Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-8189928

RECV TLSv1.2 ALERT: fatal, handshake_failure when using jdk.incubator.httpclient

    XMLWordPrintable

    Details

    • Subcomponent:
    • CPU:
      x86_64
    • OS:
      os_x

      Description

      FULL PRODUCT VERSION :
      java version "9"
      Java(TM) SE Runtime Environment (build 9+181)
      Java HotSpot(TM) 64-Bit Server VM (build 9+181, mixed mode)

      ADDITIONAL OS VERSION INFORMATION :
      Darwin kif.local 16.7.0 Darwin Kernel Version 16.7.0: Thu Jun 15 17:36:27 PDT 2017; root:xnu-3789.70.16~2/RELEASE_X86_64 x86_64

      A DESCRIPTION OF THE PROBLEM :
      Handshake failure trying to read Handshake reply.
      This might be site specific, but all browsers as well as cURL will read the provided URL without issue.

      curl -v -H 'Accept: application/json' 'https://jsonplaceholder.typicode.com/posts/1'



      STEPS TO FOLLOW TO REPRODUCE THE PROBLEM :
      Use the new incubator http client module to make a connection to 'https://jsonplaceholder.typicode.com/posts/1' with SSL debugging enabled.



      EXPECTED VERSUS ACTUAL BEHAVIOR :
      EXPECTED -
      Handshake succeeds, HTTP exchange happens.
      ACTUAL -
      Raw read]: length = 7
      0000: 15 03 01 00 02 02 28 ......(
      main, READ: TLSv1 Alert, length = 2
      main, RECV TLSv1.2 ALERT: fatal, handshake_failure
      main, fatal error: 40: General SSLEngine problem
      javax.net.ssl.SSLHandshakeException: Received fatal alert: handshake_failure
      main, fatal: engine already closed. Rethrowing javax.net.ssl.SSLHandshakeException: Received fatal alert: handshake_failure

      ERROR MESSAGES/STACK TRACES THAT OCCUR :
      SSL debug output+stack trace:
      System property jdk.tls.client.cipherSuites is set to 'null'
      System property jdk.tls.server.cipherSuites is set to 'null'
      Ignoring disabled cipher suite: SSL_DH_anon_EXPORT_WITH_RC4_40_MD5
      Ignoring disabled cipher suite: TLS_ECDHE_ECDSA_WITH_RC4_128_SHA
      Ignoring disabled cipher suite: SSL_DH_anon_WITH_RC4_128_MD5
      Ignoring disabled cipher suite: TLS_ECDH_anon_WITH_RC4_128_SHA
      Ignoring disabled cipher suite: TLS_KRB5_EXPORT_WITH_RC4_40_SHA
      Ignoring disabled cipher suite: TLS_KRB5_WITH_RC4_128_SHA
      Ignoring disabled cipher suite: SSL_RSA_EXPORT_WITH_RC4_40_MD5
      Ignoring disabled cipher suite: TLS_KRB5_EXPORT_WITH_RC4_40_MD5
      Ignoring disabled cipher suite: TLS_ECDH_ECDSA_WITH_RC4_128_SHA
      Ignoring disabled cipher suite: TLS_KRB5_WITH_RC4_128_MD5
      Ignoring disabled cipher suite: SSL_RSA_WITH_RC4_128_SHA
      Ignoring disabled cipher suite: TLS_ECDH_RSA_WITH_RC4_128_SHA
      Ignoring disabled cipher suite: TLS_ECDHE_RSA_WITH_RC4_128_SHA
      Ignoring disabled cipher suite: SSL_RSA_WITH_RC4_128_MD5
      Inaccessible trust store: /Library/Java/JavaVirtualMachines/jdk-9.jdk/Contents/Home/lib/security/jssecacerts
      trustStore is: /Library/Java/JavaVirtualMachines/jdk-9.jdk/Contents/Home/lib/security/cacerts
      trustStore type is: pkcs12
      trustStore provider is:
      the last modified time is: Wed Aug 02 21:16:27 PDT 2017
      Reload the trust store
      Reload trust certs
      Reloaded 105 trust certs
      adding as trusted cert:
        Subject: CN=Equifax Secure Global eBusiness CA-1, O=Equifax Secure Inc., C=US
        Issuer: CN=Equifax Secure Global eBusiness CA-1, O=Equifax Secure Inc., C=US
        Algorithm: RSA; Serial number: 0xc3517
        Valid from Sun Jun 20 21:00:00 PDT 1999 until Sun Jun 21 21:00:00 PDT 2020

      adding as trusted cert:
        Subject: CN=Entrust Root Certification Authority - EC1, OU="(c) 2012 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US
        Issuer: CN=Entrust Root Certification Authority - EC1, OU="(c) 2012 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US
        Algorithm: EC; Serial number: 0xa68b79290000000050d091f9
        Valid from Tue Dec 18 07:25:36 PST 2012 until Fri Dec 18 07:55:36 PST 2037

      adding as trusted cert:
        Subject: CN=SecureTrust CA, O=SecureTrust Corporation, C=US
        Issuer: CN=SecureTrust CA, O=SecureTrust Corporation, C=US
        Algorithm: RSA; Serial number: 0xcf08e5c0816a5ad427ff0eb271859d0
        Valid from Tue Nov 07 11:31:18 PST 2006 until Mon Dec 31 11:40:55 PST 2029

      adding as trusted cert:
        Subject: OU=Security Communication RootCA1, O=SECOM Trust.net, C=JP
        Issuer: OU=Security Communication RootCA1, O=SECOM Trust.net, C=JP
        Algorithm: RSA; Serial number: 0x0
        Valid from Mon Sep 29 21:20:49 PDT 2003 until Fri Sep 29 21:20:49 PDT 2023

      adding as trusted cert:
        Subject: CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US
        Issuer: CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US
        Algorithm: RSA; Serial number: 0x83be056904246b1a1756ac95991c74a
        Valid from Thu Nov 09 16:00:00 PST 2006 until Sun Nov 09 16:00:00 PST 2031

      adding as trusted cert:
        Subject: CN=QuoVadis Root CA 2 G3, O=QuoVadis Limited, C=BM
        Issuer: CN=QuoVadis Root CA 2 G3, O=QuoVadis Limited, C=BM
        Algorithm: RSA; Serial number: 0x445734245b81899b35f2ceb82b3b5ba726f07528
        Valid from Thu Jan 12 10:59:32 PST 2012 until Sun Jan 12 10:59:32 PST 2042

      adding as trusted cert:
        Subject: CN=DigiCert Trusted Root G4, OU=www.digicert.com, O=DigiCert Inc, C=US
        Issuer: CN=DigiCert Trusted Root G4, OU=www.digicert.com, O=DigiCert Inc, C=US
        Algorithm: RSA; Serial number: 0x59b1b579e8e2132e23907bda777755c
        Valid from Thu Aug 01 05:00:00 PDT 2013 until Fri Jan 15 04:00:00 PST 2038

      adding as trusted cert:
        Subject: CN=GeoTrust Primary Certification Authority, O=GeoTrust Inc., C=US
        Issuer: CN=GeoTrust Primary Certification Authority, O=GeoTrust Inc., C=US
        Algorithm: RSA; Serial number: 0x18acb56afd69b6153a636cafdafac4a1
        Valid from Sun Nov 26 16:00:00 PST 2006 until Wed Jul 16 16:59:59 PDT 2036

      adding as trusted cert:
        Subject: OU=Security Communication RootCA2, O="SECOM Trust Systems CO.,LTD.", C=JP
        Issuer: OU=Security Communication RootCA2, O="SECOM Trust Systems CO.,LTD.", C=JP
        Algorithm: RSA; Serial number: 0x0
        Valid from Thu May 28 22:00:39 PDT 2009 until Mon May 28 22:00:39 PDT 2029

      adding as trusted cert:
        Subject: OU=VeriSign Trust Network, OU="(c) 1998 VeriSign, Inc. - For authorized use only", OU=Class 3 Public Primary Certification Authority - G2, O="VeriSign, Inc.", C=US
        Issuer: OU=VeriSign Trust Network, OU="(c) 1998 VeriSign, Inc. - For authorized use only", OU=Class 3 Public Primary Certification Authority - G2, O="VeriSign, Inc.", C=US
        Algorithm: RSA; Serial number: 0x7dd9fe07cfa81eb7107967fba78934c6
        Valid from Sun May 17 17:00:00 PDT 1998 until Tue Aug 01 16:59:59 PDT 2028

      adding as trusted cert:
        Subject: OU=ePKI Root Certification Authority, O="Chunghwa Telecom Co., Ltd.", C=TW
        Issuer: OU=ePKI Root Certification Authority, O="Chunghwa Telecom Co., Ltd.", C=TW
        Algorithm: RSA; Serial number: 0x15c8bd65475cafb897005ee406d2bc9d
        Valid from Sun Dec 19 18:31:27 PST 2004 until Tue Dec 19 18:31:27 PST 2034

      adding as trusted cert:
        Subject: CN=AffirmTrust Commercial, O=AffirmTrust, C=US
        Issuer: CN=AffirmTrust Commercial, O=AffirmTrust, C=US
        Algorithm: RSA; Serial number: 0x7777062726a9b17c
        Valid from Fri Jan 29 06:06:06 PST 2010 until Tue Dec 31 06:06:06 PST 2030

      adding as trusted cert:
        Subject: CN=Certum Trusted Network CA, OU=Certum Certification Authority, O=Unizeto Technologies S.A., C=PL
        Issuer: CN=Certum Trusted Network CA, OU=Certum Certification Authority, O=Unizeto Technologies S.A., C=PL
        Algorithm: RSA; Serial number: 0x444c0
        Valid from Wed Oct 22 05:07:37 PDT 2008 until Mon Dec 31 04:07:37 PST 2029

      adding as trusted cert:
        Subject: CN=XRamp Global Certification Authority, O=XRamp Security Services Inc, OU=www.xrampsecurity.com, C=US
        Issuer: CN=XRamp Global Certification Authority, O=XRamp Security Services Inc, OU=www.xrampsecurity.com, C=US
        Algorithm: RSA; Serial number: 0x50946cec18ead59c4dd597ef758fa0ad
        Valid from Mon Nov 01 09:14:04 PST 2004 until Sun Dec 31 21:37:19 PST 2034

      adding as trusted cert:
        Subject: CN=Sonera Class2 CA, O=Sonera, C=FI
        Issuer: CN=Sonera Class2 CA, O=Sonera, C=FI
        Algorithm: RSA; Serial number: 0x1d
        Valid from Fri Apr 06 00:29:40 PDT 2001 until Tue Apr 06 00:29:40 PDT 2021

      adding as trusted cert:
        Subject: CN=America Online Root Certification Authority 1, O=America Online Inc., C=US
        Issuer: CN=America Online Root Certification Authority 1, O=America Online Inc., C=US
        Algorithm: RSA; Serial number: 0x1
        Valid from Mon May 27 23:00:00 PDT 2002 until Thu Nov 19 12:43:00 PST 2037

      adding as trusted cert:
        Subject: CN=GeoTrust Primary Certification Authority - G2, OU=(c) 2007 GeoTrust Inc. - For authorized use only, O=GeoTrust Inc., C=US
        Issuer: CN=GeoTrust Primary Certification Authority - G2, OU=(c) 2007 GeoTrust Inc. - For authorized use only, O=GeoTrust Inc., C=US
        Algorithm: EC; Serial number: 0x3cb2f4480a00e2feeb243b5e603ec36b
        Valid from Sun Nov 04 16:00:00 PST 2007 until Mon Jan 18 15:59:59 PST 2038

      adding as trusted cert:
        Subject: OU=Equifax Secure Certificate Authority, O=Equifax, C=US
        Issuer: OU=Equifax Secure Certificate Authority, O=Equifax, C=US
        Algorithm: RSA; Serial number: 0x35def4cf
        Valid from Sat Aug 22 09:41:51 PDT 1998 until Wed Aug 22 09:41:51 PDT 2018

      adding as trusted cert:
        Subject: CN=COMODO ECC Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB
        Issuer: CN=COMODO ECC Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB
        Algorithm: EC; Serial number: 0x1f47afaa62007050544c019e9b63992a
        Valid from Wed Mar 05 16:00:00 PST 2008 until Mon Jan 18 15:59:59 PST 2038

      adding as trusted cert:
        Subject: CN=ISRG Root X1, O=Internet Security Research Group, C=US
        Issuer: CN=ISRG Root X1, O=Internet Security Research Group, C=US
        Algorithm: RSA; Serial number: 0x8210cfb0d240e3594463e0bb63828b00
        Valid from Thu Jun 04 04:04:38 PDT 2015 until Mon Jun 04 04:04:38 PDT 2035

      adding as trusted cert:
        Subject: CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US
        Issuer: CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US
        Algorithm: RSA; Serial number: 0x2ac5c266a0b409b8f0b79f2ae462577
        Valid from Thu Nov 09 16:00:00 PST 2006 until Sun Nov 09 16:00:00 PST 2031

      adding as trusted cert:
        Subject: CN=GeoTrust Universal CA, O=GeoTrust Inc., C=US
        Issuer: CN=GeoTrust Universal CA, O=GeoTrust Inc., C=US
        Algorithm: RSA; Serial number: 0x1
        Valid from Wed Mar 03 21:00:00 PST 2004 until Sat Mar 03 21:00:00 PST 2029

      adding as trusted cert:
        Subject: CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R3
        Issuer: CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R3
        Algorithm: RSA; Serial number: 0x4000000000121585308a2
        Valid from Wed Mar 18 03:00:00 PDT 2009 until Sun Mar 18 03:00:00 PDT 2029

      adding as trusted cert:
        Subject: CN=Baltimore CyberTrust Root, OU=CyberTrust, O=Baltimore, C=IE
        Issuer: CN=Baltimore CyberTrust Root, OU=CyberTrust, O=Baltimore, C=IE
        Algorithm: RSA; Serial number: 0x20000b9
        Valid from Fri May 12 11:46:00 PDT 2000 until Mon May 12 16:59:00 PDT 2025

      adding as trusted cert:
        Subject: CN=Thawte Timestamping CA, OU=Thawte Certification, O=Thawte, L=Durbanville, ST=Western Cape, C=ZA
        Issuer: CN=Thawte Timestamping CA, OU=Thawte Certification, O=Thawte, L=Durbanville, ST=Western Cape, C=ZA
        Algorithm: RSA; Serial number: 0x67c8e1e8e3be1cbdfc913b8ea6238749
        Valid from Tue Dec 31 16:00:00 PST 1996 until Fri Jan 01 15:59:59 PST 2021

      adding as trusted cert:
        Subject: CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB
        Issuer: CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB
        Algorithm: RSA; Serial number: 0x1
        Valid from Wed Dec 31 16:00:00 PST 2003 until Sun Dec 31 15:59:59 PST 2028

      adding as trusted cert:
        Subject: OU=Starfield Class 2 Certification Authority, O="Starfield Technologies, Inc.", C=US
        Issuer: OU=Starfield Class 2 Certification Authority, O="Starfield Technologies, Inc.", C=US
        Algorithm: RSA; Serial number: 0x0
        Valid from Tue Jun 29 10:39:16 PDT 2004 until Thu Jun 29 10:39:16 PDT 2034

      adding as trusted cert:
        Subject: CN=Chambers of Commerce Root, OU=http://www.chambersign.org, O=AC Camerfirma SA CIF A82743287, C=EU
        Issuer: CN=Chambers of Commerce Root, OU=http://www.chambersign.org, O=AC Camerfirma SA CIF A82743287, C=EU
        Algorithm: RSA; Serial number: 0x0
        Valid from Tue Sep 30 09:13:43 PDT 2003 until Wed Sep 30 09:13:44 PDT 2037

      adding as trusted cert:
        Subject: CN=UTN-USERFirst-Hardware, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, ST=UT, C=US
        Issuer: CN=UTN-USERFirst-Hardware, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, ST=UT, C=US
        Algorithm: RSA; Serial number: 0x44be0c8b500024b411d3362afe650afd
        Valid from Fri Jul 09 11:10:42 PDT 1999 until Tue Jul 09 11:19:22 PDT 2019

      adding as trusted cert:
        Subject: CN=VeriSign Class 3 Public Primary Certification Authority - G3, OU="(c) 1999 VeriSign, Inc. - For authorized use only", OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US
        Issuer: CN=VeriSign Class 3 Public Primary Certification Authority - G3, OU="(c) 1999 VeriSign, Inc. - For authorized use only", OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US
        Algorithm: RSA; Serial number: 0x9b7e0649a33e62b9d5ee90487129ef57
        Valid from Thu Sep 30 17:00:00 PDT 1999 until Wed Jul 16 16:59:59 PDT 2036

      adding as trusted cert:
        Subject: CN=GlobalSign Root CA, OU=Root CA, O=GlobalSign nv-sa, C=BE
        Issuer: CN=GlobalSign Root CA, OU=Root CA, O=GlobalSign nv-sa, C=BE
        Algorithm: RSA; Serial number: 0x40000000001154b5ac394
        Valid from Tue Sep 01 05:00:00 PDT 1998 until Fri Jan 28 04:00:00 PST 2028

      adding as trusted cert:
        Subject: CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, ST=UT, C=US
        Issuer: CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, ST=UT, C=US
        Algorithm: RSA; Serial number: 0x44be0c8b500024b411d3362de0b35f1b
        Valid from Fri Jul 09 11:31:20 PDT 1999 until Tue Jul 09 11:40:36 PDT 2019

      adding as trusted cert:
        Subject: CN=AffirmTrust Networking, O=AffirmTrust, C=US
        Issuer: CN=AffirmTrust Networking, O=AffirmTrust, C=US
        Algorithm: RSA; Serial number: 0x7c4f04391cd4992d
        Valid from Fri Jan 29 06:08:24 PST 2010 until Tue Dec 31 06:08:24 PST 2030

      adding as trusted cert:
        Subject: CN=AffirmTrust Premium, O=AffirmTrust, C=US
        Issuer: CN=AffirmTrust Premium, O=AffirmTrust, C=US
        Algorithm: RSA; Serial number: 0x6d8c1446b1a60aee
        Valid from Fri Jan 29 06:10:36 PST 2010 until Mon Dec 31 06:10:36 PST 2040

      adding as trusted cert:
        Subject: CN=Baltimore CyberTrust Code Signing Root, OU=CyberTrust, O=Baltimore, C=IE
        Issuer: CN=Baltimore CyberTrust Code Signing Root, OU=CyberTrust, O=Baltimore, C=IE
        Algorithm: RSA; Serial number: 0x20000bf
        Valid from Wed May 17 07:01:00 PDT 2000 until Sat May 17 16:59:00 PDT 2025

      adding as trusted cert:
        Subject: CN=America Online Root Certification Authority 2, O=America Online Inc., C=US
        Issuer: CN=America Online Root Certification Authority 2, O=America Online Inc., C=US
        Algorithm: RSA; Serial number: 0x1
        Valid from Mon May 27 23:00:00 PDT 2002 until Tue Sep 29 07:08:00 PDT 2037

      adding as trusted cert:
        Subject: CN=LuxTrust Global Root, O=LuxTrust s.a., C=LU
        Issuer: CN=LuxTrust Global Root, O=LuxTrust s.a., C=LU
        Algorithm: RSA; Serial number: 0xbb8
        Valid from Thu Mar 17 02:51:37 PDT 2011 until Wed Mar 17 02:51:37 PDT 2021

      adding as trusted cert:
        Subject: CN=GeoTrust Primary Certification Authority - G3, OU=(c) 2008 GeoTrust Inc. - For authorized use only, O=GeoTrust Inc., C=US
        Issuer: CN=GeoTrust Primary Certification Authority - G3, OU=(c) 2008 GeoTrust Inc. - For authorized use only, O=GeoTrust Inc., C=US
        Algorithm: RSA; Serial number: 0x15ac6e9419b2794b41f627a9c3180f1f
        Valid from Tue Apr 01 17:00:00 PDT 2008 until Tue Dec 01 15:59:59 PST 2037

      adding as trusted cert:
        Subject: CN=Chambers of Commerce Root - 2008, O=AC Camerfirma S.A., SERIALNUMBER=A82743287, L=Madrid (see current address at www.camerfirma.com/address), C=EU
        Issuer: CN=Chambers of Commerce Root - 2008, O=AC Camerfirma S.A., SERIALNUMBER=A82743287, L=Madrid (see current address at www.camerfirma.com/address), C=EU
        Algorithm: RSA; Serial number: 0xa3da427ea4b1aeda
        Valid from Fri Aug 01 05:29:50 PDT 2008 until Sat Jul 31 05:29:50 PDT 2038

      adding as trusted cert:
        Subject: CN=SwissSign Silver CA - G2, O=SwissSign AG, C=CH
        Issuer: CN=SwissSign Silver CA - G2, O=SwissSign AG, C=CH
        Algorithm: RSA; Serial number: 0x4f1bd42f54bb2f4b
        Valid from Wed Oct 25 01:32:46 PDT 2006 until Sat Oct 25 01:32:46 PDT 2036

      adding as trusted cert:
        Subject: CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US
        Issuer: CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US
        Algorithm: RSA; Serial number: 0x4a538c28
        Valid from Tue Jul 07 10:25:54 PDT 2009 until Sat Dec 07 09:55:54 PST 2030

      adding as trusted cert:
        Subject: CN=DigiCert Assured ID Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US
        Issuer: CN=DigiCert Assured ID Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US
        Algorithm: RSA; Serial number: 0xce7e0e517d846fe8fe560fc1bf03039
        Valid from Thu Nov 09 16:00:00 PST 2006 until Sun Nov 09 16:00:00 PST 2031

      adding as trusted cert:
        Subject: OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US
        Issuer: OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US
        Algorithm: RSA; Serial number: 0x0
        Valid from Tue Jun 29 10:06:20 PDT 2004 until Thu Jun 29 10:06:20 PDT 2034

      adding as trusted cert:
        Subject: CN=AddTrust External CA Root, OU=AddTrust External TTP Network, O=AddTrust AB, C=SE
        Issuer: CN=AddTrust External CA Root, OU=AddTrust External TTP Network, O=AddTrust AB, C=SE
        Algorithm: RSA; Serial number: 0x1
        Valid from Tue May 30 03:48:38 PDT 2000 until Sat May 30 03:48:38 PDT 2020

      adding as trusted cert:
        Subject: CN=T-TeleSec GlobalRoot Class 3, OU=T-Systems Trust Center, O=T-Systems Enterprise Services GmbH, C=DE
        Issuer: CN=T-TeleSec GlobalRoot Class 3, OU=T-Systems Trust Center, O=T-Systems Enterprise Services GmbH, C=DE
        Algorithm: RSA; Serial number: 0x1
        Valid from Wed Oct 01 03:29:56 PDT 2008 until Sat Oct 01 16:59:59 PDT 2033

      adding as trusted cert:
        Subject: CN=DigiCert Global Root G3, OU=www.digicert.com, O=DigiCert Inc, C=US
        Issuer: CN=DigiCert Global Root G3, OU=www.digicert.com, O=DigiCert Inc, C=US
        Algorithm: EC; Serial number: 0x55556bcf25ea43535c3a40fd5ab4572
        Valid from Thu Aug 01 05:00:00 PDT 2013 until Fri Jan 15 04:00:00 PST 2038

      adding as trusted cert:
        Subject: CN=UTN-USERFirst-Client Authentication and Email, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, ST=UT, C=US
        Issuer: CN=UTN-USERFirst-Client Authentication and Email, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, ST=UT, C=US
        Algorithm: RSA; Serial number: 0x44be0c8b500024b411d336252567c989
        Valid from Fri Jul 09 10:28:50 PDT 1999 until Tue Jul 09 10:36:58 PDT 2019

      adding as trusted cert:
        Subject: CN=Class 2 Primary CA, O=Certplus, C=FR
        Issuer: CN=Class 2 Primary CA, O=Certplus, C=FR
        Algorithm: RSA; Serial number: 0x85bd4bf3d8dae369f694d75fc3a54423
        Valid from Wed Jul 07 10:05:00 PDT 1999 until Sat Jul 06 16:59:59 PDT 2019

      adding as trusted cert:
        Subject: CN=GeoTrust Global CA, O=GeoTrust Inc., C=US
        Issuer: CN=GeoTrust Global CA, O=GeoTrust Inc., C=US
        Algorithm: RSA; Serial number: 0x23456
        Valid from Mon May 20 21:00:00 PDT 2002 until Fri May 20 21:00:00 PDT 2022

      adding as trusted cert:
        Subject: CN=SwissSign Platinum CA - G2, O=SwissSign AG, C=CH
        Issuer: CN=SwissSign Platinum CA - G2, O=SwissSign AG, C=CH
        Algorithm: RSA; Serial number: 0x4eb200670c035d4f
        Valid from Wed Oct 25 01:36:00 PDT 2006 until Sat Oct 25 01:36:00 PDT 2036

      adding as trusted cert:
        Subject: CN=GlobalSign, O=GlobalSign, OU=GlobalSign ECC Root CA - R5
        Issuer: CN=GlobalSign, O=GlobalSign, OU=GlobalSign ECC Root CA - R5
        Algorithm: EC; Serial number: 0x605949e0262ebb55f90a778a71f94ad86c
        Valid from Mon Nov 12 16:00:00 PST 2012 until Mon Jan 18 19:14:07 PST 2038

      adding as trusted cert:
        Subject: CN=VeriSign Class 2 Public Primary Certification Authority - G3, OU="(c) 1999 VeriSign, Inc. - For authorized use only", OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US
        Issuer: CN=VeriSign Class 2 Public Primary Certification Authority - G3, OU="(c) 1999 VeriSign, Inc. - For authorized use only", OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US
        Algorithm: RSA; Serial number: 0x6170cb498c5f984529e7b0a6d9505b7a
        Valid from Thu Sep 30 17:00:00 PDT 1999 until Wed Jul 16 16:59:59 PDT 2036

      adding as trusted cert:
        Subject: CN=Starfield Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US
        Issuer: CN=Starfield Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US
        Algorithm: RSA; Serial number: 0x0
        Valid from Mon Aug 31 17:00:00 PDT 2009 until Thu Dec 31 15:59:59 PST 2037

      adding as trusted cert:
        Subject: CN=IdenTrust Public Sector Root CA 1, O=IdenTrust, C=US
        Issuer: CN=IdenTrust Public Sector Root CA 1, O=IdenTrust, C=US
        Algorithm: RSA; Serial number: 0xa0142800000014523cf467c00000002
        Valid from Thu Jan 16 09:53:32 PST 2014 until Mon Jan 16 09:53:32 PST 2034

      adding as trusted cert:
        Subject: CN=Entrust.net Certification Authority (2048), OU=(c) 1999 Entrust.net Limited, OU=www.entrust.net/CPS_2048 incorp. by ref. (limits liab.), O=Entrust.net
        Issuer: CN=Entrust.net Certification Authority (2048), OU=(c) 1999 Entrust.net Limited, OU=www.entrust.net/CPS_2048 incorp. by ref. (limits liab.), O=Entrust.net
        Algorithm: RSA; Serial number: 0x3863def8
        Valid from Fri Dec 24 09:50:51 PST 1999 until Tue Jul 24 07:15:12 PDT 2029

      adding as trusted cert:
        Subject: CN=thawte Primary Root CA, OU="(c) 2006 thawte, Inc. - For authorized use only", OU=Certification Services Division, O="thawte, Inc.", C=US
        Issuer: CN=thawte Primary Root CA, OU="(c) 2006 thawte, Inc. - For authorized use only", OU=Certification Services Division, O="thawte, Inc.", C=US
        Algorithm: RSA; Serial number: 0x344ed55720d5edec49f42fce37db2b6d
        Valid from Thu Nov 16 16:00:00 PST 2006 until Wed Jul 16 16:59:59 PDT 2036

      adding as trusted cert:
        Subject: CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US
        Issuer: CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US
        Algorithm: RSA; Serial number: 0x0
        Valid from Mon Aug 31 17:00:00 PDT 2009 until Thu Dec 31 15:59:59 PST 2037

      adding as trusted cert:
        Subject: CN=VeriSign Class 1 Public Primary Certification Authority - G3, OU="(c) 1999 VeriSign, Inc. - For authorized use only", OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US
        Issuer: CN=VeriSign Class 1 Public Primary Certification Authority - G3, OU="(c) 1999 VeriSign, Inc. - For authorized use only", OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US
        Algorithm: RSA; Serial number: 0x8b5b75568454850b00cfaf3848ceb1a4
        Valid from Thu Sep 30 17:00:00 PDT 1999 until Wed Jul 16 16:59:59 PDT 2036

      adding as trusted cert:
        Subject: CN=VeriSign Class 3 Public Primary Certification Authority - G4, OU="(c) 2007 VeriSign, Inc. - For authorized use only", OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US
        Issuer: CN=VeriSign Class 3 Public Primary Certification Authority - G4, OU="(c) 2007 VeriSign, Inc. - For authorized use only", OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US
        Algorithm: EC; Serial number: 0x2f80fe238c0e220f486712289187acb3
        Valid from Sun Nov 04 16:00:00 PST 2007 until Mon Jan 18 15:59:59 PST 2038

      adding as trusted cert:
        Subject: CN=Entrust Root Certification Authority, OU="(c) 2006 Entrust, Inc.", OU=www.entrust.net/CPS is incorporated by reference, O="Entrust, Inc.", C=US
        Issuer: CN=Entrust Root Certification Authority, OU="(c) 2006 Entrust, Inc.", OU=www.entrust.net/CPS is incorporated by reference, O="Entrust, Inc.", C=US
        Algorithm: RSA; Serial number: 0x456b5054
        Valid from Mon Nov 27 12:23:42 PST 2006 until Fri Nov 27 12:53:42 PST 2026

      adding as trusted cert:
        Subject: CN=DigiCert Assured ID Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US
        Issuer: CN=DigiCert Assured ID Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US
        Algorithm: RSA; Serial number: 0xb931c3ad63967ea6723bfc3af9af44b
        Valid from Thu Aug 01 05:00:00 PDT 2013 until Fri Jan 15 04:00:00 PST 2038

      adding as trusted cert:
        Subject: CN=Certum CA, O=Unizeto Sp. z o.o., C=PL
        Issuer: CN=Certum CA, O=Unizeto Sp. z o.o., C=PL
        Algorithm: RSA; Serial number: 0x10020
        Valid from Tue Jun 11 03:46:39 PDT 2002 until Fri Jun 11 03:46:39 PDT 2027

      adding as trusted cert:
        Subject: CN=AddTrust Qualified CA Root, OU=AddTrust TTP Network, O=AddTrust AB, C=SE
        Issuer: CN=AddTrust Qualified CA Root, OU=AddTrust TTP Network, O=AddTrust AB, C=SE
        Algorithm: RSA; Serial number: 0x1
        Valid from Tue May 30 03:44:50 PDT 2000 until Sat May 30 03:44:50 PDT 2020

      adding as trusted cert:
        Subject: CN=DST Root CA X3, O=Digital Signature Trust Co.
        Issuer: CN=DST Root CA X3, O=Digital Signature Trust Co.
        Algorithm: RSA; Serial number: 0x44afb080d6a327ba893039862ef8406b
        Valid from Sat Sep 30 14:12:19 PDT 2000 until Thu Sep 30 07:01:15 PDT 2021

      adding as trusted cert:
        Subject: CN=Buypass Class 2 Root CA, O=Buypass AS-983163327, C=NO
        Issuer: CN=Buypass Class 2 Root CA, O=Buypass AS-983163327, C=NO
        Algorithm: RSA; Serial number: 0x2
        Valid from Tue Oct 26 01:38:03 PDT 2010 until Fri Oct 26 01:38:03 PDT 2040

      adding as trusted cert:
        Subject: CN=D-TRUST Root Class 3 CA 2 EV 2009, O=D-Trust GmbH, C=DE
        Issuer: CN=D-TRUST Root Class 3 CA 2 EV 2009, O=D-Trust GmbH, C=DE
        Algorithm: RSA; Serial number: 0x983f4
        Valid from Thu Nov 05 00:50:46 PST 2009 until Mon Nov 05 00:50:46 PST 2029

      adding as trusted cert:
        Subject: CN=DigiCert Assured ID Root G3, OU=www.digicert.com, O=DigiCert Inc, C=US
        Issuer: CN=DigiCert Assured ID Root G3, OU=www.digicert.com, O=DigiCert Inc, C=US
        Algorithm: EC; Serial number: 0xba15afa1ddfa0b54944afcd24a06cec
        Valid from Thu Aug 01 05:00:00 PDT 2013 until Fri Jan 15 04:00:00 PST 2038

      adding as trusted cert:
        Subject: CN=SwissSign Gold CA - G2, O=SwissSign AG, C=CH
        Issuer: CN=SwissSign Gold CA - G2, O=SwissSign AG, C=CH
        Algorithm: RSA; Serial number: 0xbb401c43f55e4fb0
        Valid from Wed Oct 25 01:30:35 PDT 2006 until Sat Oct 25 01:30:35 PDT 2036

      adding as trusted cert:
        Subject: CN=USERTrust ECC Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US
        Issuer: CN=USERTrust ECC Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US
        Algorithm: EC; Serial number: 0x5c8b99c55a94c5d27156decd8980cc26
        Valid from Sun Jan 31 16:00:00 PST 2010 until Mon Jan 18 15:59:59 PST 2038

      adding as trusted cert:
        Subject: CN=IdenTrust Commercial Root CA 1, O=IdenTrust, C=US
        Issuer: CN=IdenTrust Commercial Root CA 1, O=IdenTrust, C=US
        Algorithm: RSA; Serial number: 0xa0142800000014523c844b500000002
        Valid from Thu Jan 16 10:12:23 PST 2014 until Mon Jan 16 10:12:23 PST 2034

      adding as trusted cert:
        Subject: CN=QuoVadis Root CA 2, O=QuoVadis Limited, C=BM
        Issuer: CN=QuoVadis Root CA 2, O=QuoVadis Limited, C=BM
        Algorithm: RSA; Serial number: 0x509
        Valid from Fri Nov 24 10:27:00 PST 2006 until Mon Nov 24 10:23:33 PST 2031

      adding as trusted cert:
        Subject: CN=Deutsche Telekom Root CA 2, OU=T-TeleSec Trust Center, O=Deutsche Telekom AG, C=DE
        Issuer: CN=Deutsche Telekom Root CA 2, OU=T-TeleSec Trust Center, O=Deutsche Telekom AG, C=DE
        Algorithm: RSA; Serial number: 0x26
        Valid from Fri Jul 09 05:11:00 PDT 1999 until Tue Jul 09 16:59:00 PDT 2019

      adding as trusted cert:
        Subject: CN=D-TRUST Root Class 3 CA 2 2009, O=D-Trust GmbH, C=DE
        Issuer: CN=D-TRUST Root Class 3 CA 2 2009, O=D-Trust GmbH, C=DE
        Algorithm: RSA; Serial number: 0x983f3
        Valid from Thu Nov 05 00:35:58 PST 2009 until Mon Nov 05 00:35:58 PST 2029

      adding as trusted cert:
        Subject: CN=QuoVadis Root CA 1 G3, O=QuoVadis Limited, C=BM
        Issuer: CN=QuoVadis Root CA 1 G3, O=QuoVadis Limited, C=BM
        Algorithm: RSA; Serial number: 0x78585f2ead2c194be3370735341328b596d46593
        Valid from Thu Jan 12 09:27:44 PST 2012 until Sun Jan 12 09:27:44 PST 2042

      adding as trusted cert:
        Subject: OU=Class 1 Public Primary Certification Authority, O="VeriSign, Inc.", C=US
        Issuer: OU=Class 1 Public Primary Certification Authority, O="VeriSign, Inc.", C=US
        Algorithm: RSA; Serial number: 0x3f691e819cf09a4af373ffb948a2e4dd
        Valid from Sun Jan 28 16:00:00 PST 1996 until Wed Aug 02 16:59:59 PDT 2028

      adding as trusted cert:
        Subject: CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US
        Issuer: CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US
        Algorithm: RSA; Serial number: 0x1fd6d30fca3ca51a81bbc640e35032d
        Valid from Sun Jan 31 16:00:00 PST 2010 until Mon Jan 18 15:59:59 PST 2038

      adding as trusted cert:
        Subject: OU=VeriSign Trust Network, OU="(c) 1998 VeriSign, Inc. - For authorized use only", OU=Class 2 Public Primary Certification Authority - G2, O="VeriSign, Inc.", C=US
        Issuer: OU=VeriSign Trust Network, OU="(c) 1998 VeriSign, Inc. - For authorized use only", OU=Class 2 Public Primary Certification Authority - G2, O="VeriSign, Inc.", C=US
        Algorithm: RSA; Serial number: 0xb92f60cc889fa17a4609b85b706c8aaf
        Valid from Sun May 17 17:00:00 PDT 1998 until Tue Aug 01 16:59:59 PDT 2028

      adding as trusted cert:
        Subject: CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R2
        Issuer: CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R2
        Algorithm: RSA; Serial number: 0x400000000010f8626e60d
        Valid from Fri Dec 15 00:00:00 PST 2006 until Wed Dec 15 00:00:00 PST 2021

      adding as trusted cert:
        Subject: CN=VeriSign Class 3 Public Primary Certification Authority - G5, OU="(c) 2006 VeriSign, Inc. - For authorized use only", OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US
        Issuer: CN=VeriSign Class 3 Public Primary Certification Authority - G5, OU="(c) 2006 VeriSign, Inc. - For authorized use only", OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US
        Algorithm: RSA; Serial number: 0x18dad19e267de8bb4a2158cdcc6b3b4a
        Valid from Tue Nov 07 16:00:00 PST 2006 until Wed Jul 16 16:59:59 PDT 2036

      adding as trusted cert:
        Subject: CN=QuoVadis Root CA 3, O=QuoVadis Limited, C=BM
        Issuer: CN=QuoVadis Root CA 3, O=QuoVadis Limited, C=BM
        Algorithm: RSA; Serial number: 0x5c6
        Valid from Fri Nov 24 11:11:23 PST 2006 until Mon Nov 24 11:06:44 PST 2031

      adding as trusted cert:
        Subject: CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US
        Issuer: CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US
        Algorithm: RSA; Serial number: 0x0
        Valid from Mon Aug 31 17:00:00 PDT 2009 until Thu Dec 31 15:59:59 PST 2037

      adding as trusted cert:
        Subject: CN=Swisscom Root CA 2, OU=Digital Certificate Services, O=Swisscom, C=ch
        Issuer: CN=Swisscom Root CA 2, OU=Digital Certificate Services, O=Swisscom, C=ch
        Algorithm: RSA; Serial number: 0x1e9e28e848f2e5efc37c4a1e5a1867b6
        Valid from Fri Jun 24 01:38:14 PDT 2011 until Wed Jun 25 00:38:14 PDT 2031

      adding as trusted cert:
        Subject: CN=QuoVadis Root CA 3 G3, O=QuoVadis Limited, C=BM
        Issuer: CN=QuoVadis Root CA 3 G3, O=QuoVadis Limited, C=BM
        Algorithm: RSA; Serial number: 0x2ef59b0228a7db7affd5a3a9eebd03a0cf126a1d
        Valid from Thu Jan 12 12:26:32 PST 2012 until Sun Jan 12 12:26:32 PST 2042

      adding as trusted cert:
        Subject: CN=Actalis Authentication Root CA, O=Actalis S.p.A./03358520967, L=Milan, C=IT
        Issuer: CN=Actalis Authentication Root CA, O=Actalis S.p.A./03358520967, L=Milan, C=IT
        Algorithm: RSA; Serial number: 0x570a119742c4e3cc
        Valid from Thu Sep 22 04:22:02 PDT 2011 until Sun Sep 22 04:22:02 PDT 2030

      adding as trusted cert:
        Subject: OU=Class 3 Public Primary Certification Authority, O="VeriSign, Inc.", C=US
        Issuer: OU=Class 3 Public Primary Certification Authority, O="VeriSign, Inc.", C=US
        Algorithm: RSA; Serial number: 0x3c9131cb1ff6d01b0e9ab8d044bf12be
        Valid from Sun Jan 28 16:00:00 PST 1996 until Wed Aug 02 16:59:59 PDT 2028

      adding as trusted cert:
        Subject: CN=QuoVadis Root Certification Authority, OU=Root Certification Authority, O=QuoVadis Limited, C=BM
        Issuer: CN=QuoVadis Root Certification Authority, OU=Root Certification Authority, O=QuoVadis Limited, C=BM
        Algorithm: RSA; Serial number: 0x3ab6508b
        Valid from Mon Mar 19 10:33:33 PST 2001 until Wed Mar 17 11:33:33 PDT 2021

      adding as trusted cert:
        Subject: CN=Class 3P Primary CA, O=Certplus, C=FR
        Issuer: CN=Class 3P Primary CA, O=Certplus, C=FR
        Algorithm: RSA; Serial number: 0xbf5cdbb6f21c6ec04deb7a023b36e879
        Valid from Wed Jul 07 10:10:00 PDT 1999 until Sat Jul 06 16:59:59 PDT 2019

      adding as trusted cert:
        Subject: CN=Buypass Class 3 Root CA, O=Buypass AS-983163327, C=NO
        Issuer: CN=Buypass Class 3 Root CA, O=Buypass AS-983163327, C=NO
        Algorithm: RSA; Serial number: 0x2
        Valid from Tue Oct 26 01:28:58 PDT 2010 until Fri Oct 26 01:28:58 PDT 2040

      adding as trusted cert:
        Subject: OU=Security Communication EV RootCA1, O="SECOM Trust Systems CO.,LTD.", C=JP
        Issuer: OU=Security Communication EV RootCA1, O="SECOM Trust Systems CO.,LTD.", C=JP
        Algorithm: RSA; Serial number: 0x0
        Valid from Tue Jun 05 19:12:32 PDT 2007 until Fri Jun 05 19:12:32 PDT 2037

      adding as trusted cert:
        Subject: CN=Equifax Secure eBusiness CA-1, O=Equifax Secure Inc., C=US
        Issuer: CN=Equifax Secure eBusiness CA-1, O=Equifax Secure Inc., C=US
        Algorithm: RSA; Serial number: 0x59e3
        Valid from Sun Jun 20 21:00:00 PDT 1999 until Sun Jun 21 21:00:00 PDT 2020

      adding as trusted cert:
        Subject: CN=thawte Primary Root CA - G2, OU="(c) 2007 thawte, Inc. - For authorized use only", O="thawte, Inc.", C=US
        Issuer: CN=thawte Primary Root CA - G2, OU="(c) 2007 thawte, Inc. - For authorized use only", O="thawte, Inc.", C=US
        Algorithm: EC; Serial number: 0x35fc265cd9844fc93d263d579baed756
        Valid from Sun Nov 04 16:00:00 PST 2007 until Mon Jan 18 15:59:59 PST 2038

      adding as trusted cert:
        Subject: CN=Swisscom Root EV CA 2, OU=Digital Certificate Services, O=Swisscom, C=ch
        Issuer: CN=Swisscom Root EV CA 2, OU=Digital Certificate Services, O=Swisscom, C=ch
        Algorithm: RSA; Serial number: 0xf2fa64e27463d38dfd101d041f76ca58
        Valid from Fri Jun 24 02:45:08 PDT 2011 until Wed Jun 25 01:45:08 PDT 2031

      adding as trusted cert:
        Subject: CN=VeriSign Universal Root Certification Authority, OU="(c) 2008 VeriSign, Inc. - For authorized use only", OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US
        Issuer: CN=VeriSign Universal Root Certification Authority, OU="(c) 2008 VeriSign, Inc. - For authorized use only", OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US
        Algorithm: RSA; Serial number: 0x401ac46421b31321030ebbe4121ac51d
        Valid from Tue Apr 01 17:00:00 PDT 2008 until Tue Dec 01 15:59:59 PST 2037

      adding as trusted cert:
        Subject: CN=AddTrust Class 1 CA Root, OU=AddTrust TTP Network, O=AddTrust AB, C=SE
        Issuer: CN=AddTrust Class 1 CA Root, OU=AddTrust TTP Network, O=AddTrust AB, C=SE
        Algorithm: RSA; Serial number: 0x1
        Valid from Tue May 30 03:38:31 PDT 2000 until Sat May 30 03:38:31 PDT 2020

      adding as trusted cert:
        Subject: CN=GlobalSign, O=GlobalSign, OU=GlobalSign ECC Root CA - R4
        Issuer: CN=GlobalSign, O=GlobalSign, OU=GlobalSign ECC Root CA - R4
        Algorithm: EC; Serial number: 0x2a38a41c960a04de42b228a50be8349802
        Valid from Mon Nov 12 16:00:00 PST 2012 until Mon Jan 18 19:14:07 PST 2038

      adding as trusted cert:
        Subject: CN=Global Chambersign Root - 2008, O=AC Camerfirma S.A., SERIALNUMBER=A82743287, L=Madrid (see current address at www.camerfirma.com/address), C=EU
        Issuer: CN=Global Chambersign Root - 2008, O=AC Camerfirma S.A., SERIALNUMBER=A82743287, L=Madrid (see current address at www.camerfirma.com/address), C=EU
        Algorithm: RSA; Serial number: 0xc9cdd3e9d57d23ce
        Valid from Fri Aug 01 05:31:40 PDT 2008 until Sat Jul 31 05:31:40 PDT 2038

      adding as trusted cert:
        Subject: CN=thawte Primary Root CA - G3, OU="(c) 2008 thawte, Inc. - For authorized use only", OU=Certification Services Division, O="thawte, Inc.", C=US
        Issuer: CN=thawte Primary Root CA - G3, OU="(c) 2008 thawte, Inc. - For authorized use only", OU=Certification Services Division, O="thawte, Inc.", C=US
        Algorithm: RSA; Serial number: 0x600197b746a7eab4b49ad64b2ff790fb
        Valid from Tue Apr 01 17:00:00 PDT 2008 until Tue Dec 01 15:59:59 PST 2037

      adding as trusted cert:
        Subject: CN=COMODO RSA Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB
        Issuer: CN=COMODO RSA Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB
        Algorithm: RSA; Serial number: 0x4caaf9cadb636fe01ff74ed85b03869d
        Valid from Mon Jan 18 16:00:00 PST 2010 until Mon Jan 18 15:59:59 PST 2038

      adding as trusted cert:
        Subject: CN=GTE CyberTrust Global Root, OU="GTE CyberTrust Solutions, Inc.", O=GTE Corporation, C=US
        Issuer: CN=GTE CyberTrust Global Root, OU="GTE CyberTrust Solutions, Inc.", O=GTE Corporation, C=US
        Algorithm: RSA; Serial number: 0x1a5
        Valid from Wed Aug 12 17:29:00 PDT 1998 until Mon Aug 13 16:59:00 PDT 2018

      adding as trusted cert:
        Subject: EMAILADDRESS=premium-server@thawte.com, CN=Thawte Premium Server CA, OU=Certification Services Division, O=Thawte Consulting cc, L=Cape Town, ST=Western Cape, C=ZA
        Issuer: EMAILADDRESS=premium-server@thawte.com, CN=Thawte Premium Server CA, OU=Certification Services Division, O=Thawte Consulting cc, L=Cape Town, ST=Western Cape, C=ZA
        Algorithm: RSA; Serial number: 0x36122296c5e338a520a1d25f4cd70954
        Valid from Wed Jul 31 17:00:00 PDT 1996 until Fri Jan 01 15:59:59 PST 2021

      adding as trusted cert:
        Subject: CN=AffirmTrust Premium ECC, O=AffirmTrust, C=US
        Issuer: CN=AffirmTrust Premium ECC, O=AffirmTrust, C=US
        Algorithm: EC; Serial number: 0x7497258ac73f7a54
        Valid from Fri Jan 29 06:20:24 PST 2010 until Mon Dec 31 06:20:24 PST 2040

      adding as trusted cert:
        Subject: CN=T-TeleSec GlobalRoot Class 2, OU=T-Systems Trust Center, O=T-Systems Enterprise Services GmbH, C=DE
        Issuer: CN=T-TeleSec GlobalRoot Class 2, OU=T-Systems Trust Center, O=T-Systems Enterprise Services GmbH, C=DE
        Algorithm: RSA; Serial number: 0x1
        Valid from Wed Oct 01 03:40:14 PDT 2008 until Sat Oct 01 16:59:59 PDT 2033

      adding as trusted cert:
        Subject: OU=VeriSign Trust Network, OU="(c) 1998 VeriSign, Inc. - For authorized use only", OU=Class 1 Public Primary Certification Authority - G2, O="VeriSign, Inc.", C=US
        Issuer: OU=VeriSign Trust Network, OU="(c) 1998 VeriSign, Inc. - For authorized use only", OU=Class 1 Public Primary Certification Authority - G2, O="VeriSign, Inc.", C=US
        Algorithm: RSA; Serial number: 0x4cc7eaaa983e71d39310f83d3a899192
        Valid from Sun May 17 17:00:00 PDT 1998 until Tue Aug 01 16:59:59 PDT 2028

      adding as trusted cert:
        Subject: CN=KEYNECTIS ROOT CA, OU=ROOT, O=KEYNECTIS, C=FR
        Issuer: CN=KEYNECTIS ROOT CA, OU=ROOT, O=KEYNECTIS, C=FR
        Algorithm: RSA; Serial number: 0x1121bc276c5547af584eefd4ced629b2a285
        Valid from Mon May 25 17:00:00 PDT 2009 until Mon May 25 17:00:00 PDT 2020

      adding as trusted cert:
        Subject: CN=DigiCert Global Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US
        Issuer: CN=DigiCert Global Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US
        Algorithm: RSA; Serial number: 0x33af1e6a711a9a0bb2864b11d09fae5
        Valid from Thu Aug 01 05:00:00 PDT 2013 until Fri Jan 15 04:00:00 PST 2038

      keyStore is :
      keyStore type is : pkcs12
      keyStore provider is :
      init keystore
      init keymanager of type SunX509
      trigger seeding of SecureRandom
      done seeding SecureRandom
      Using SSLEngineImpl.
      Allow unsafe renegotiation: false
      Allow legacy hello messages: true
      Is initial handshake: true
      Is secure renegotiation: false
      Ignoring obsoleted cipher suite: SSL_RSA_WITH_DES_CBC_SHA
      Ignoring obsoleted cipher suite: SSL_DHE_RSA_WITH_DES_CBC_SHA
      Ignoring obsoleted cipher suite: SSL_DHE_DSS_WITH_DES_CBC_SHA
      Ignoring obsoleted cipher suite: SSL_DH_anon_WITH_DES_CBC_SHA
      Ignoring obsoleted cipher suite: SSL_RSA_EXPORT_WITH_DES40_CBC_SHA
      Ignoring obsoleted cipher suite: SSL_DHE_RSA_EXPORT_WITH_DES40_CBC_SHA
      Ignoring obsoleted cipher suite: SSL_DHE_DSS_EXPORT_WITH_DES40_CBC_SHA
      Ignoring obsoleted cipher suite: SSL_DH_anon_EXPORT_WITH_DES40_CBC_SHA
      Ignoring obsoleted cipher suite: TLS_KRB5_WITH_DES_CBC_SHA
      Ignoring obsoleted cipher suite: TLS_KRB5_WITH_DES_CBC_MD5
      Ignoring obsoleted cipher suite: TLS_KRB5_EXPORT_WITH_DES_CBC_40_SHA
      Ignoring obsoleted cipher suite: TLS_KRB5_EXPORT_WITH_DES_CBC_40_MD5
      %% No cached client session
      update handshake state: client_hello[1]
      upcoming handshake states: server_hello[2]
      *** ClientHello, TLSv1.2
      RandomCookie: random_bytes = {6F BE 98 B6 15 E9 D2 6C 25 FD 3A 07 07 0D F7 28 D8 EA DD 52 11 97 8A 31 07 AF 79 F0 EB 2A 75 EE}
      Session ID: {}
      Cipher Suites: [TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384, TLS_RSA_WITH_AES_256_GCM_SHA384, TLS_ECDH_ECDSA_WITH_AES_256_GCM_SHA384, TLS_ECDH_RSA_WITH_AES_256_GCM_SHA384, TLS_DHE_RSA_WITH_AES_256_GCM_SHA384, TLS_DHE_DSS_WITH_AES_256_GCM_SHA384, TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, TLS_RSA_WITH_AES_128_GCM_SHA256, TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256, TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256, TLS_DHE_RSA_WITH_AES_128_GCM_SHA256, TLS_DHE_DSS_WITH_AES_128_GCM_SHA256, TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384, TLS_RSA_WITH_AES_256_CBC_SHA256, TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA384, TLS_ECDH_RSA_WITH_AES_256_CBC_SHA384, TLS_DHE_RSA_WITH_AES_256_CBC_SHA256, TLS_DHE_DSS_WITH_AES_256_CBC_SHA256, TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA, TLS_RSA_WITH_AES_256_CBC_SHA, TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA, TLS_ECDH_RSA_WITH_AES_256_CBC_SHA, TLS_DHE_RSA_WITH_AES_256_CBC_SHA, TLS_DHE_DSS_WITH_AES_256_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256, TLS_RSA_WITH_AES_128_CBC_SHA256, TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA256, TLS_ECDH_RSA_WITH_AES_128_CBC_SHA256, TLS_DHE_RSA_WITH_AES_128_CBC_SHA256, TLS_DHE_DSS_WITH_AES_128_CBC_SHA256, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_AES_128_CBC_SHA, TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA, TLS_ECDH_RSA_WITH_AES_128_CBC_SHA, TLS_DHE_RSA_WITH_AES_128_CBC_SHA, TLS_DHE_DSS_WITH_AES_128_CBC_SHA, TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA, TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA, SSL_RSA_WITH_3DES_EDE_CBC_SHA, TLS_ECDH_ECDSA_WITH_3DES_EDE_CBC_SHA, TLS_ECDH_RSA_WITH_3DES_EDE_CBC_SHA, SSL_DHE_RSA_WITH_3DES_EDE_CBC_SHA, SSL_DHE_DSS_WITH_3DES_EDE_CBC_SHA, TLS_EMPTY_RENEGOTIATION_INFO_SCSV, TLS_DH_anon_WITH_AES_256_GCM_SHA384, TLS_DH_anon_WITH_AES_128_GCM_SHA256, TLS_DH_anon_WITH_AES_256_CBC_SHA256, TLS_ECDH_anon_WITH_AES_256_CBC_SHA, TLS_DH_anon_WITH_AES_256_CBC_SHA, TLS_DH_anon_WITH_AES_128_CBC_SHA256, TLS_ECDH_anon_WITH_AES_128_CBC_SHA, TLS_DH_anon_WITH_AES_128_CBC_SHA, TLS_ECDH_anon_WITH_3DES_EDE_CBC_SHA, SSL_DH_anon_WITH_3DES_EDE_CBC_SHA, TLS_RSA_WITH_NULL_SHA256, TLS_ECDHE_ECDSA_WITH_NULL_SHA, TLS_ECDHE_RSA_WITH_NULL_SHA, SSL_RSA_WITH_NULL_SHA, TLS_ECDH_ECDSA_WITH_NULL_SHA, TLS_ECDH_RSA_WITH_NULL_SHA, TLS_ECDH_anon_WITH_NULL_SHA, SSL_RSA_WITH_NULL_MD5, TLS_KRB5_WITH_3DES_EDE_CBC_SHA, TLS_KRB5_WITH_3DES_EDE_CBC_MD5]
      Compression Methods: { 0 }
      Extension elliptic_curves, curve names: {secp256r1, secp384r1, secp521r1, sect283k1, sect283r1, sect409k1, sect409r1, sect571k1, sect571r1, secp256k1}
      Extension ec_point_formats, formats: [uncompressed]
      Extension signature_algorithms, signature_algorithms: SHA512withECDSA, SHA512withRSA, SHA384withECDSA, SHA384withRSA, SHA256withECDSA, SHA256withRSA, SHA256withDSA, SHA224withECDSA, SHA224withRSA, SHA224withDSA, SHA1withECDSA, SHA1withRSA, SHA1withDSA
      Extension status_request_v2
      CertStatusReqItemV2: ocsp_multi, OCSPStatusRequest
          ResponderIds: <EMPTY>
          Extensions: <EMPTY>
      CertStatusReqItemV2: ocsp, OCSPStatusRequest
          ResponderIds: <EMPTY>
          Extensions: <EMPTY>
      Extension status_request: ocsp, OCSPStatusRequest
          ResponderIds: <EMPTY>
          Extensions: <EMPTY>
      Extension application_layer_protocol_negotiation, protocol names: [h2][http/1.1]
      ***
      main, WRITE: TLSv1.2 Handshake, length = 296
      [Raw write]: length = 301
      0000: 16 03 03 01 28 01 00 01 24 03 03 6F BE 98 B6 15 ....(...$..o....
      0010: E9 D2 6C 25 FD 3A 07 07 0D F7 28 D8 EA DD 52 11 ..l%.:....(...R.
      0020: 97 8A 31 07 AF 79 F0 EB 2A 75 EE 00 00 8C C0 2C ..1..y..*u.....,
      0030: C0 2B C0 30 00 9D C0 2E C0 32 00 9F 00 A3 C0 2F .+.0.....2...../
      0040: 00 9C C0 2D C0 31 00 9E 00 A2 C0 24 C0 28 00 3D ...-.1.....$.(.=
      0050: C0 26 C0 2A 00 6B 00 6A C0 0A C0 14 00 35 C0 05 .&.*.k.j.....5..
      0060: C0 0F 00 39 00 38 C0 23 C0 27 00 3C C0 25 C0 29 ...9.8.#.'.<.%.)
      0070: 00 67 00 40 C0 09 C0 13 00 2F C0 04 C0 0E 00 33 .g.@...../.....3
      0080: 00 32 C0 08 C0 12 00 0A C0 03 C0 0D 00 16 00 13 .2..............
      0090: 00 FF 00 A7 00 A6 00 6D C0 19 00 3A 00 6C C0 18 .......m...:.l..
      00A0: 00 34 C0 17 00 1B 00 3B C0 06 C0 10 00 02 C0 01 .4.....;........
      00B0: C0 0B C0 15 00 01 00 1F 00 23 01 00 00 6F 00 0A .........#...o..
      00C0: 00 16 00 14 00 17 00 18 00 19 00 09 00 0A 00 0B ................
      00D0: 00 0C 00 0D 00 0E 00 16 00 0B 00 02 01 00 00 0D ................
      00E0: 00 1C 00 1A 06 03 06 01 05 03 05 01 04 03 04 01 ................
      00F0: 04 02 03 03 03 01 03 02 02 03 02 01 02 02 00 11 ................
      0100: 00 10 00 0E 02 00 04 00 00 00 00 01 00 04 00 00 ................
      0110: 00 00 00 05 00 05 01 00 00 00 00 00 10 00 0E 00 ................
      0120: 0C 02 68 32 08 68 74 74 70 2F 31 2E 31 ..h2.http/1.1
      [Raw read]: length = 7
      0000: 15 03 01 00 02 02 28 ......(
      main, READ: TLSv1 Alert, length = 2
      main, RECV TLSv1.2 ALERT: fatal, handshake_failure
      main, fatal error: 40: General SSLEngine problem
      javax.net.ssl.SSLHandshakeException: Received fatal alert: handshake_failure
      main, fatal: engine already closed. Rethrowing javax.net.ssl.SSLHandshakeException: Received fatal alert: handshake_failure
      Exception in thread "main" javax.net.ssl.SSLHandshakeException: Received fatal alert: handshake_failure
      at java.base/sun.security.ssl.Alerts.getSSLException(Alerts.java:198)
      at java.base/sun.security.ssl.Alerts.getSSLException(Alerts.java:159)
      at java.base/sun.security.ssl.SSLEngineImpl.recvAlert(SSLEngineImpl.java:1905)
      at java.base/sun.security.ssl.SSLEngineImpl.processInputRecord(SSLEngineImpl.java:1140)
      at java.base/sun.security.ssl.SSLEngineImpl.readRecord(SSLEngineImpl.java:1020)
      at java.base/sun.security.ssl.SSLEngineImpl.readNetRecord(SSLEngineImpl.java:902)
      at java.base/sun.security.ssl.SSLEngineImpl.unwrap(SSLEngineImpl.java:680)
      at java.base/javax.net.ssl.SSLEngine.unwrap(SSLEngine.java:626)
      at jdk.incubator.httpclient/jdk.incubator.http.AsyncSSLDelegate.unwrapBuffer(AsyncSSLDelegate.java:476)
      at jdk.incubator.httpclient/jdk.incubator.http.AsyncSSLDelegate.handshakeReceiveAndUnWrap(AsyncSSLDelegate.java:395)
      at jdk.incubator.httpclient/jdk.incubator.http.AsyncSSLDelegate.doHandshakeImpl(AsyncSSLDelegate.java:294)
      at jdk.incubator.httpclient/jdk.incubator.http.AsyncSSLDelegate.doHandshakeNow(AsyncSSLDelegate.java:262)
      at jdk.incubator.httpclient/jdk.incubator.http.AsyncSSLDelegate.connect(AsyncSSLDelegate.java:233)
      at jdk.incubator.httpclient/jdk.incubator.http.AsyncSSLConnection.connect(AsyncSSLConnection.java:78)
      at jdk.incubator.httpclient/jdk.incubator.http.Http2Connection.<init>(Http2Connection.java:272)
      at jdk.incubator.httpclient/jdk.incubator.http.Http2ClientImpl.getConnectionFor(Http2ClientImpl.java:108)
      at jdk.incubator.httpclient/jdk.incubator.http.ExchangeImpl.get(ExchangeImpl.java:86)
      at jdk.incubator.httpclient/jdk.incubator.http.Exchange.establishExchange(Exchange.java:257)
      at jdk.incubator.httpclient/jdk.incubator.http.Exchange.responseImpl0(Exchange.java:268)
      at jdk.incubator.httpclient/jdk.incubator.http.Exchange.responseImpl(Exchange.java:245)
      at jdk.incubator.httpclient/jdk.incubator.http.Exchange.response(Exchange.java:121)
      at jdk.incubator.httpclient/jdk.incubator.http.MultiExchange.response(MultiExchange.java:154)
      at jdk.incubator.httpclient/jdk.incubator.http.HttpClientImpl.send(HttpClientImpl.java:234)
      at us.monoid.resty2/us.monoid.resty.Sample.main(Sample.java:14)

      REPRODUCIBILITY :
      This bug can be reproduced always.

      ---------- BEGIN SOURCE ----------

      import jdk.incubator.http.HttpClient;
      import jdk.incubator.http.HttpRequest;
      import jdk.incubator.http.HttpResponse;

      import java.net.URI;

      public class Sample {
          public static void main(String... args) throws Exception {
              HttpClient client = HttpClient.newHttpClient();
              HttpRequest request = HttpRequest.newBuilder().GET().uri(URI.create("https://jsonplaceholder.typicode.com/posts/1"))
                      .header("Accept", "application/json").build();
              HttpResponse<byte[]> response = client.send(request, HttpResponse.BodyHandler.asByteArray());
              System.out.println(response.statusCode());
          }
      }

      ---------- END SOURCE ----------

        Attachments

          Issue Links

            Activity

              People

              Assignee:
              psonal Pallavi Sonal (Inactive)
              Reporter:
              webbuggrp Webbug Group
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

                Dates

                Created:
                Updated:
                Resolved: