Re: SSL connection problem: InvalidAlgorithmParameterException: the trustAnchors parameter must be non-empty

2015-09-03 Thread Ernie Kovak
This turned out to be caused by incorrect certificate trust attributes. Using "CT" for the SSL attribute fixed it. Thanks! Ernie -- dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-tech-crypto

NSS 3.20 SunPKCS11-nss-fips is missing the SunTls12RsaPremasterSecret algorithm

2015-09-03 Thread ernie . kovak
Using NSS 3.20 built on Windows, using it with Java 8 for SSL connections from thick client to FIPS-enabled server. It fails to establish a connection, generating the following exception: Caused by: javax.net.ssl.SSLKeyException: RSA premaster secret error at sun.security.ssl.RSAClientK

SSL connection problem: InvalidAlgorithmParameterException: the trustAnchors parameter must be non-empty

2015-09-03 Thread ernie . kovak
Hi, all - I have NSS 3.19.2 built on Windows, using it with Java 8 for SSL connections from thick client to server. Fails to establish a connection with this error: Caused by: javax.net.ssl.SSLException: java.lang.RuntimeException: Unexpected error: java.security.InvalidAlgorithmParameterExcep