Configuring Proton for SSL / TLS throwing openssl wrong version number and gRPC client error

ssl lotus-domino grpc domino-appdev-pack
SvenS picture SvenS · Jun 6, 2019 · Viewed 11.1k times · Source

I'm kinda at a loss here. Trying to set up proton with SSL / TLS access, but after creating the certificates with the (modified) shell scripts supplied by the AppDev-Pack and linking the keyring and everything in notes.ini, I always seem to get the error "Handshake failed with fatal error SSL_ERROR_SSL: error: 100000f7:SSL routines:OPENSSL_internal: WRONG_VERSION_NUMBER".

Tried both a windows and linux server, as well as using the accessing node.js app with and without certificates - but with no success.

Also tried the troubleshoot section of https://doc.cwpcollaboration.com/appdevpack/docs/en/proton-admin.html and it connected just fine, but won't if i connect with node.js.

Looks like the error is thrown before a certificate is even checked?

In this example the error is thrown after trying to get a document by UNID.

notes.ini (proton parts)

gRPC Client Error

If someone has an idea how to fix that issue or where to start - that would really help me.

Thanks in advance.

Answer

Steve Nikopoulos picture Steve Nikopoulos · Jun 6, 2019

It appears that the client side does not have the secure flag set. At least I get a similar stack when I try to connect without TLS when the server expects TLS.

See the secure attribute when calling useServer() function, and you'll also need to provide the credentials attributes.

Related questions

How to create a self-signed certificate with OpenSSL

I'm adding HTTPS support to an embedded Linux device. I have tried to generate a self-signed certificate with these steps: openssl req -new > cert.csr openssl rsa -in privkey.pem -out key.pem openssl x509 -in cert.csr -out …

Read More
Getting Chrome to accept self-signed localhost certificate

I have created a self-signed SSL certificate for the localhost CN. Firefox accepts this certificate after initially complaining about it, as expected. Chrome and IE, however, refuse to accept it, even after adding the certificate to the system certificate store …

Read More
Resolving javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed Error?

Edit :- Tried to format the question and accepted answer in more presentable way at mine Blog Here is the original issue. I am getting this error: detailed message sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.…

Read More