore unsupported extension: status_request_v2
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.724 CEST|SSLExtensions.java:138|Ignore unsupported extension: extended_master_secret
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.724 CEST|SSLExtensions.java:167|Consumed extension: supported_versions
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.725 CEST|SSLExtensions.java:167|Consumed extension: key_share
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.725 CEST|SSLExtensions.java:138|Ignore unsupported extension: renegotiation_info
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.725 CEST|PreSharedKeyExtension.java:832|Handling pre_shared_key absence.
>>>>>> javax.net.ssl|ALL|01|main|2018-09-17 11:51:54.725 CEST|SSLSessionImpl.java:203|Session initialized: Session(1537177914725|TLS_AES_128_GCM_SHA256)
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.725 CEST|SSLExtensions.java:182|Ignore unavailable extension: server_name
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.726 CEST|SSLExtensions.java:182|Ignore unavailable extension: max_fragment_length
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.726 CEST|SSLExtensions.java:182|Ignore unavailable extension: status_request
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.726 CEST|SSLExtensions.java:182|Ignore unavailable extension: ec_point_formats
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.726 CEST|SSLExtensions.java:182|Ignore unavailable extension: application_layer_protocol_negotiation
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.726 CEST|SSLExtensions.java:182|Ignore unavailable extension: status_request_v2
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.726 CEST|SSLExtensions.java:182|Ignore unavailable extension: extended_master_secret
>>>>>> javax.net.ssl|WARNING|01|main|2018-09-17 11:51:54.726 CEST|SSLExtensions.java:190|Ignore impact of unsupported extension: supported_versions
>>>>>> javax.net.ssl|WARNING|01|main|2018-09-17 11:51:54.726 CEST|SSLExtensions.java:190|Ignore impact of unsupported extension: key_share
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.726 CEST|SSLExtensions.java:182|Ignore unavailable extension: renegotiation_info
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.726 CEST|SSLExtensions.java:182|Ignore unavailable extension: pre_shared_key
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.732 CEST|SSLCipher.java:1824|KeyLimit read side: algorithm = AES/GCM/NOPADDING:KEYUPDATE
>>>>>> countdown value = 137438953472
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.735 CEST|SSLCipher.java:1978|KeyLimit write side: algorithm = AES/GCM/NOPADDING:KEYUPDATE
>>>>>> countdown value = 137438953472
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.736 CEST|SSLSocketOutputRecord.java:225|Raw write (
>>>>>> 0000: 14 03 03 00 01 01 ......
>>>>>> )
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.736 CEST|SSLSocketInputRecord.java:458|Raw read (
>>>>>> 0000: 14 03 03 00 01 .....
>>>>>> )
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.737 CEST|SSLSocketInputRecord.java:213|READ: TLSv1.2 change_cipher_spec, length = 1
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.737 CEST|SSLSocketInputRecord.java:458|Raw read (
>>>>>> 0000: 01 .
>>>>>> )
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.737 CEST|SSLSocketInputRecord.java:249|READ: TLSv1.2 change_cipher_spec, length = 1
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.737 CEST|ChangeCipherSpec.java:232|Consuming ChangeCipherSpec message
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.737 CEST|SSLSocketInputRecord.java:458|Raw read (
>>>>>> 0000: 17 03 03 00 27 ....'
>>>>>> )
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.738 CEST|SSLSocketInputRecord.java:213|READ: TLSv1.2 application_data, length = 39
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.738 CEST|SSLSocketInputRecord.java:458|Raw read (
>>>>>> 0000: D5 B7 25 6F AF E9 D6 6F 7C 61 98 90 3F FE BA 9A ..%o...o.a..?...
>>>>>> 0010: A8 5B 94 5E 3A 47 38 62 36 90 9A 1D BE BF 87 18 .[.^:G8b6.......
>>>>>> 0020: 56 8C E3 AA CE AD AA V......
>>>>>> )
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.738 CEST|SSLSocketInputRecord.java:249|READ: TLSv1.2 application_data, length = 39
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.746 CEST|SSLCipher.java:1915|Plaintext after DECRYPTION (
>>>>>> 0000: 08 00 00 12 00 10 00 0A 00 0C 00 0A 00 1D 00 17 ................
>>>>>> 0010: 00 1E 00 19 00 18 ......
>>>>>> )
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.747 CEST|EncryptedExtensions.java:171|Consuming EncryptedExtensions handshake message (
>>>>>> "EncryptedExtensions": [
>>>>>> "supported_groups (10)": {
>>>>>> "versions": [x25519, secp256r1, x448, secp521r1, secp384r1]
>>>>>> }
>>>>>> ]
>>>>>> )
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.747 CEST|SSLExtensions.java:148|Ignore unavailable extension: server_name
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.747 CEST|SSLExtensions.java:148|Ignore unavailable extension: max_fragment_length
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.748 CEST|SSLExtensions.java:167|Consumed extension: supported_groups
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.748 CEST|SSLExtensions.java:182|Ignore unavailable extension: server_name
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.748 CEST|SSLExtensions.java:182|Ignore unavailable extension: max_fragment_length
>>>>>> javax.net.ssl|WARNING|01|main|2018-09-17 11:51:54.748 CEST|SSLExtensions.java:190|Ignore impact of unsupported extension: supported_groups
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.748 CEST|SSLExtensions.java:182|Ignore unavailable extension: application_layer_protocol_negotiation
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.749 CEST|SSLSocketInputRecord.java:458|Raw read (
>>>>>> 0000: 17 03 03 00 42 ....B
>>>>>> )
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.749 CEST|SSLSocketInputRecord.java:213|READ: TLSv1.2 application_data, length = 66
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.749 CEST|SSLSocketInputRecord.java:458|Raw read (
>>>>>> 0000: 63 F7 54 24 11 6A 91 1F 1F C5 70 9A 26 AD CE 98 c.T$.j....p.&...
>>>>>> 0010: D0 A9 7A 84 AF 39 7C A0 AD F6 6B B2 10 88 27 8B ..z..9....k...'.
>>>>>> 0020: 79 E0 F4 5A 9F 68 AA F0 56 D3 45 72 7C 7F 22 03 y..Z.h..V.Er..".
>>>>>> 0030: 0A 53 F6 24 68 CB 0B E1 3B DD D4 78 B5 AC 1E D7 .S.$h...;..x....
>>>>>> 0040: 03 FB ..
>>>>>> )
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.749 CEST|SSLSocketInputRecord.java:249|READ: TLSv1.2 application_data, length = 66
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.750 CEST|SSLCipher.java:1915|Plaintext after DECRYPTION (
>>>>>> 0000: 0D 00 00 2D 00 00 2A 00 0D 00 26 00 24 04 03 05 ...-..*...&.$...
>>>>>> 0010: 03 06 03 08 07 08 08 08 09 08 0A 08 0B 08 04 08 ................
>>>>>> 0020: 05 08 06 04 01 05 01 06 01 03 03 02 03 03 01 02 ................
>>>>>> 0030: 01 .
>>>>>> )
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.750 CEST|CertificateRequest.java:864|Consuming CertificateRequest handshake message (
>>>>>> "CertificateRequest": {
>>>>>> "certificate_request_context": "",
>>>>>> "extensions": [
>>>>>> "signature_algorithms (13)": {
>>>>>> "signature schemes": [ecdsa_secp256r1_sha256, ecdsa_secp384r1_sha384, ecdsa_secp512r1_sha512, ed25519, ed448, rsa_pss_pss_sha256, rsa_pss_pss_sha384, rsa_pss_pss_sha512, rsa_pss_rsae_sha256, rsa_pss_rsae_sha384, rsa_pss_rsae_sha512, rsa_pkcs1_sha256, rsa_pkcs1_sha384, rsa_pkcs1_sha512, ecdsa_sha224, ecdsa_sha1, rsa_sha224, rsa_pkcs1_sha1]
>>>>>> }
>>>>>> ]
>>>>>> }
>>>>>> )
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.750 CEST|SSLExtensions.java:167|Consumed extension: signature_algorithms
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.750 CEST|SSLExtensions.java:148|Ignore unavailable extension: signature_algorithms_cert
>>>>>> javax.net.ssl|WARNING|01|main|2018-09-17 11:51:54.751 CEST|SignatureScheme.java:390|Unsupported signature scheme: ed25519
>>>>>> javax.net.ssl|WARNING|01|main|2018-09-17 11:51:54.751 CEST|SignatureScheme.java:390|Unsupported signature scheme: ed448
>>>>>> javax.net.ssl|WARNING|01|main|2018-09-17 11:51:54.751 CEST|SignatureScheme.java:390|Unsupported signature scheme: ecdsa_sha224
>>>>>> javax.net.ssl|WARNING|01|main|2018-09-17 11:51:54.751 CEST|SignatureScheme.java:390|Unsupported signature scheme: rsa_sha224
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.752 CEST|SSLExtensions.java:199|Populated with extension: signature_algorithms
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.752 CEST|SSLExtensions.java:182|Ignore unavailable extension: signature_algorithms_cert
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.752 CEST|SSLSocketInputRecord.java:458|Raw read (
>>>>>> 0000: 17 03 03 03 20 ....
>>>>>> )
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.752 CEST|SSLSocketInputRecord.java:213|READ: TLSv1.2 application_data, length = 800
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.753 CEST|SSLSocketInputRecord.java:458|Raw read (
>>>>>> 0000: FE BB B2 07 BA CE A6 32 AA 58 66 2F 6D 87 16 75 .......2.Xf/m..u
>>>>>> 0010: CF 71 13 53 FB 45 AE DC 84 F4 AA 33 08 08 DF B5 .q.S.E.....3....
>>>>>> 0020: 97 C5 79 40 4A 28 F4 9D 0F 5A 86 4E C4 5F C7 2E ..y at J(...Z.N._..
>>>>>> 0030: AA AA 42 F7 8A FF 6B C1 28 75 9B A3 25 F0 23 81 ..B...k.(u..%.#.
>>>>>> 0040: 74 BB 9A EA A8 8D 89 BE E9 80 AE 31 C3 3A FC 35 t..........1.:.5
>>>>>> 0050: E6 CA C5 77 BF C7 0E ED 64 26 DB 4E C3 3D F5 AD ...w....d&.N.=..
>>>>>> 0060: 5E EB A8 37 AA 81 EF 39 24 84 C9 C4 C7 A2 D7 DB ^..7...9$.......
>>>>>> 0070: 7F 82 01 7A 02 E7 23 A3 6E C9 68 B8 E5 C3 9F 53 ...z..#.n.h....S
>>>>>> 0080: 16 6E EF B0 54 D2 67 4C FF 22 E6 78 B1 A0 DB BE .n..T.gL.".x....
>>>>>> 0090: 97 23 FC C8 D8 92 86 3D C6 6B E4 C1 AC EF B8 46 .#.....=.k.....F
>>>>>> 00A0: 75 3C 00 08 8B 34 5F 59 05 49 25 97 BE A8 61 8E u<...4_Y.I%...a.
>>>>>> 00B0: B0 5F 25 91 7A FE 79 53 7A C1 A7 E7 70 7B A5 53 ._%.z.ySz...p..S
>>>>>> 00C0: 5A 63 8B 8E B9 92 2D B3 80 DC AA 75 BE 0F 47 F3 Zc....-....u..G.
>>>>>> 00D0: E8 D9 0D 7D D9 C3 B6 00 AD 2A 43 CC 66 87 88 AF .........*C.f...
>>>>>> 00E0: 35 87 74 2F 87 2F 3C A6 FB 12 1A 9C 46 62 1C DC 5.t/./<.....Fb..
>>>>>> 00F0: 4E 4E DC 16 70 7E 08 74 FB F7 E6 5F 4D D9 20 F9 NN..p..t..._M. .
>>>>>> 0100: CA F3 91 45 D6 1A B3 BA FA 4E BD A4 74 9E 4C 78 ...E.....N..t.Lx
>>>>>> 0110: 03 18 2C 70 35 42 68 F3 9A 1D 24 3F A7 27 DF 29 ..,p5Bh...$?.'.)
>>>>>> 0120: D5 58 7C CB 19 2F D1 DF 8A 6D B2 85 52 B5 78 19 .X.../...m..R.x.
>>>>>> 0130: EA 5C E2 7A 23 42 9E D7 A3 DC D0 DE D8 33 47 2B .\.z#B.......3G+
>>>>>> 0140: 0C D8 6E 77 25 DB E6 12 B0 7A AD A5 C9 96 AC A9 ..nw%....z......
>>>>>> 0150: 1D CD 73 39 AC 6A 9F E2 0A F7 17 F1 F0 FF 75 9C ..s9.j........u.
>>>>>> 0160: B2 05 9E 7A F4 18 4F FC 9D 42 69 4C E0 3E A1 21 ...z..O..BiL.>.!
>>>>>> 0170: DA 1F 71 07 59 C6 A2 F9 0B 4F C0 CD A4 85 A8 DB ..q.Y....O......
>>>>>> 0180: 77 F6 87 5E 09 16 49 5C 2C B8 C0 7B 39 81 65 FD w..^..I\,...9.e.
>>>>>> 0190: 29 52 E2 C7 F5 C7 AD BC F6 A9 F9 6D D2 E9 A4 14 )R.........m....
>>>>>> 01A0: C9 D3 79 2E D2 BA 10 4C BD 44 65 2B A8 7E F1 3A ..y....L.De+...:
>>>>>> 01B0: F3 F6 11 53 38 17 10 12 B4 CD C5 AD 72 3B 84 A2 ...S8.......r;..
>>>>>> 01C0: 1B F9 D7 BF 34 00 5A FE F4 CE 09 0C EA F2 27 9A ....4.Z.......'.
>>>>>> 01D0: BD DD 93 37 E2 DF 60 CC 8A F7 C6 4B 08 30 0D 78 ...7..`....K.0.x
>>>>>> 01E0: 5C EB 49 34 DB 8B EB 55 33 0C 82 03 07 FD 3D FC \.I4...U3.....=.
>>>>>> 01F0: 49 11 88 1C F6 67 7F 0B 48 AA EC 1B AF 04 46 CF I....g..H.....F.
>>>>>> 0200: 09 C5 8E B3 F8 92 C4 56 3D 8F 0E 1D 9F D3 0C FE .......V=.......
>>>>>> 0210: 94 23 15 53 8E 1F 5E C4 FA 44 03 3B 1B B0 0A 2D .#.S..^..D.;...-
>>>>>> 0220: 71 D4 B5 AC 1F 52 D7 25 9F A0 C8 4B 9B 32 B8 22 q....R.%...K.2."
>>>>>> 0230: 3F AF B3 19 16 8C 2A 5C B4 89 BF 82 DC 4D AF 22 ?.....*\.....M."
>>>>>> 0240: 2A 33 73 90 F3 C8 FF 2E C1 B3 83 D2 7A 29 4E 15 *3s.........z)N.
>>>>>> 0250: 5D 87 86 F6 94 EA B0 B4 A4 41 B9 C5 BA 89 B8 E9 ]........A......
>>>>>> 0260: 26 E7 96 BC 4D 8A FD 86 C7 C9 2A 96 75 C3 07 EF &...M.....*.u...
>>>>>> 0270: 5C 5A 4E 91 71 7D 1B A2 12 88 C5 D0 D2 5E 79 E1 \ZN.q........^y.
>>>>>> 0280: 6C 65 35 5E 6C CC 56 47 FD F3 96 78 7A A0 08 7E le5^l.VG...xz...
>>>>>> 0290: DB 3C CC 10 76 15 37 46 48 6B 2D 23 7B A3 44 5A .<..v.7FHk-#..DZ
>>>>>> 02A0: A4 46 B3 CE E2 15 BA 4C D2 93 16 57 1F BA 75 72 .F.....L...W..ur
>>>>>> 02B0: BF 8C 66 50 F2 A4 F6 05 84 E5 47 12 30 BE 34 70 ..fP......G.0.4p
>>>>>> 02C0: 4D 0F BD FE 54 E8 B1 CE B5 7F 6E 97 38 09 29 1F M...T.....n.8.).
>>>>>> 02D0: 41 2D 2E 9E 75 D8 77 0C 08 DB 5C B4 EE 3F FE E2 A-..u.w...\..?..
>>>>>> 02E0: DC CF D0 ED C8 02 50 C4 EE B3 1D 8A 9E 9B EE 5E ......P........^
>>>>>> 02F0: 14 BA C2 5A B0 83 8E 5C E5 7B 69 2B 69 8C F1 AA ...Z...\..i+i...
>>>>>> 0300: 2D D5 D1 3D 9D 42 1B B2 50 5D BE 7E E4 11 D2 90 -..=.B..P]......
>>>>>> 0310: 0B 54 71 7F D6 13 88 E2 FE 37 9F 70 B5 0B 57 79 .Tq......7.p..Wy
>>>>>> )
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.753 CEST|SSLSocketInputRecord.java:249|READ: TLSv1.2 application_data, length = 800
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.755 CEST|SSLCipher.java:1915|Plaintext after DECRYPTION (
>>>>>> 0000: 0B 00 03 0B 00 00 03 07 00 03 02 30 82 02 FE 30 ...........0...0
>>>>>> 0010: 82 01 E6 A0 03 02 01 02 02 08 20 C3 8D C4 49 66 .......... ...If
>>>>>> 0020: D0 02 30 0D 06 09 2A 86 48 86 F7 0D 01 01 0B 05 ..0...*.H.......
>>>>>> 0030: 00 30 3E 31 3C 30 3A 06 03 55 04 03 0C 33 65 38 .0>1<0:..U...3e8
>>>>>> 0040: 61 63 30 32 66 61 30 64 36 35 61 38 34 32 31 39 ac02fa0d65a84219
>>>>>> 0050: 30 31 36 30 34 35 64 62 38 62 30 35 63 34 38 35 016045db8b05c485
>>>>>> 0060: 62 34 65 63 64 66 2E 6E 65 74 74 79 2E 74 65 73 b4ecdf.netty.tes
>>>>>> 0070: 74 30 20 17 0D 31 33 30 38 30 32 30 37 35 31 33 t0 ..13080207513
>>>>>> 0080: 36 5A 18 0F 39 39 39 39 31 32 33 31 32 33 35 39 6Z..999912312359
>>>>>> 0090: 35 39 5A 30 3E 31 3C 30 3A 06 03 55 04 03 0C 33 59Z0>1<0:..U...3
>>>>>> 00A0: 65 38 61 63 30 32 66 61 30 64 36 35 61 38 34 32 e8ac02fa0d65a842
>>>>>> 00B0: 31 39 30 31 36 30 34 35 64 62 38 62 30 35 63 34 19016045db8b05c4
>>>>>> 00C0: 38 35 62 34 65 63 64 66 2E 6E 65 74 74 79 2E 74 85b4ecdf.netty.t
>>>>>> 00D0: 65 73 74 30 82 01 22 30 0D 06 09 2A 86 48 86 F7 est0.."0...*.H..
>>>>>> 00E0: 0D 01 01 01 05 00 03 82 01 0F 00 30 82 01 0A 02 ...........0....
>>>>>> 00F0: 82 01 01 00 DB F8 70 4E DC 2D 14 44 12 AF 0D 48 ......pN.-.D...H
>>>>>> 0100: 09 1D B8 48 94 1C 9E F1 7F DC 6C D1 F7 94 3A B7 ...H......l...:.
>>>>>> 0110: 5C E3 85 07 3E CB E1 76 4A 2C 32 17 4B E1 5E 42 \...>..vJ,2.K.^B
>>>>>> 0120: A4 80 50 CA 36 A2 D9 94 F9 59 23 D0 AA 2B B2 13 ..P.6....Y#..+..
>>>>>> 0130: 23 6D 45 DF 13 52 A4 4E 28 D3 30 99 5A 81 AD 8C #mE..R.N(.0.Z...
>>>>>> 0140: DB 15 55 B7 6D 5F 44 89 09 35 66 C8 2F 47 56 14 ..U.m_D..5f./GV.
>>>>>> 0150: B5 B2 46 AE CE 5D DC A0 C8 59 08 89 6F 5B DB F2 ..F..]...Y..o[..
>>>>>> 0160: D8 69 E3 C1 80 44 F6 DA 46 ED 1D 20 80 12 3F 81 .i...D..F.. ..?.
>>>>>> 0170: 95 27 F6 EB 9F B5 AC DC 72 01 70 46 18 67 1C 08 .'......r.pF.g..
>>>>>> 0180: AC C4 6D CA 80 48 12 87 3A 05 69 EA 92 EA 95 00 ..m..H..:.i.....
>>>>>> 0190: 1F B9 2C BA 83 F3 B3 1B 37 1E B3 7C D7 46 B1 AE ..,.....7....F..
>>>>>> 01A0: D4 DD E9 04 8C C0 23 00 96 E3 6F 67 E7 66 65 61 ......#...og.fea
>>>>>> 01B0: F6 11 D2 7A FE 44 42 83 9D 1A CF 20 80 EC 58 04 ...z.DB.... ..X.
>>>>>> 01C0: A6 10 78 41 7B 34 C3 FA FD 2A 08 94 72 2F 3D AE ..xA.4...*..r/=.
>>>>>> 01D0: B0 58 16 63 EE DA 81 42 44 DB 21 C7 23 69 93 BB .X.c...BD.!.#i..
>>>>>> 01E0: 64 40 16 78 01 8A 52 57 94 C0 AD 57 04 F4 C4 6B d at .x..RW...W...k
>>>>>> 01F0: 90 C6 46 C7 02 03 01 00 01 30 0D 06 09 2A 86 48 ..F......0...*.H
>>>>>> 0200: 86 F7 0D 01 01 0B 05 00 03 82 01 01 00 4B FC 37 .............K.7
>>>>>> 0210: B5 E6 F2 A6 98 D8 58 2B 39 CE 8F 6B 51 93 80 0F ......X+9..kQ...
>>>>>> 0220: 80 39 BD DA 53 7D D3 1B 00 11 F3 A7 FE 9C B7 FA .9..S...........
>>>>>> 0230: 05 23 DA A2 17 10 7C E7 89 89 DE C5 90 5B 98 22 .#...........[."
>>>>>> 0240: 7B 97 97 EA 2A B3 E4 6A 33 F8 FC 47 41 39 06 E1 ....*..j3..GA9..
>>>>>> 0250: 98 63 6C 0E 2A 92 FF 3D B1 62 D7 27 FF 2B 2B DF .cl.*..=.b.'.++.
>>>>>> 0260: B7 B2 95 87 C7 B5 21 45 1E 73 F8 B5 0D D6 13 0C ......!E.s......
>>>>>> 0270: 1D 25 35 6B D7 5F 18 DF 30 A1 8B 72 DD C6 31 B1 .%5k._..0..r..1.
>>>>>> 0280: 07 2A F2 DF 1F 1E 36 23 0C FF F9 FB DA E8 B5 2B .*....6#.......+
>>>>>> 0290: 3B 8B B6 4C 37 EF D3 27 07 B9 1E D4 64 4B 82 D4 ;..L7..'....dK..
>>>>>> 02A0: 32 78 C6 D1 61 6E 9A BF 41 10 23 0B 27 CD C7 77 2x..an..A.#.'..w
>>>>>> 02B0: 03 73 B2 F6 12 D2 56 9C 29 A2 BD 31 40 F6 5F 0C .s....V.)..1 at ._.
>>>>>> 02C0: 17 56 4F 30 34 95 77 87 9C 43 B0 74 C5 92 05 43 .VO04.w..C.t...C
>>>>>> 02D0: 97 12 48 5B 7B 58 66 89 0A C1 8C CD 89 14 E0 5A ..H[.Xf........Z
>>>>>> 02E0: 78 23 29 10 71 6C 5D 94 D5 FB C0 96 51 C1 0D 93 x#).ql].....Q...
>>>>>> 02F0: 64 91 45 82 5A 53 88 56 5D 7A AE 88 E8 07 7D 02 d.E.ZS.V]z......
>>>>>> 0300: 7D 44 9D CA 73 E5 6F 14 27 8B 6F 86 6C 00 00 .D..s.o.'.o.l..
>>>>>> )
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.756 CEST|CertificateMessage.java:1148|Consuming server Certificate handshake message (
>>>>>> "Certificate": {
>>>>>> "certificate_request_context": "",
>>>>>> "certificate_list": [
>>>>>> {
>>>>>> "certificate" : {
>>>>>> "version" : "v3",
>>>>>> "serial number" : "20 C3 8D C4 49 66 D0 02",
>>>>>> "signature algorithm": "SHA256withRSA",
>>>>>> "issuer" : "CN=e8ac02fa0d65a84219016045db8b05c485b4ecdf.netty.test",
>>>>>> "not before" : "2013-08-02 09:51:36.000 CEST",
>>>>>> "not after" : "10000-01-01 24:59:59.000 CET",
>>>>>> "subject" : "CN=e8ac02fa0d65a84219016045db8b05c485b4ecdf.netty.test",
>>>>>> "subject public key" : "RSA"}
>>>>>> "extensions": {
>>>>>> <no extension>
>>>>>> }
>>>>>> },
>>>>>> ]
>>>>>> }
>>>>>> )
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.756 CEST|SSLExtensions.java:148|Ignore unavailable extension: status_request
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.757 CEST|SSLSocketInputRecord.java:458|Raw read (
>>>>>> 0000: 17 03 03 01 19 .....
>>>>>> )
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.757 CEST|SSLSocketInputRecord.java:213|READ: TLSv1.2 application_data, length = 281
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.757 CEST|SSLSocketInputRecord.java:458|Raw read (
>>>>>> 0000: DE 53 C0 74 78 C3 82 0D E8 46 C0 0A F4 56 6E 6B .S.tx....F...Vnk
>>>>>> 0010: B5 39 77 41 20 21 BA 07 99 2B BF 8D 0A 41 C9 B8 .9wA !...+...A..
>>>>>> 0020: BC 0F C1 8E C5 76 36 F0 7A B6 9A F8 38 4D 4D 4D .....v6.z...8MMM
>>>>>> 0030: 70 33 BE 8F 8C ED BE BC 60 49 B8 41 65 E9 04 D9 p3......`I.Ae...
>>>>>> 0040: 45 43 AA 41 6D F7 67 7B 03 6D FF E0 4D 76 53 CE EC.Am.g..m..MvS.
>>>>>> 0050: C1 73 3E 1C CD 87 40 B7 25 56 54 0C 3E CA D7 1D .s>... at .%VT.>...
>>>>>> 0060: 45 80 41 E8 36 B7 FC 57 38 BB 21 EB E7 EA 19 A1 E.A.6..W8.!.....
>>>>>> 0070: 39 25 B0 44 8B FD 30 87 86 7A 47 03 C1 02 AC FD 9%.D..0..zG.....
>>>>>> 0080: 67 89 4B 27 34 04 20 AE 91 65 7C 8C 4A 58 C5 77 g.K'4. ..e..JX.w
>>>>>> 0090: 46 2E DD A8 23 CA 5C 28 49 25 23 3D 8A 93 B9 10 F...#.\(I%#=....
>>>>>> 00A0: 24 0D DE DC 98 AC AA B0 CB 51 80 D7 F8 E7 20 23 $........Q.... #
>>>>>> 00B0: 41 64 A6 44 93 A7 E1 A7 91 62 4F 3A 73 F6 24 04 Ad.D.....bO:s.$.
>>>>>> 00C0: C3 E8 25 65 37 D9 1B 7A 65 AE DE C6 29 67 2E C1 ..%e7..ze...)g..
>>>>>> 00D0: F7 4C 5C 18 D7 14 98 90 ED 9D AD F5 98 A7 FD 93 .L\.............
>>>>>> 00E0: 53 F4 B5 90 C9 CB FD 54 8E 5F 53 23 E3 73 94 BD S......T._S#.s..
>>>>>> 00F0: A4 07 B7 E3 C7 83 7B 17 CF 51 4A 9E 9C 05 3C 51 .........QJ...<Q
>>>>>> 0100: 4D C7 A1 7A D6 4D A6 58 E5 3A D4 12 B9 B9 46 9C M..z.M.X.:....F.
>>>>>> 0110: AB 1D C5 6B F9 6A 85 CB E2 ...k.j...
>>>>>> )
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.758 CEST|SSLSocketInputRecord.java:249|READ: TLSv1.2 application_data, length = 281
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.758 CEST|SSLCipher.java:1915|Plaintext after DECRYPTION (
>>>>>> 0000: 0F 00 01 04 08 04 01 00 30 11 28 CE 64 4E 08 BA ........0.(.dN..
>>>>>> 0010: A1 BE 46 D9 3D 14 29 1A EB 5A B0 1A 09 B7 11 A5 ..F.=.)..Z......
>>>>>> 0020: 9A F4 22 17 87 5F 87 D5 63 04 8E 27 EC 3A F8 52 ..".._..c..'.:.R
>>>>>> 0030: 36 F4 2F CF 47 D2 5C CE 0A F0 29 EF 63 03 B1 64 6./.G.\...).c..d
>>>>>> 0040: B8 45 6E 39 71 E3 BD 25 95 31 25 85 4C FB C6 AD .En9q..%.1%.L...
>>>>>> 0050: C8 43 96 4E FA AD B9 98 17 43 61 FB 9B 87 CE 94 .C.N.....Ca.....
>>>>>> 0060: CF 74 6F 3B AA 6A C8 80 8F C7 C8 05 E4 EF 42 6C .to;.j........Bl
>>>>>> 0070: D4 01 9E 25 5E 34 E8 2D 93 BD BB 05 49 2F 9D B6 ...%^4.-....I/..
>>>>>> 0080: F6 91 2F D1 E5 CB 1B 9E F6 DB 18 32 1D F5 66 A0 ../........2..f.
>>>>>> 0090: 63 5D 25 01 B6 F6 1B 41 07 3E 90 61 37 49 38 17 c]%....A.>.a7I8.
>>>>>> 00A0: B0 15 C9 AD 0C 7A 05 8D B4 48 BB 03 2D DE 5E 49 .....z...H..-.^I
>>>>>> 00B0: 99 8B 74 53 5F 73 9B 18 FD 95 2A C3 F9 A3 8B 59 ..tS_s....*....Y
>>>>>> 00C0: 1A ED 2C 55 C2 22 10 1E 7A FC 38 0A 99 FC 30 89 ..,U."..z.8...0.
>>>>>> 00D0: 03 89 1C CD A7 DE E5 35 FD E9 E0 05 96 09 AF DD .......5........
>>>>>> 00E0: 51 A3 7F C7 16 C5 96 8D CA CC 53 50 DC C5 C6 BA Q.........SP....
>>>>>> 00F0: D6 05 28 18 BA 99 F8 0F 7F 24 9F D5 6B 93 DE BC ..(......$..k...
>>>>>> 0100: EB 23 85 D9 D3 41 56 44 .#...AVD
>>>>>> )
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.762 CEST|CertificateVerify.java:1128|Consuming CertificateVerify handshake message (
>>>>>> "CertificateVerify": {
>>>>>> "signature algorithm": rsa_pss_rsae_sha256
>>>>>> "signature": {
>>>>>> 0000: 30 11 28 CE 64 4E 08 BA A1 BE 46 D9 3D 14 29 1A 0.(.dN....F.=.).
>>>>>> 0010: EB 5A B0 1A 09 B7 11 A5 9A F4 22 17 87 5F 87 D5 .Z........".._..
>>>>>> 0020: 63 04 8E 27 EC 3A F8 52 36 F4 2F CF 47 D2 5C CE c..'.:.R6./.G.\.
>>>>>> 0030: 0A F0 29 EF 63 03 B1 64 B8 45 6E 39 71 E3 BD 25 ..).c..d.En9q..%
>>>>>> 0040: 95 31 25 85 4C FB C6 AD C8 43 96 4E FA AD B9 98 .1%.L....C.N....
>>>>>> 0050: 17 43 61 FB 9B 87 CE 94 CF 74 6F 3B AA 6A C8 80 .Ca......to;.j..
>>>>>> 0060: 8F C7 C8 05 E4 EF 42 6C D4 01 9E 25 5E 34 E8 2D ......Bl...%^4.-
>>>>>> 0070: 93 BD BB 05 49 2F 9D B6 F6 91 2F D1 E5 CB 1B 9E ....I/..../.....
>>>>>> 0080: F6 DB 18 32 1D F5 66 A0 63 5D 25 01 B6 F6 1B 41 ...2..f.c]%....A
>>>>>> 0090: 07 3E 90 61 37 49 38 17 B0 15 C9 AD 0C 7A 05 8D .>.a7I8......z..
>>>>>> 00A0: B4 48 BB 03 2D DE 5E 49 99 8B 74 53 5F 73 9B 18 .H..-.^I..tS_s..
>>>>>> 00B0: FD 95 2A C3 F9 A3 8B 59 1A ED 2C 55 C2 22 10 1E ..*....Y..,U."..
>>>>>> 00C0: 7A FC 38 0A 99 FC 30 89 03 89 1C CD A7 DE E5 35 z.8...0........5
>>>>>> 00D0: FD E9 E0 05 96 09 AF DD 51 A3 7F C7 16 C5 96 8D ........Q.......
>>>>>> 00E0: CA CC 53 50 DC C5 C6 BA D6 05 28 18 BA 99 F8 0F ..SP......(.....
>>>>>> 00F0: 7F 24 9F D5 6B 93 DE BC EB 23 85 D9 D3 41 56 44 .$..k....#...AVD
>>>>>> }
>>>>>> }
>>>>>> )
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.762 CEST|SSLSocketInputRecord.java:458|Raw read (
>>>>>> 0000: 17 03 03 00 35 ....5
>>>>>> )
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.762 CEST|SSLSocketInputRecord.java:213|READ: TLSv1.2 application_data, length = 53
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.763 CEST|SSLSocketInputRecord.java:458|Raw read (
>>>>>> 0000: F6 A7 CD EA 89 34 B2 DB C4 28 91 18 C9 03 98 B6 .....4...(......
>>>>>> 0010: DF 49 4E F5 2E 23 32 90 F8 13 C7 AE 18 E3 E5 64 .IN..#2........d
>>>>>> 0020: D9 E4 A5 B0 5C F0 4A 3E AF EC 28 8D 09 78 AB EE ....\.J>..(..x..
>>>>>> 0030: 38 1B 9E 45 04 8..E.
>>>>>> )
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.763 CEST|SSLSocketInputRecord.java:249|READ: TLSv1.2 application_data, length = 53
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.763 CEST|SSLCipher.java:1915|Plaintext after DECRYPTION (
>>>>>> 0000: 14 00 00 20 F2 93 6B 71 2B FA F3 1B BF 68 98 D1 ... ..kq+....h..
>>>>>> 0010: AA 5E B0 AF 5D 3B A6 B5 8F 79 BA 64 E8 A1 34 5F .^..];...y.d..4_
>>>>>> 0020: D4 2B ED 8C .+..
>>>>>> )
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.764 CEST|Finished.java:860|Consuming server Finished handshake message (
>>>>>> "Finished": {
>>>>>> "verify data": {
>>>>>> 0000: F2 93 6B 71 2B FA F3 1B BF 68 98 D1 AA 5E B0 AF ..kq+....h...^..
>>>>>> 0010: 5D 3B A6 B5 8F 79 BA 64 E8 A1 34 5F D4 2B ED 8C ];...y.d..4_.+..
>>>>>> }'}
>>>>>> )
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.765 CEST|SSLCipher.java:1824|KeyLimit read side: algorithm = AES/GCM/NOPADDING:KEYUPDATE
>>>>>> countdown value = 137438953472
>>>>>> javax.net.ssl|WARNING|01|main|2018-09-17 11:51:54.765 CEST|CertificateMessage.java:1015|No signature_algorithms(_cert) in ClientHello
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.766 CEST|CertificateMessage.java:1081|No available client authentication scheme
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.766 CEST|CertificateMessage.java:1116|Produced client Certificate message (
>>>>>> "Certificate": {
>>>>>> "certificate_request_context": "",
>>>>>> "certificate_list": [
>>>>>> ]
>>>>>> }
>>>>>> )
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.766 CEST|SSLSocketOutputRecord.java:241|WRITE: TLS13 handshake, length = 8
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.766 CEST|SSLCipher.java:2020|Plaintext before ENCRYPTION (
>>>>>> 0000: 0B 00 00 04 00 00 00 00 16 00 00 00 00 00 00 00 ................
>>>>>> 0010: 00 00 00 00 00 00 00 00 00 .........
>>>>>> )
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.767 CEST|SSLSocketOutputRecord.java:255|Raw write (
>>>>>> 0000: 17 03 03 00 29 E5 32 E4 5B 13 E7 D4 A1 78 FE 38 ....).2.[....x.8
>>>>>> 0010: 26 22 CB C1 04 88 3A 3A 2D D4 A1 31 5A 78 65 50 &"....::-..1ZxeP
>>>>>> 0020: 51 45 67 FA 9F 55 35 E1 49 C5 3B 3B 91 B1 QEg..U5.I.;;..
>>>>>> )
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.767 CEST|CertificateVerify.java:1059|No X.509 credentials negotiated for CertificateVerify
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.768 CEST|Finished.java:658|Produced client Finished handshake message (
>>>>>> "Finished": {
>>>>>> "verify data": {
>>>>>> 0000: D8 47 0B A0 DF BB BF 49 E4 55 B9 D3 FB 3D B0 DD .G.....I.U...=..
>>>>>> 0010: 57 1E 08 28 20 7E E1 0B E3 EB 12 10 09 76 D1 8F W..( ........v..
>>>>>> }'}
>>>>>> )
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.768 CEST|SSLSocketOutputRecord.java:241|WRITE: TLS13 handshake, length = 36
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.769 CEST|SSLCipher.java:2020|Plaintext before ENCRYPTION (
>>>>>> 0000: 14 00 00 20 D8 47 0B A0 DF BB BF 49 E4 55 B9 D3 ... .G.....I.U..
>>>>>> 0010: FB 3D B0 DD 57 1E 08 28 20 7E E1 0B E3 EB 12 10 .=..W..( .......
>>>>>> 0020: 09 76 D1 8F 16 00 00 00 00 00 00 00 00 00 00 00 .v..............
>>>>>> 0030: 00 00 00 00 00 .....
>>>>>> )
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.769 CEST|SSLSocketOutputRecord.java:255|Raw write (
>>>>>> 0000: 17 03 03 00 45 0F 4D 84 52 28 59 96 92 52 D1 AB ....E.M.R(Y..R..
>>>>>> 0010: DB 86 64 25 31 FF 9D 8E D7 84 63 B5 03 E2 9E 06 ..d%1.....c.....
>>>>>> 0020: 3C 8C C2 22 F3 7A EE 55 AD 8C F5 5C F6 04 9A E2 <..".z.U...\....
>>>>>> 0030: 6D BA E4 C4 9F 97 C3 DA BC D3 CB 8C 2C 9E BF FD m...........,...
>>>>>> 0040: A3 9F C1 A2 79 51 75 B7 AE B6 ....yQu...
>>>>>> )
>>>>>> javax.net.ssl|DEBUG|01|main|2018-09-17 11:51:54.770 CEST|SSLCipher.java:1978|KeyLimit write side: algorithm = AES/GCM/NOPADDING:KEYUPDATE
>>>>>> countdown value = 137438953472
>>>>>> javax.net.ssl|DEBUG|0C|Thread-0|2018-09-17 11:51:54.772 CEST|SSLSocketInputRecord.java:458|Raw read (
>>>>>> 0000: 17 03 03 00 13 .....
>>>>>> )
>>>>>> javax.net.ssl|DEBUG|0C|Thread-0|2018-09-17 11:51:54.772 CEST|SSLSocketInputRecord.java:213|READ: TLSv1.2 application_data, length = 19
>>>>>> javax.net.ssl|DEBUG|0C|Thread-0|2018-09-17 11:51:54.772 CEST|SSLSocketInputRecord.java:458|Raw read (
>>>>>> 0000: 4F 0D C7 65 8B 24 B4 92 A2 26 31 8C 81 AF 8F F7 O..e.$...&1.....
>>>>>> 0010: AC C3 B3 ...
>>>>>> )
>>>>>> javax.net.ssl|DEBUG|0C|Thread-0|2018-09-17 11:51:54.772 CEST|SSLSocketInputRecord.java:249|READ: TLSv1.2 application_data, length = 19
>>>>>> javax.net.ssl|DEBUG|0C|Thread-0|2018-09-17 11:51:54.773 CEST|SSLCipher.java:1915|Plaintext after DECRYPTION (
>>>>>> 0000: 02 74 .t
>>>>>> )
>>>>>> javax.net.ssl|DEBUG|0C|Thread-0|2018-09-17 11:51:54.774 CEST|Alert.java:232|Received alert message (
>>>>>> "Alert": {
>>>>>> "level" : "fatal",
>>>>>> "description": "certificate_required"
>>>>>> }
>>>>>> )
>>>>>> javax.net.ssl|ERROR|0C|Thread-0|2018-09-17 11:51:54.774 CEST|TransportContext.java:313|Fatal (CERTIFICATE_REQUIRED): Received fatal alert: certificate_required (
>>>>>> "throwable" : {
>>>>>> javax.net.ssl.SSLHandshakeException: Received fatal alert: certificate_required
>>>>>> at java.base/sun.security.ssl.Alert.createSSLException(Alert.java:128)
>>>>>> at java.base/sun.security.ssl.Alert.createSSLException(Alert.java:117)
>>>>>> at java.base/sun.security.ssl.TransportContext.fatal(TransportContext.java:308)
>>>>>> at java.base/sun.security.ssl.Alert$AlertConsumer.consume(Alert.java:279)
>>>>>> at java.base/sun.security.ssl.TransportContext.dispatch(TransportContext.java:181)
>>>>>> at java.base/sun.security.ssl.SSLTransport.decode(SSLTransport.java:164)
>>>>>> at java.base/sun.security.ssl.SSLSocketImpl.decode(SSLSocketImpl.java:1155)
>>>>>> at java.base/sun.security.ssl.SSLSocketImpl.readApplicationRecord(SSLSocketImpl.java:1125)
>>>>>> at java.base/sun.security.ssl.SSLSocketImpl$AppInputStream.read(SSLSocketImpl.java:823)
>>>>>> at java.base/sun.security.ssl.SSLSocketImpl$AppInputStream.read(SSLSocketImpl.java:758)
>>>>>> at ReproducerClient$1.run(ReproducerClient.java:33)
>>>>>> at java.base/java.lang.Thread.run(Thread.java:834)}
>>>>>> )
>>>>>> javax.net.ssl|ALL|0C|Thread-0|2018-09-17 11:51:54.775 CEST|SSLSessionImpl.java:753|Invalidated session: Session(1537177914725|TLS_AES_128_GCM_SHA256)
>>>>>> javax.net.ssl|DEBUG|0C|Thread-0|2018-09-17 11:51:54.776 CEST|SSLSocketImpl.java:1361|close the underlying socket
>>>>>> javax.net.ssl|DEBUG|0C|Thread-0|2018-09-17 11:51:54.776 CEST|SSLSocketImpl.java:1380|close the SSL connection (initiative)
>>>>>> javax.net.ssl|WARNING|0C|Thread-0|2018-09-17 11:51:54.777 CEST|SSLSocketImpl.java:1289|handling exception (
>>>>>> "throwable" : {
>>>>>> javax.net.ssl.SSLHandshakeException: Received fatal alert: certificate_required
>>>>>> at java.base/sun.security.ssl.Alert.createSSLException(Alert.java:128)
>>>>>> at java.base/sun.security.ssl.Alert.createSSLException(Alert.java:117)
>>>>>> at java.base/sun.security.ssl.TransportContext.fatal(TransportContext.java:308)
>>>>>> at java.base/sun.security.ssl.Alert$AlertConsumer.consume(Alert.java:279)
>>>>>> at java.base/sun.security.ssl.TransportContext.dispatch(TransportContext.java:181)
>>>>>> at java.base/sun.security.ssl.SSLTransport.decode(SSLTransport.java:164)
>>>>>> at java.base/sun.security.ssl.SSLSocketImpl.decode(SSLSocketImpl.java:1155)
>>>>>> at java.base/sun.security.ssl.SSLSocketImpl.readApplicationRecord(SSLSocketImpl.java:1125)
>>>>>> at java.base/sun.security.ssl.SSLSocketImpl$AppInputStream.read(SSLSocketImpl.java:823)
>>>>>> at java.base/sun.security.ssl.SSLSocketImpl$AppInputStream.read(SSLSocketImpl.java:758)
>>>>>> at ReproducerClient$1.run(ReproducerClient.java:33)
>>>>>> at java.base/java.lang.Thread.run(Thread.java:834)}
>>>>>> )
>>>>>> Bye
>>>>>> Norman
>>>>>>> On 16. Sep 2018, at 15:54, Norman Maurer <norman.maurer at googlemail.com <mailto:norman.maurer at googlemail.com><mailto:norman.maurer at googlemail.com>> wrote:
>>>>>>>
>>>>>>> Will do, but not before tomorrow (I will also share the client side code). That said there is nothing special about the keymanager.
>>>>>>> Like I said before it sends the cert when using „want client with“, it just seems it may be too late.
>>>>>>>
>>>>>>>
>>>>>>> Bye
>>>>>>> Norman
>>>>>>>
>>>>>>>> Am 15.09.2018 um 08:26 schrieb Bradford Wetmore <bradford.wetmore at oracle.com <mailto:bradford.wetmore at oracle.com><mailto:bradford.wetmore at oracle.com>>:
>>>>>>>>
>>>>>>>> It would greatly help if you can provide the client side debug output so we can see what's going on locally:
>>>>>>>>
>>>>>>>> -Djavax.net.debug=all or System.setProperty(....)
>>>>>>>>
>>>>>>>> Please also let us know if you are using a custom client keymanager. It's possible that it isn't properly selecting an entity to use, in which case an empty message will be sent.
>>>>>>>>
>>>>>>>> Brad
>>>>>>>>
>>>>>>>>
>>>>>>>>>> On 9/14/2018 11:18 PM, Norman Maurer wrote:
>>>>>>>>>> Ok will try to find time today.
>>>>>>>>>> Am 15.09.2018 um 08:08 schrieb Xuelei Fan <xuelei.fan at oracle.com <mailto:xuelei.fan at oracle.com><mailto:xuelei.fan at oracle.com>>:
>>>>>>>>>>
>>>>>>>>>> Hi Norman,
>>>>>>>>>>
>>>>>>>>>> I have not had a chance to look into the details. But sure, it helps a lot if you can provide a java client to reproduce the issue.
>>>>>>>>>>
>>>>>>>>>> Thanks,
>>>>>>>>>> Xuelei
>>>>>>>>>>
>>>>>>>>>>> On 9/14/2018 10:29 PM, Norman Maurer wrote:
>>>>>>>>>>> Is there any more details you need ?
>>>>>>>>>>> Just wondering. If you say so I can also provide a pure jdk client (without the Netty wrapper) that shows the problem when used with OpenSSL on the server in the next days.
>>>>>>>>>>> Bye
>>>>>>>>>>> Norman
>>>>>>>>>>>> Am 13.09.2018 um 21:07 schrieb Norman Maurer <norman.maurer at googlemail.com <mailto:norman.maurer at googlemail.com><mailto:norman.maurer at googlemail.com>>:
>>>>>>>>>>>>
>>>>>>>>>>>> Hi all,
>>>>>>>>>>>>
>>>>>>>>>>>> I am currently in the process of adding TLS 1.3 support into netty-tcnative[1] which uses JNI to make use of OpenSSL for it. During this work I noticed that I received test-failures when mutual auth is used and the JDK implementation is used on the client side. When using the JDK implementation on the server and client side all works as expected. Also if I use another protocol (like TLSv1.2) all works as expected.
>>>>>>>>>>>>
>>>>>>>>>>>> The problem I am observing is that the client seems to sent the certificate “too late” and so the server (which uses openssl) will report and error that the client did not provide an certificate (even when it was required).
>>>>>>>>>>>>
>>>>>>>>>>>> To reproduce this you can use openssl s_server like this and just create your usual SSLSocket with a KeyManagerFactory configured.
>>>>>>>>>>>>
>>>>>>>>>>>> ./bin/openssl s_server -tls1_3 -cert ~/Documents/workspace/netty/handler/src/test/resources/io/netty/handler/ssl/test.crt -key ~/Documents/workspace/netty/handler/src/test/resources/io/netty/handler/ssl/test_unencrypted.pem -4 -accept localhost:8443 -state -debug -Verify 1
>>>>>>>>>>>>
>>>>>>>>>>>> When now try to connect to it via the JDK TLS1.3 implementation I see the following output:
>>>>>>>>>>>> SSL_accept:before SSL initialization
>>>>>>>>>>>> read from 0x7fe400f050c0 [0x7fe40300f603] (5 bytes => 5 (0x5))
>>>>>>>>>>>> 0000 - 16 03 03 01 60 ....`
>>>>>>>>>>>> read from 0x7fe400f050c0 [0x7fe40300f608] (352 bytes => 352 (0x160))
>>>>>>>>>>>> 0000 - 01 00 01 5c 03 03 22 da-02 d7 86 40 6e 7d c5 a7 ...\..".... at n}..
>>>>>>>>>>>> 0010 - ea 34 47 a4 fa d0 bb 92-f5 62 ec f6 21 e5 ec da .4G......b..!...
>>>>>>>>>>>> 0020 - d6 6b 75 aa b9 34 20 b7-57 a6 83 7b c8 bc a2 0f .ku..4 .W..{....
>>>>>>>>>>>> 0030 - 52 82 11 6f a3 1a 84 c5-4b fd e0 80 58 3c 2a bf R..o....K...X<*.
>>>>>>>>>>>> 0040 - af 54 32 4c 7d 4f fe 00-14 c0 2c c0 2b c0 2f c0 .T2L}O....,.+./.
>>>>>>>>>>>> 0050 - 13 c0 14 00 9c 00 2f 00-35 13 01 13 02 01 00 00 ....../.5.......
>>>>>>>>>>>> 0060 - ff 00 05 00 05 01 00 00-00 00 00 0a 00 20 00 1e ............. ..
>>>>>>>>>>>> 0070 - 00 17 00 18 00 19 00 09-00 0a 00 0b 00 0c 00 0d ................
>>>>>>>>>>>> 0080 - 00 0e 00 16 01 00 01 01-01 02 01 03 01 04 00 0b ................
>>>>>>>>>>>> 0090 - 00 02 01 00 00 0d 00 28-00 26 04 03 05 03 06 03 .......(.&......
>>>>>>>>>>>> 00a0 - 08 04 08 05 08 06 08 09-08 0a 08 0b 04 01 05 01 ................
>>>>>>>>>>>> 00b0 - 06 01 04 02 03 03 03 01-03 02 02 03 02 01 02 02 ................
>>>>>>>>>>>> 00c0 - 00 32 00 28 00 26 04 03-05 03 06 03 08 04 08 05 .2.(.&..........
>>>>>>>>>>>> 00d0 - 08 06 08 09 08 0a 08 0b-04 01 05 01 06 01 04 02 ................
>>>>>>>>>>>> 00e0 - 03 03 03 01 03 02 02 03-02 01 02 02 00 11 00 09 ................
>>>>>>>>>>>> 00f0 - 00 07 02 00 04 00 00 00-00 00 17 00 00 00 2b 00 ..............+.
>>>>>>>>>>>> 0100 - 09 08 03 04 03 03 03 02-03 01 00 2d 00 02 01 01 ...........-....
>>>>>>>>>>>> 0110 - 00 33 00 47 00 45 00 17-00 41 04 4e da b3 f2 63 .3.G.E...A.N...c
>>>>>>>>>>>> 0120 - ee 6e bf e3 af 73 be c9-92 c5 ec 70 ff c7 64 b8 .n...s.....p..d.
>>>>>>>>>>>> 0130 - 8a 9a cc fd f9 d6 36 ef-ce e0 dc 81 01 2f 87 57 ......6....../.W
>>>>>>>>>>>> 0140 - 56 f0 e4 2d 8b c8 73 14-eb 5f 21 0a 5e 94 46 ba V..-..s.._!.^.F.
>>>>>>>>>>>> 0150 - de d1 33 57 4c b5 b3 66-c9 26 fb ff 01 00 01 00 ..3WL..f.&......
>>>>>>>>>>>> SSL_accept:before SSL initialization
>>>>>>>>>>>> SSL_accept:SSLv3/TLS read client hello
>>>>>>>>>>>> SSL_accept:SSLv3/TLS write server hello
>>>>>>>>>>>> SSL_accept:SSLv3/TLS write change cipher spec
>>>>>>>>>>>> SSL_accept:TLSv1.3 write encrypted extensions
>>>>>>>>>>>> SSL_accept:SSLv3/TLS write certificate request
>>>>>>>>>>>> SSL_accept:SSLv3/TLS write certificate
>>>>>>>>>>>> SSL_accept:TLSv1.3 write server certificate verify
>>>>>>>>>>>> write to 0x7fe400f050c0 [0x7fe403018a00] (1430 bytes => 1430 (0x596))
>>>>>>>>>>>> 0000 - 16 03 03 00 9b 02 00 00-97 03 03 bc 7f 3b 07 ad .............;..
>>>>>>>>>>>> 0010 - fb 21 9c 6f 7c 4a 9d 84-9a 82 6e 9c 1a b4 e3 5d .!.o|J....n....]
>>>>>>>>>>>> 0020 - a8 d3 9d 52 a7 e1 93 c3-cc 8c 82 20 b7 57 a6 83 ...R....... .W..
>>>>>>>>>>>> 0030 - 7b c8 bc a2 0f 52 82 11-6f a3 1a 84 c5 4b fd e0 {....R..o....K..
>>>>>>>>>>>> 0040 - 80 58 3c 2a bf af 54 32-4c 7d 4f fe 13 01 00 00 .X<*..T2L}O.....
>>>>>>>>>>>> 0050 - 4f 00 2b 00 02 03 04 00-33 00 45 00 17 00 41 04 O.+.....3.E...A.
>>>>>>>>>>>> 0060 - 7d 81 11 ab ff a6 60 e7-5f 23 82 ed 22 35 76 24 }.....`._#.."5v$
>>>>>>>>>>>> 0070 - b0 47 09 25 0c 79 b9 07-5b 3e 28 b7 3c d8 d3 ce .G.%.y..[>(.<...
>>>>>>>>>>>> 0080 - 6b 89 c6 01 21 28 c9 97-ae 50 a5 e7 43 35 ae c7 k...!(...P..C5..
>>>>>>>>>>>> 0090 - 73 10 60 62 57 25 9b c9-f1 93 28 70 03 44 e1 a0 s.`bW%....(p.D..
>>>>>>>>>>>> 00a0 - 14 03 03 00 01 01 17 03-03 00 27 0f 8b fb 2d 33 ..........'...-3
>>>>>>>>>>>> 00b0 - 72 c6 a8 28 0b 7d e1 c3-b7 d0 f3 d9 18 5b ca e0 r..(.}.......[..
>>>>>>>>>>>> 00c0 - 56 09 74 48 ba 28 16 1c-15 11 d9 fa 6e b3 bc b9 V.tH.(......n...
>>>>>>>>>>>> 00d0 - 4d 54 17 03 03 00 42 35-53 5b 9a 8e 09 df 86 c4 MT....B5S[......
>>>>>>>>>>>> 00e0 - 00 28 05 6d a8 c9 bb 38-e2 77 72 73 25 26 e3 65 .(.m...8.wrs%&.e
>>>>>>>>>>>> 00f0 - 58 d8 fd 15 8a ce ea 97-8a 50 1e e3 f9 c5 dc 96 X........P......
>>>>>>>>>>>> 0100 - f0 3b 3c 0a 12 41 58 9d-ab f8 3a 28 0a 1f 61 e9 .;<..AX...:(..a.
>>>>>>>>>>>> 0110 - df 68 a9 1f 84 66 f7 5b-d7 17 03 03 03 20 8f b5 .h...f.[..... ..
>>>>>>>>>>>> 0120 - b4 52 44 80 d0 b9 63 3d-80 9c 8b 02 fc f3 d5 bb .RD...c=........
>>>>>>>>>>>> 0130 - a9 2a 4f 5b 4a cc 77 78-96 75 95 20 b8 12 c4 a6 .*O[J.wx.u. ....
>>>>>>>>>>>> 0140 - e6 82 ea 56 56 e2 5f 97-65 99 7e 6e 3d b1 66 ee ...VV._.e.~n=.f.
>>>>>>>>>>>> 0150 - 10 4c f7 6d 9b 73 86 14-7a 81 f8 b1 27 af 08 ee .L.m.s..z...'...
>>>>>>>>>>>> 0160 - ce 26 90 34 73 3d b7 45-8d 85 29 a8 65 19 e7 02 .&.4s=.E..).e...
>>>>>>>>>>>> 0170 - e5 55 4a 27 f1 b1 6a a4-11 cc 6c af 78 6d 22 5c .UJ'..j...l.xm"\
>>>>>>>>>>>> 0180 - 33 73 e3 ad 7f 8d 1b d3-75 95 66 64 2d 0e f1 3e 3s......u.fd-..>
>>>>>>>>>>>> 0190 - c2 30 df a1 7e ce a3 50-c3 4e 68 f6 36 b3 4e 45 .0..~..P.Nh.6.NE
>>>>>>>>>>>> 01a0 - 9c ac e9 f2 0d 7c e3 73-6a 40 ab 6e 6e f9 d8 20 .....|.sj at .nn..
>>>>>>>>>>>> 01b0 - 9c f3 04 32 cd 1d df 18-e5 4d e3 e8 b1 38 59 f8 ...2.....M...8Y.
>>>>>>>>>>>> 01c0 - 28 67 2e ca af a2 8b 88-ce ca 48 a6 07 2b a6 9a (g........H..+..
>>>>>>>>>>>> 01d0 - 0e 88 5b d7 0b d9 31 77-97 8d 6c 2b f5 60 24 61 ..[...1w..l+.`$a
>>>>>>>>>>>> 01e0 - a8 5c 47 5d 7c 66 f0 9b-1f e4 76 93 38 f6 78 3e .\G]|f....v.8.x>
>>>>>>>>>>>> 01f0 - 69 29 72 f9 d9 4b cb 05-03 e4 f2 d6 24 e1 91 ee i)r..K......$...
>>>>>>>>>>>> 0200 - 85 37 d7 7b c3 5c 35 90-08 cd b1 cc 76 11 fc 00 .7.{.\5.....v...
>>>>>>>>>>>> 0210 - 12 7e 89 7b 70 e6 ca fe-0b 26 b6 bb ac fe 4b 9f .~.{p....&....K.
>>>>>>>>>>>> 0220 - ec cf 41 69 42 3a 3e 41-f9 b0 c0 93 5b 70 1f c7 ..AiB:>A....[p..
>>>>>>>>>>>> 0230 - 11 00 3d ec 66 5a 1a ca-31 89 22 27 02 dd a0 cb ..=.fZ..1."'....
>>>>>>>>>>>> 0240 - 39 14 25 ee 30 44 e8 62-97 bf 8e 16 63 40 c4 11 9.%.0D.b....c at ..
>>>>>>>>>>>> 0250 - a6 d9 32 b1 3c 86 35 bb-9f f1 4d 71 9f a5 4f 78 ..2.<.5...Mq..Ox
>>>>>>>>>>>> 0260 - 0a e8 96 dd 4d 10 c3 48-f2 db 67 57 2d cd dc 23 ....M..H..gW-..#
>>>>>>>>>>>> 0270 - 3a 8d 6a 61 47 20 ff c8-33 cd e9 f7 47 4c 68 4f :.jaG ..3...GLhO
>>>>>>>>>>>> 0280 - 19 2f 8b e3 b1 90 ac 66-a7 cf 5c e6 d2 05 21 25 ./.....f..\...!%
>>>>>>>>>>>> 0290 - d2 d8 f0 43 8c 55 01 ef-d6 8f c0 27 87 0d 21 d5 ...C.U.....'..!.
>>>>>>>>>>>> 02a0 - 2b 2b 6f db e8 85 ea cd-6e 9c 5d 56 d5 31 c1 f2 ++o.....n.]V.1..
>>>>>>>>>>>> 02b0 - 97 2f 5a 83 7a 2b 71 03-65 e0 b6 4a 56 37 de e1 ./Z.z+q.e..JV7..
>>>>>>>>>>>> 02c0 - 80 3a c4 cc 5a ac 3b 9a-7a bf f7 6b fe a8 69 e9 .:..Z.;.z..k..i.
>>>>>>>>>>>> 02d0 - 58 09 59 bd 46 bd d2 a3-bc ad 1c 10 53 c8 29 7b X.Y.F.......S.){
>>>>>>>>>>>> 02e0 - be 63 00 d6 e5 a8 d6 ab-b2 bc 8b e1 2c 0e 24 2a .c..........,.$*
>>>>>>>>>>>> 02f0 - c2 31 2d d8 6e 1f 19 93-d7 54 e1 1e 28 ce 72 83 .1-.n....T..(.r.
>>>>>>>>>>>> 0300 - ff 05 18 f2 fc e9 0c b3-0c 1b d5 96 c2 d8 fc 76 ...............v
>>>>>>>>>>>> 0310 - 37 a9 5a ef 8e e9 b6 71-21 f3 bd c1 85 23 85 22 7.Z....q!....#."
>>>>>>>>>>>> 0320 - 3d c4 1c c9 31 8b 7e 00-8f 8e b4 9f 05 d4 80 6b =...1.~........k
>>>>>>>>>>>> 0330 - 98 4c a8 82 68 ff 1a a5-28 e2 9b 03 a1 a7 b1 00 .L..h...(.......
>>>>>>>>>>>> 0340 - 02 2b 2d e2 e1 87 8c e8-0a fb 0b 79 54 ca 3d d5 .+-........yT.=.
>>>>>>>>>>>> 0350 - 6a dd b7 b7 87 42 2b 47-49 da e9 0a 82 0a c9 8f j....B+GI.......
>>>>>>>>>>>> 0360 - 57 f7 1e 03 ca 8d 16 bc-21 3a 6a ee b9 b8 fa f0 W.......!:j.....
>>>>>>>>>>>> 0370 - d9 18 35 9f 35 ac d8 6e-9a 8a 0d 56 10 1e 1f 5a ..5.5..n...V...Z
>>>>>>>>>>>> 0380 - ba ec e4 fe 1a 92 b4 31-35 43 1d 99 b9 12 fa ff .......15C......
>>>>>>>>>>>> 0390 - 99 2b 88 e0 58 ec 9c dc-8f 67 ef 2a c2 e2 64 5d .+..X....g.*..d]
>>>>>>>>>>>> 03a0 - 66 76 1c d0 aa 00 30 59-b1 f5 b1 55 9f ad 60 e9 fv....0Y...U..`.
>>>>>>>>>>>> 03b0 - 3d 03 1e d0 8b 4d bf 74-ac bc bb 1c 83 14 c5 e0 =....M.t........
>>>>>>>>>>>> 03c0 - f4 fc 70 9e f4 22 a0 78-04 fe c8 b1 17 65 f6 94 ..p..".x.....e..
>>>>>>>>>>>> 03d0 - 47 82 50 4a b6 32 74 ae-5b 38 5a 2e d9 b0 6a 45 G.PJ.2t.[8Z...jE
>>>>>>>>>>>> 03e0 - 74 e8 f0 22 fe d3 b0 11-c3 fd 72 4f da 77 7a ba t.."......rO.wz.
>>>>>>>>>>>> 03f0 - 26 3e 61 0c 63 21 17 a6-b2 13 6e 71 5c f2 0d ad &>a.c!....nq\...
>>>>>>>>>>>> 0400 - f2 d1 19 71 51 9e a4 1b-b0 30 24 e0 71 7d 87 80 ...qQ....0$.q}..
>>>>>>>>>>>> 0410 - a9 5a e9 bc db e4 4f 50-4d a1 bc bc 2c 4b 66 98 .Z....OPM...,Kf.
>>>>>>>>>>>> 0420 - d4 e4 b0 76 0f d2 db a5-a5 39 9e f2 5b ea 34 c1 ...v.....9..[.4.
>>>>>>>>>>>> 0430 - 62 ab 47 51 3b 37 17 45-54 31 18 f3 f1 ca 17 03 b.GQ;7.ET1......
>>>>>>>>>>>> 0440 - 03 01 19 dd 50 50 f5 0c-f2 c9 3c b4 8f 63 cc 4a ....PP....<..c.J
>>>>>>>>>>>> 0450 - a7 50 c9 91 9b 79 9a 2a-5c 47 d3 77 f6 56 69 90 .P...y.*\G.w.Vi.
>>>>>>>>>>>> 0460 - 98 cd ff bd c1 2a 49 fc-0d d4 7e cc 7e 44 af c4 .....*I...~.~D..
>>>>>>>>>>>> 0470 - 61 47 e0 c1 76 b1 8c 2e-df 7e d0 82 e1 89 1f 04 aG..v....~......
>>>>>>>>>>>> 0480 - ae 64 bd 71 4d ae 1c 3c-e3 d3 39 5d 61 2a ea 70 .d.qM..<..9]a*.p
>>>>>>>>>>>> 0490 - 8c 31 6d a0 b1 72 a8 7a-5c 9c 11 08 b8 4d a5 c4 .1m..r.z\....M..
>>>>>>>>>>>> 04a0 - ad 1b 38 4a 6a 02 28 d4-d1 0f c8 9f 0b b3 02 18 ..8Jj.(.........
>>>>>>>>>>>> 04b0 - 82 2b bd 46 82 04 64 f0-41 b2 da f5 cd 9c f7 f3 .+.F..d.A.......
>>>>>>>>>>>> 04c0 - 73 30 58 ca 12 ec ea 90-85 1c 75 09 0a 70 b8 80 s0X.......u..p..
>>>>>>>>>>>> 04d0 - 3d 02 17 3e 9b 83 04 b5-dd 9e e6 18 17 65 83 a5 =..>.........e..
>>>>>>>>>>>> 04e0 - 59 7d 4b 98 da bd 8b aa-d6 aa c5 1c 7d 87 56 e3 Y}K.........}.V.
>>>>>>>>>>>> 04f0 - 74 d8 e9 7b eb b3 3d f7-7c 3c 0a e9 a8 2e 04 0d t..{..=.|<......
>>>>>>>>>>>> 0500 - 6a e7 83 e0 ec 99 43 6a-8b 1c 73 59 7a c8 cd 6e j.....Cj..sYz..n
>>>>>>>>>>>> 0510 - 4a 14 73 ff 9a fb 71 94-d5 50 a9 d9 e0 dd 02 4c J.s...q..P.....L
>>>>>>>>>>>> 0520 - 2b 67 9e da 9e fa 2d 67-49 df 13 10 ed 35 3e 73 +g....-gI....5>s
>>>>>>>>>>>> 0530 - 07 20 17 fb 0b ef f6 d0-b7 68 1c 65 21 a6 e3 3b . .......h.e!..;
>>>>>>>>>>>> 0540 - bf 7b 84 cd 9e f5 76 2a-0d 4f b8 c3 c8 15 08 e9 .{....v*.O......
>>>>>>>>>>>> 0550 - 0f 3c 50 49 12 97 a8 d7-f1 a3 16 da 17 03 03 00 .<PI............
>>>>>>>>>>>> 0560 - 35 22 dd a2 9d 25 98 2c-35 b8 00 29 fa a1 dd ba 5"...%.,5..)....
>>>>>>>>>>>> 0570 - 72 b9 fe e5 85 85 f0 f1-3b 4e f5 7c 58 c8 2a da r.......;N.|X.*.
>>>>>>>>>>>> 0580 - d2 75 94 3b c1 7a 7c 7e-db 5b fe 8a 2d 3f 8c 9a .u.;.z|~.[..-?..
>>>>>>>>>>>> 0590 - 6e 79 ab 2b ff 1a ny.+..
>>>>>>>>>>>> SSL_accept:SSLv3/TLS write finished
>>>>>>>>>>>> SSL_accept:TLSv1.3 early data
>>>>>>>>>>>> read from 0x7fe400f050c0 [0x7fe40300f603] (5 bytes => 5 (0x5))
>>>>>>>>>>>> 0000 - 14 03 03 00 01 .....
>>>>>>>>>>>> read from 0x7fe400f050c0 [0x7fe40300f608] (1 bytes => 1 (0x1))
>>>>>>>>>>>> 0000 - 01 .
>>>>>>>>>>>> read from 0x7fe400f050c0 [0x7fe40300f603] (5 bytes => 5 (0x5))
>>>>>>>>>>>> 0000 - 17 03 03 00 3d ....=
>>>>>>>>>>>> read from 0x7fe400f050c0 [0x7fe40300f608] (61 bytes => 61 (0x3D))
>>>>>>>>>>>> 0000 - 38 e7 bb 2c 5b af b6 5f-37 d8 3e 7e bb f4 04 f5 8..,[.._7.>~....
>>>>>>>>>>>> 0010 - e1 28 b5 e5 07 5a ec ce-da 2f f3 b6 45 61 cf ef .(...Z.../..Ea..
>>>>>>>>>>>> 0020 - 90 fb 57 b8 f3 20 45 27-60 d4 26 51 38 77 e4 bc ..W.. E'`.&Q8w..
>>>>>>>>>>>> 0030 - b7 64 d4 8b 73 25 41 9e-fe d3 9d 5f 53 .d..s%A...._S
>>>>>>>>>>>> SSL_accept:TLSv1.3 early data
>>>>>>>>>>>> write to 0x7fe400f050c0 [0x7fe403018a00] (24 bytes => 24 (0x18))
>>>>>>>>>>>> 0000 - 17 03 03 00 13 25 85 60-eb 7d c1 a8 15 49 d5 63 .....%.`.}...I.c
>>>>>>>>>>>> 0010 - 18 7f c6 ac ed 7f df 77- .......w
>>>>>>>>>>>> SSL3 alert write:fatal:unknown
>>>>>>>>>>>> SSL_accept:error in error
>>>>>>>>>>>> ERROR
>>>>>>>>>>>> 140736092021632:error:1417C0C7:SSL routines:tls_process_client_certificate:peer did not return a certificate:ssl/statem/statem_srvr.c:3654:
>>>>>>>>>>>> shutting down SSL
>>>>>>>>>>>> CONNECTION CLOSED
>>>>>>>>>>>>
>>>>>>>>>>>>
>>>>>>>>>>>>
>>>>>>>>>>>> When using openssl s_client all works as expected tho (thats also true if I use my native implementation on the client and server side that uses openssl):
>>>>>>>>>>>>
>>>>>>>>>>>> ./bin/openssl s_client -cert ~/Documents/workspace/netty/handler/src/test/resources/io/netty/handler/ssl/test.crt -key ~/Documents/workspace/netty/handler/src/test/resources/io/netty/handler/ssl/test_unencrypted.pem -state -tls1_3 -connect localhost:8443
>>>>>>>>>>>>
>>>>>>>>>>>> The interesting thing is if I use “-verify 1” and not “-Verify 1” with openssl which tells it I want to request a certificate but will also process if none is provided I receive the certificate at some point as seen here:
>>>>>>>>>>>>
>>>>>>>>>>>> SSL_accept:before SSL initialization
>>>>>>>>>>>> read from 0x7fdc58809fb0 [0x7fdc5901da03] (5 bytes => 5 (0x5))
>>>>>>>>>>>> 0000 - 16 03 03 01 60 ....`
>>>>>>>>>>>> read from 0x7fdc58809fb0 [0x7fdc5901da08] (352 bytes => 352 (0x160))
>>>>>>>>>>>> 0000 - 01 00 01 5c 03 03 61 c0-b3 ed 88 65 e6 cf 11 3f ...\..a....e...?
>>>>>>>>>>>> 0010 - c0 e0 f8 df a6 63 32 c2-ab 3d 61 6f 41 ed b1 4b .....c2..=aoA..K
>>>>>>>>>>>> 0020 - 53 0e 83 e5 a1 b8 20 c7-1b 8c b8 e6 b5 da 4e 4e S..... .......NN
>>>>>>>>>>>> 0030 - 3f 3c 61 7a ad 58 23 94-a7 32 79 2f db 9f 21 c0 ?<az.X#..2y/..!.
>>>>>>>>>>>> 0040 - 8e 0c c5 ce b1 c2 a4 00-14 c0 2c c0 2b c0 2f c0 ..........,.+./.
>>>>>>>>>>>> 0050 - 13 c0 14 00 9c 00 2f 00-35 13 01 13 02 01 00 00 ....../.5.......
>>>>>>>>>>>> 0060 - ff 00 05 00 05 01 00 00-00 00 00 0a 00 20 00 1e ............. ..
>>>>>>>>>>>> 0070 - 00 17 00 18 00 19 00 09-00 0a 00 0b 00 0c 00 0d ................
>>>>>>>>>>>> 0080 - 00 0e 00 16 01 00 01 01-01 02 01 03 01 04 00 0b ................
>>>>>>>>>>>> 0090 - 00 02 01 00 00 0d 00 28-00 26 04 03 05 03 06 03 .......(.&......
>>>>>>>>>>>> 00a0 - 08 04 08 05 08 06 08 09-08 0a 08 0b 04 01 05 01 ................
>>>>>>>>>>>> 00b0 - 06 01 04 02 03 03 03 01-03 02 02 03 02 01 02 02 ................
>>>>>>>>>>>> 00c0 - 00 32 00 28 00 26 04 03-05 03 06 03 08 04 08 05 .2.(.&..........
>>>>>>>>>>>> 00d0 - 08 06 08 09 08 0a 08 0b-04 01 05 01 06 01 04 02 ................
>>>>>>>>>>>> 00e0 - 03 03 03 01 03 02 02 03-02 01 02 02 00 11 00 09 ................
>>>>>>>>>>>> 00f0 - 00 07 02 00 04 00 00 00-00 00 17 00 00 00 2b 00 ..............+.
>>>>>>>>>>>> 0100 - 09 08 03 04 03 03 03 02-03 01 00 2d 00 02 01 01 ...........-....
>>>>>>>>>>>> 0110 - 00 33 00 47 00 45 00 17-00 41 04 52 dc d6 47 6e .3.G.E...A.R..Gn
>>>>>>>>>>>> 0120 - a1 de 9c 71 c2 54 0e 5c-9b 57 fb c8 aa 3f 19 f7 ...q.T.\.W...?..
>>>>>>>>>>>> 0130 - d3 a4 25 12 fa 3f 6c 6d-95 30 66 ca 63 b7 a1 dd ..%..?lm.0f.c...
>>>>>>>>>>>> 0140 - ae 9f 99 d6 a8 6b 20 4f-29 7a 74 58 ad 58 de 12 .....k O)ztX.X..
>>>>>>>>>>>> 0150 - d7 a5 9b 69 dc 27 ac ec-9e d4 04 ff 01 00 01 00 ...i.'..........
>>>>>>>>>>>> SSL_accept:before SSL initialization
>>>>>>>>>>>> SSL_accept:SSLv3/TLS read client hello
>>>>>>>>>>>> SSL_accept:SSLv3/TLS write server hello
>>>>>>>>>>>> SSL_accept:SSLv3/TLS write change cipher spec
>>>>>>>>>>>> SSL_accept:TLSv1.3 write encrypted extensions
>>>>>>>>>>>> SSL_accept:SSLv3/TLS write certificate request
>>>>>>>>>>>> SSL_accept:SSLv3/TLS write certificate
>>>>>>>>>>>> SSL_accept:TLSv1.3 write server certificate verify
>>>>>>>>>>>> write to 0x7fdc58809fb0 [0x7fdc59025e00] (1430 bytes => 1430 (0x596))
>>>>>>>>>>>> 0000 - 16 03 03 00 9b 02 00 00-97 03 03 8b c8 62 48 6c .............bHl
>>>>>>>>>>>> 0010 - f5 7c 73 d9 17 f8 63 a2-11 27 40 93 09 26 53 06 .|s...c..'@..&S.
>>>>>>>>>>>> 0020 - b3 62 df 46 26 b6 dc 59-29 b5 58 20 c7 1b 8c b8 .b.F&..Y).X ....
>>>>>>>>>>>> 0030 - e6 b5 da 4e 4e 3f 3c 61-7a ad 58 23 94 a7 32 79 ...NN?<az.X#..2y
>>>>>>>>>>>> 0040 - 2f db 9f 21 c0 8e 0c c5-ce b1 c2 a4 13 01 00 00 /..!............
>>>>>>>>>>>> 0050 - 4f 00 2b 00 02 03 04 00-33 00 45 00 17 00 41 04 O.+.....3.E...A.
>>>>>>>>>>>> 0060 - 07 63 1c 19 53 89 68 a8-0f ea 9e 4c 18 6f 2a ad .c..S.h....L.o*.
>>>>>>>>>>>> 0070 - 2a df eb 17 a2 08 94 c6-e3 c5 97 ae 0f c1 1a d7 *...............
>>>>>>>>>>>> 0080 - 0d d7 2e 6d 77 3d 30 a0-07 db 70 35 bb 37 dd 1e ...mw=0...p5.7..
>>>>>>>>>>>> 0090 - b6 f3 4d cb 13 97 7c 11-63 98 e8 64 2d a7 e6 cc ..M...|.c..d-...
>>>>>>>>>>>> 00a0 - 14 03 03 00 01 01 17 03-03 00 27 a3 73 d2 ee 2c ..........'.s..,
>>>>>>>>>>>> 00b0 - 2f 9c 8f 95 7f ca a3 89-bc b4 b3 b2 3c 8b 23 ef /...........<.#.
>>>>>>>>>>>> 00c0 - 36 66 23 c9 09 02 33 0d-dc 5d 36 61 44 89 8b ef 6f#...3..]6aD...
>>>>>>>>>>>> 00d0 - fd 13 17 03 03 00 42 f2-5b 3c 0c 27 5e 7f 97 4f ......B.[<.'^..O
>>>>>>>>>>>> 00e0 - 0f de 8c b9 0a a1 41 c7-c2 1e 92 99 6a d5 bd 12 ......A.....j...
>>>>>>>>>>>> 00f0 - 38 b6 b7 93 33 e9 8e 0f-44 93 f0 69 58 b6 41 22 8...3...D..iX.A"
>>>>>>>>>>>> 0100 - 46 e2 4a d5 d6 32 2b b8-a7 ae 3a c2 c5 2f e6 35 F.J..2+...:../.5
>>>>>>>>>>>> 0110 - 11 0c f1 9a 35 2a 87 ed-9e 17 03 03 03 20 a7 e2 ....5*....... ..
>>>>>>>>>>>> 0120 - fe ba c7 10 5b 9c cd 94-67 19 37 2d 46 59 ab 56 ....[...g.7-FY.V
>>>>>>>>>>>> 0130 - 6b dd a4 10 61 cc ed f1-71 a7 2d 6a 41 2e 2b da k...a...q.-jA.+.
>>>>>>>>>>>> 0140 - d1 35 fc 01 df 49 e5 90-1d 9b b2 03 0a 81 58 18 .5...I........X.
>>>>>>>>>>>> 0150 - 96 a1 db 31 19 98 35 5c-87 8f 6e 32 0a e6 c0 aa ...1..5\..n2....
>>>>>>>>>>>> 0160 - 9e 8e 72 e2 34 b3 b7 a3-d6 d1 66 c7 ce 93 fe 78 ..r.4.....f....x
>>>>>>>>>>>> 0170 - 17 c4 71 7c 42 15 c8 af-dc 4f 50 42 51 80 fc bf ..q|B....OPBQ...
>>>>>>>>>>>> 0180 - fc 54 d5 d8 59 20 9a 90-c4 78 97 9c 2d 4a d5 58 .T..Y ...x..-J.X
>>>>>>>>>>>> 0190 - be 81 79 23 59 22 9d 27-f8 bd a0 b2 98 b3 47 82 ..y#Y".'......G.
>>>>>>>>>>>> 01a0 - d3 52 b5 b5 91 ab 5c 76-52 c5 a5 95 2d 03 1c b7 .R....\vR...-...
>>>>>>>>>>>> 01b0 - 64 4d 0b 88 7f 15 0b c8-a8 90 50 9a b6 b1 9f b7 dM........P.....
>>>>>>>>>>>> 01c0 - 40 09 f2 5f 39 f8 9a 06-21 4d 67 10 0a 67 08 b6 @.._9...!Mg..g..
>>>>>>>>>>>> 01d0 - b5 9a 25 8c d5 ca 31 6a-8a 6b 01 93 7d 6f 1e 52 ..%...1j.k..}o.R
>>>>>>>>>>>> 01e0 - 98 96 9d fb e8 c1 07 ab-57 98 2d 1e 75 77 ef c2 ........W.-.uw..
>>>>>>>>>>>> 01f0 - 49 78 e0 b9 2b 32 23 7e-95 4d 3e 27 00 61 86 0c Ix..+2#~.M>'.a..
>>>>>>>>>>>> 0200 - 47 c7 79 e4 ee 9d ba c0-ea 62 f1 0d 8e 4a 91 30 G.y......b...J.0
>>>>>>>>>>>> 0210 - bc 4f 5a 98 26 30 66 ec-c4 63 8f 28 d5 1c 61 23 .OZ.&0f..c.(..a#
>>>>>>>>>>>> 0220 - ea e9 90 4e 36 d9 fa 31-7b 14 27 22 0a ae 9f 64 ...N6..1{.'"...d
>>>>>>>>>>>> 0230 - 40 3d e5 a0 5c 9d 3c 04-71 09 b0 7a 6b 51 a0 9c @=..\.<.q..zkQ..
>>>>>>>>>>>> 0240 - c0 61 32 ce 15 62 8e 29-b1 59 91 c0 17 2c b3 c5 .a2..b.).Y...,..
>>>>>>>>>>>> 0250 - f9 ed 07 65 3d 11 de 98-de 62 36 50 74 37 af 2d ...e=....b6Pt7.-
>>>>>>>>>>>> 0260 - 7d 86 55 c4 3e a2 83 ab-47 8d f2 b2 8d 1d 75 83 }.U.>...G.....u.
>>>>>>>>>>>> 0270 - b5 e4 41 87 a7 a3 85 b0-5e 4e 2e 9c 8c b0 1b 83 ..A.....^N......
>>>>>>>>>>>> 0280 - 7b 54 79 c9 60 ea 7d ed-06 fa dd 24 40 f1 53 9e {Ty.`.}....$@.S.
>>>>>>>>>>>> 0290 - 43 79 25 53 9c c7 6e 95-ab 9f 96 59 cd b9 7b a8 Cy%S..n....Y..{.
>>>>>>>>>>>> 02a0 - a0 23 13 69 db a9 c9 e7-1a 8e e1 9b 54 94 1c 44 .#.i........T..D
>>>>>>>>>>>> 02b0 - 50 08 8b dd eb 4e 2b bb-d7 c9 c2 33 8c a1 b3 65 P....N+....3...e
>>>>>>>>>>>> 02c0 - 06 e6 9d ac 11 16 21 58-40 8d 59 e6 67 e5 31 02 ......!X at .Y.g.1.
>>>>>>>>>>>> 02d0 - 15 8d 29 80 20 66 ba c3-56 93 95 5c 65 4b 41 00 ..). f..V..\eKA.
>>>>>>>>>>>> 02e0 - c5 71 12 12 f5 20 4f 59-be 77 06 10 6e 48 85 5c .q... OY.w..nH.\
>>>>>>>>>>>> 02f0 - ff a2 c4 ae fb 4d 95 f5-cc f6 61 20 33 b7 92 1d .....M....a 3...
>>>>>>>>>>>> 0300 - ac a8 f1 b2 b0 88 c6 7b-8b 00 53 30 6d 4a d1 42 .......{..S0mJ.B
>>>>>>>>>>>> 0310 - b3 3e 85 f5 84 e1 c6 ab-10 9d 61 03 46 ff 2d 81 .>........a.F.-.
>>>>>>>>>>>> 0320 - 15 4f 84 d1 4c ee f4 a6-a0 ec 50 60 a0 d1 ff df .O..L.....P`....
>>>>>>>>>>>> 0330 - 8a 97 f6 7d fb 8f fb 60-18 d4 f1 1f 92 4d d8 69 ...}...`.....M.i
>>>>>>>>>>>> 0340 - b1 92 97 44 0f 3c 8a aa-47 07 48 d4 07 2d 3e f2 ...D.<..G.H..->.
>>>>>>>>>>>> 0350 - c4 a7 16 35 a7 17 71 ef-98 84 24 67 12 58 30 3b ...5..q...$g.X0;
>>>>>>>>>>>> 0360 - 1d 41 8d e5 12 52 95 64-e5 88 35 99 d7 c3 58 40 .A...R.d..5...X@
>>>>>>>>>>>> 0370 - f9 55 9b 9f e5 33 15 70-41 d7 45 ba a4 fc 75 ea .U...3.pA.E...u.
>>>>>>>>>>>> 0380 - a4 ae f0 68 ea 64 d8 f5-06 68 a9 75 22 4d 43 cc ...h.d...h.u"MC.
>>>>>>>>>>>> 0390 - ff 50 cc ac 6e fd 43 dd-eb e4 c8 dd 4b 6c 12 bb .P..n.C.....Kl..
>>>>>>>>>>>> 03a0 - f1 d4 5e 11 4a 86 90 0b-f8 3a 2e 23 db 61 5a 1f ..^.J....:.#.aZ.
>>>>>>>>>>>> 03b0 - 7e 11 00 92 21 68 1f b5-ab f2 f8 38 5e 62 ea f8 ~...!h.....8^b..
>>>>>>>>>>>> 03c0 - da ef c2 6e a0 b8 20 e4-69 49 b3 1f 15 84 0b 9b ...n.. .iI......
>>>>>>>>>>>> 03d0 - ce b0 6f 36 32 7f 7e bf-e8 d7 18 7a 58 60 f4 04 ..o62.~....zX`..
>>>>>>>>>>>> 03e0 - cc 36 bf 06 cd ec e5 9b-19 03 96 09 fb af 8f c3 .6..............
>>>>>>>>>>>> 03f0 - 98 b4 02 aa e8 55 81 aa-c4 fe 06 81 30 a0 c7 b2 .....U......0...
>>>>>>>>>>>> 0400 - f8 e2 30 00 d7 a0 54 7f-5f d7 ef a6 f8 41 58 34 ..0...T._....AX4
>>>>>>>>>>>> 0410 - f5 f0 18 69 8d e6 7a 23-78 90 8f b1 05 c5 b5 7f ...i..z#x.......
>>>>>>>>>>>> 0420 - e0 f2 c7 fa c8 36 5b 53-7e cf e6 75 d3 54 b4 69 .....6[S~..u.T.i
>>>>>>>>>>>> 0430 - 68 43 0d 6a d2 83 cc 13-6d ca bf 83 3c 90 17 03 hC.j....m...<...
>>>>>>>>>>>> 0440 - 03 01 19 96 dc 49 26 ce-1d 8e 86 3d bd cb 00 5e .....I&....=...^
>>>>>>>>>>>> 0450 - ee f6 e7 1d 16 7a ca ef-fa 6d 16 40 b6 99 d0 c1 .....z...m. at ....
>>>>>>>>>>>> 0460 - df 0b 5f 51 60 a8 24 e0-61 82 13 40 da 88 38 3a .._Q`.$.a.. at ..8:
>>>>>>>>>>>> 0470 - 26 1d 80 51 c4 b1 95 35-95 3c 91 35 28 17 49 d8 &..Q...5.<.5(.I.
>>>>>>>>>>>> 0480 - c3 45 be 32 98 3e 02 07-3b 01 20 2b 51 e1 1a 94 .E.2.>..;. +Q...
>>>>>>>>>>>> 0490 - b9 be 96 aa 7a 13 09 ff-d5 a9 63 d4 6f 49 cb b5 ....z.....c.oI..
>>>>>>>>>>>> 04a0 - 23 ab 7f 8c e2 63 f0 5c-5c 27 1e 04 a8 71 0c c0 #....c.\\'...q..
>>>>>>>>>>>> 04b0 - 89 cd ed 18 8d 5b 75 ac-af f3 68 6d cc ba 20 38 .....[u...hm.. 8
>>>>>>>>>>>> 04c0 - b5 7c 09 47 29 28 e2 26-57 57 1f f0 f3 18 fd 6f .|.G)(.&WW.....o
>>>>>>>>>>>> 04d0 - 27 42 a4 e3 de bb e5 d6-09 7d 25 b1 98 97 ad 33 'B.......}%....3
>>>>>>>>>>>> 04e0 - 68 35 92 07 80 23 f1 66-20 5d 74 f3 02 c5 51 ff h5...#.f ]t...Q.
>>>>>>>>>>>> 04f0 - 07 a9 e9 0e 3e 74 da 2e-8f 3b 16 be e6 94 1b 66 ....>t...;.....f
>>>>>>>>>>>> 0500 - bb b2 a2 1e 7c 7b ff 5e-a4 36 2a ba 0b cd 7f e9 ....|{.^.6*.....
>>>>>>>>>>>> 0510 - 86 bb 5e 30 f5 57 92 52-82 b6 2e da 71 b7 22 c2 ..^0.W.R....q.".
>>>>>>>>>>>> 0520 - 90 c4 69 46 07 df 6c 3f-05 8b 19 3e ce b9 75 0d ..iF..l?...>..u.
>>>>>>>>>>>> 0530 - 4b 97 37 ae 94 e2 d6 3c-91 e6 82 c7 a1 78 79 2c K.7....<.....xy,
>>>>>>>>>>>> 0540 - 9a a3 d5 45 94 ad e2 c8-ab fd 81 ec 62 87 f7 75 ...E........b..u
>>>>>>>>>>>> 0550 - e3 70 79 8e 82 3b c5 45-0d d0 33 5f 17 03 03 00 .py..;.E..3_....
>>>>>>>>>>>> 0560 - 35 da e0 74 2a 06 41 5a-64 1e 54 94 29 73 43 3f 5..t*.AZd.T.)sC?
>>>>>>>>>>>> 0570 - e5 24 a8 ba b2 7e 6b 26-82 fc d9 f6 dd 19 05 4a .$...~k&.......J
>>>>>>>>>>>> 0580 - 2c 1a f3 bb 16 1d 38 95-a6 d3 a8 58 f6 a3 41 c7 ,.....8....X..A.
>>>>>>>>>>>> 0590 - 92 44 35 24 25 0e .D5$%.
>>>>>>>>>>>> SSL_accept:SSLv3/TLS write finished
>>>>>>>>>>>> SSL_accept:TLSv1.3 early data
>>>>>>>>>>>> read from 0x7fdc58809fb0 [0x7fdc5901da03] (5 bytes => 5 (0x5))
>>>>>>>>>>>> 0000 - 14 03 03 00 01 .....
>>>>>>>>>>>> read from 0x7fdc58809fb0 [0x7fdc5901da08] (1 bytes => 1 (0x1))
>>>>>>>>>>>> 0000 - 01 .
>>>>>>>>>>>> read from 0x7fdc58809fb0 [0x7fdc5901da03] (5 bytes => 5 (0x5))
>>>>>>>>>>>> 0000 - 17 03 03 00 3d ....=
>>>>>>>>>>>> read from 0x7fdc58809fb0 [0x7fdc5901da08] (61 bytes => 61 (0x3D))
>>>>>>>>>>>> 0000 - ad dd 3e d9 ee ab 56 65-50 1c 72 2a d8 62 7f 90 ..>...VeP.r*.b..
>>>>>>>>>>>> 0010 - 13 71 7d 37 39 40 fb 89-8f 05 4b 39 44 9d 4d 67 .q}79 at ....K9D.Mg
>>>>>>>>>>>> 0020 - e3 41 29 b6 3e e8 fe 04-1b 8e eb 7a 4c e2 14 a0 .A).>......zL...
>>>>>>>>>>>> 0030 - b1 c2 47 3f 94 35 ed ab-8a d1 75 3b ba ..G?.5....u;.
>>>>>>>>>>>> SSL_accept:TLSv1.3 early data
>>>>>>>>>>>> SSL_accept:SSLv3/TLS read client certificate
>>>>>>>>>>>> SSL_accept:SSLv3/TLS read finished
>>>>>>>>>>>> write to 0x7fdc58809fb0 [0x7fdc59025e00] (223 bytes => 223 (0xDF))
>>>>>>>>>>>> 0000 - 17 03 03 00 da 52 1f 48-00 f4 31 13 90 7f 9c c2 .....R.H..1.....
>>>>>>>>>>>> 0010 - fc 70 1a fc f7 4a 48 e7-31 ad 37 ab b5 2b 4e 5c .p...JH.1.7..+N\
>>>>>>>>>>>> 0020 - e8 d8 6d e9 af 6c 4f c1-9e 7b ea ff ef b3 eb 74 ..m..lO..{.....t
>>>>>>>>>>>> 0030 - 27 67 10 21 66 5b 32 13-31 bc 99 d5 1c 6c 79 55 'g.!f[2.1....lyU
>>>>>>>>>>>> 0040 - f3 3e f6 4b 07 4d a9 78-3d 12 8a f5 38 ef d9 f4 .>.K.M.x=...8...
>>>>>>>>>>>> 0050 - 48 e0 2c 35 94 06 4f eb-09 e6 70 fb 59 95 7a c8 H.,5..O...p.Y.z.
>>>>>>>>>>>> 0060 - 24 dd 24 e2 f9 63 b9 3c-f2 66 86 c4 73 44 53 fd $.$..c.<.f..sDS.
>>>>>>>>>>>> 0070 - ca 67 8f 01 d6 db 70 f9-60 bc 50 11 51 72 dc 63 .g....p.`.P.Qr.c
>>>>>>>>>>>> 0080 - 12 ca 4f 23 e2 c5 d1 1d-e5 b0 d4 ec 89 ca 28 be ..O#..........(.
>>>>>>>>>>>> 0090 - 9c 30 83 40 02 a4 62 a8-5c b3 20 1a ab 39 b7 7b .0. at ..b.\. ..9.{
>>>>>>>>>>>> 00a0 - 89 13 39 87 73 be a8 f8-60 13 31 0a 48 5c 79 b9 ..9.s...`.1.H\y.
>>>>>>>>>>>> 00b0 - cc 4a 51 e3 0d d2 b4 93-c0 1f 3a 22 b3 fa 24 a0 .JQ.......:"..$.
>>>>>>>>>>>> 00c0 - 7c f6 76 79 d0 2d 5b 1a-ff a6 e9 e1 40 d3 b1 8c |.vy.-[..... at ...
>>>>>>>>>>>> 00d0 - 0a fa fa de f3 8e d6 ad-9a 22 6b 67 0b 88 18 ........."kg...
>>>>>>>>>>>> SSL_accept:SSLv3/TLS write session ticket
>>>>>>>>>>>> write to 0x7fdc58809fb0 [0x7fdc59025e00] (223 bytes => 223 (0xDF))
>>>>>>>>>>>> 0000 - 17 03 03 00 da 46 aa ea-6a 37 b1 35 e8 41 c8 b3 .....F..j7.5.A..
>>>>>>>>>>>> 0010 - 84 25 af 1c 36 a3 6d 78-a4 44 4a 83 52 ef 13 7c .%..6.mx.DJ.R..|
>>>>>>>>>>>> 0020 - 8f 18 d3 4c f8 22 c8 b3-ad d0 d0 5b 47 a0 43 da ...L.".....[G.C.
>>>>>>>>>>>> 0030 - d2 6e 04 8f dc c9 56 90-58 87 62 63 4c cc 31 ec .n....V.X.bcL.1.
>>>>>>>>>>>> 0040 - b8 c9 18 be 41 32 e1 3c-00 41 2a f1 4d 5c 2d 44 ....A2.<.A*.M\-D
>>>>>>>>>>>> 0050 - 8c aa e1 f0 ed 38 ee 44-64 e5 fd ea 58 3b 84 5d .....8.Dd...X;.]
>>>>>>>>>>>> 0060 - 83 39 21 2e fe 79 4d 76-10 65 87 0f 3c ac df 28 .9!..yMv.e..<..(
>>>>>>>>>>>> 0070 - 49 f8 60 eb be 49 e4 0a-0b 6a 03 2b 9d cf 9b a5 I.`..I...j.+....
>>>>>>>>>>>> 0080 - 03 56 58 32 c2 b2 59 f9-0a 0d f0 ae af ff 20 19 .VX2..Y....... .
>>>>>>>>>>>> 0090 - e5 6e e4 86 2f 5e 3f 7d-47 d5 73 ae 89 48 a7 66 .n../^?}G.s..H.f
>>>>>>>>>>>> 00a0 - fb 2d 83 60 e8 8b ab 27-12 db 24 78 54 eb 14 2d .-.`...'..$xT..-
>>>>>>>>>>>> 00b0 - b7 c6 17 2d 3c 91 57 ac-6e 35 b8 c3 fa c2 42 48 ...-<.W.n5....BH
>>>>>>>>>>>> 00c0 - 2a cb aa 98 32 89 8a ce-0c f7 cd 5e fb bf 6d 33 *...2......^..m3
>>>>>>>>>>>> 00d0 - 08 50 cf 1e 06 bb a1 98-be a4 a9 51 9a b0 34 .P.........Q..4
>>>>>>>>>>>> SSL_accept:SSLv3/TLS write session ticket
>>>>>>>>>>>> write to 0x7fdc58809fb0 [0x7fdc59021c03] (23 bytes => 23 (0x17))
>>>>>>>>>>>> 0000 - 17 03 03 00 12 c5 9b 73-cc 91 7e 48 cb 25 31 a0 .......s..~H.%1.
>>>>>>>>>>>> 0010 - 67 41 db bb 0f 62 d8 gA...b.
>>>>>>>>>>>> write to 0x7fdc58809fb0 [0x7fdc59021c03] (23 bytes => 23 (0x17))
>>>>>>>>>>>> 0000 - 17 03 03 00 12 0f dd 3f-c1 7c e6 b0 cc ea f0 13 .......?.|......
>>>>>>>>>>>> 0010 - 00 d8 01 de ef 7c bb .....|.
>>>>>>>>>>>> read from 0x7fdc58809fb0 [0x7fdc5901da03] (5 bytes => 5 (0x5))
>>>>>>>>>>>> 0000 - 17 03 03 00 1e .....
>>>>>>>>>>>> read from 0x7fdc58809fb0 [0x7fdc5901da08] (30 bytes => 30 (0x1E))
>>>>>>>>>>>> 0000 - d6 88 44 82 cb 23 16 ba-c9 a4 fb 55 51 08 90 c1 ..D..#.....UQ...
>>>>>>>>>>>> 0010 - bf bd a1 7f 0e 37 b0 b4-b5 df f1 07 6c 07 .....7......l.
>>>>>>>>>>>> I am a clientwrite to 0x7fdc58809fb0 [0x7fdc59021c03] (23 bytes => 23 (0x17))
>>>>>>>>>>>> 0000 - 17 03 03 00 12 c0 70 5d-14 e7 69 57 0a d8 64 16 ......p]..iW..d.
>>>>>>>>>>>> 0010 - 0c 90 06 0f c3 4d 1d .....M.
>>>>>>>>>>>> read from 0x7fdc58809fb0 [0x7fdc5901da03] (5 bytes => 5 (0x5))
>>>>>>>>>>>> 0000 - 17 03 03 00 13 .....
>>>>>>>>>>>> read from 0x7fdc58809fb0 [0x7fdc5901da08] (19 bytes => 19 (0x13))
>>>>>>>>>>>> 0000 - 60 28 5b ff bb 0d 9f 96-9a 2d cb fd 60 eb 96 62 `([......-..`..b
>>>>>>>>>>>> 0010 - 53 e6 25 S.%
>>>>>>>>>>>> SSL3 alert read:warning:close notify
>>>>>>>>>>>> DONE
>>>>>>>>>>>> shutting down SSL
>>>>>>>>>>>> CONNECTION CLOSED
>>>>>>>>>>>>
>>>>>>>>>>>>
>>>>>>>>>>>> I am using the following JDK version on MacOS:
>>>>>>>>>>>>
>>>>>>>>>>>> ssl git:(cert_cb_openssl_1_1_1) ✗ /Library/Java/JavaVirtualMachines/jdk-11.jdk/Contents/Home/bin/java -version
>>>>>>>>>>>> java version "11" 2018-09-25
>>>>>>>>>>>> Java(TM) SE Runtime Environment 18.9 (build 11+28)
>>>>>>>>>>>> Java HotSpot(TM) 64-Bit Server VM 18.9 (build 11+28, mixed mode)
>>>>>>>>>>>>
>>>>>>>>>>>> For this to work you will need to have openssl 1.1.1 installed.
>>>>>>>>>>>>
>>>>>>>>>>>> Any help would be welcome,
>>>>>>>>>>>> Norman
>>>>>>>>>>>>
>>>>>>>>>>>> [1] https://github.com/netty/netty-tcnative
>>>>
>>>
More information about the security-dev
mailing list