1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158 159 160 161 162 163 164 165 166 167 168 169 170 171 172 173 174 175 176 177 178 179 180 181 182 183 184 185 186 187 188 189 190 191 192 193 194 195 196 197 198 199 200 201 202 203 204 205 206 207 208 209 210 211 212 213 214 215 216 217 218 219 220 221 222 223 224 225 226 227 228 229 230 231 232 233 234 235 236 237 238 239 240 241 242 243 244 245 246 247 248 249 250 251 252 253 254 255 256 257 258 259 260 261 262 263 264
|
keyStore is :
keyStore type is : jks
keyStore provider is :
init keystore
init keymanager of type SunX509
trustStore is: keystore.jks
trustStore type is : jks
trustStore provider is :
init truststore
adding as trusted cert:
Subject: OU=AC-CLASSE-6-TEST, O=GIP-CPS, C=FR
Issuer: O=GIP-CPS-TEST, C=FR
Algorithm: RSA; Serial number: 0x3030303131303432333032373230303000
Valid from Fri Jan 02 01:00:00 CET 2004 until Wed Dec 30 01:00:00 CET 2020
adding as trusted cert:
Subject: OU=AC-CLASSE-5-TEST, O=GIP-CPS-TEST, C=FR
Issuer: O=GIP-CPS-TEST, C=FR
Algorithm: RSA; Serial number: 0x3030303131303432333032323930303000
Valid from Fri Jan 02 01:00:00 CET 2004 until Wed Dec 30 01:00:00 CET 2020
adding as trusted cert:
Subject: OU=AC-CLASSE-4-TEST, O=GIP-CPS-TEST, C=FR
Issuer: O=GIP-CPS-TEST, C=FR
Algorithm: RSA; Serial number: 0x3030303131303432333031303930303000
Valid from Fri Jan 02 01:00:00 CET 2004 until Wed Dec 30 01:00:00 CET 2020
adding as trusted cert:
Subject: O=GIP-CPS-TEST, C=FR
Issuer: O=GIP-CPS-TEST, C=FR
Algorithm: RSA; Serial number: 0x3030303131303632333236373430303000
Valid from Thu Jan 01 01:00:00 CET 2004 until Thu Dec 31 01:00:00 CET 2020
trigger seeding of SecureRandom
done seeding SecureRandom
Ignoring unavailable cipher suite: TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA
Ignoring unavailable cipher suite: TLS_DHE_RSA_WITH_AES_256_CBC_SHA
Ignoring unavailable cipher suite: TLS_ECDH_RSA_WITH_AES_256_CBC_SHA
Ignoring unsupported cipher suite: TLS_DHE_DSS_WITH_AES_128_CBC_SHA256
Ignoring unsupported cipher suite: TLS_DHE_DSS_WITH_AES_256_CBC_SHA256
Ignoring unsupported cipher suite: TLS_DHE_RSA_WITH_AES_128_CBC_SHA256
Ignoring unsupported cipher suite: TLS_ECDH_RSA_WITH_AES_128_CBC_SHA256
Ignoring unsupported cipher suite: TLS_DHE_RSA_WITH_AES_256_CBC_SHA256
Ignoring unsupported cipher suite: TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384
Ignoring unsupported cipher suite: TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA384
Ignoring unsupported cipher suite: TLS_RSA_WITH_AES_256_CBC_SHA256
Ignoring unavailable cipher suite: TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA
Ignoring unsupported cipher suite: TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256
Ignoring unsupported cipher suite: TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384
Ignoring unavailable cipher suite: TLS_DHE_DSS_WITH_AES_256_CBC_SHA
Ignoring unsupported cipher suite: TLS_ECDH_RSA_WITH_AES_256_CBC_SHA384
Ignoring unsupported cipher suite: TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256
Ignoring unsupported cipher suite: TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA256
Ignoring unavailable cipher suite: TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA
Ignoring unavailable cipher suite: TLS_RSA_WITH_AES_256_CBC_SHA
Ignoring unsupported cipher suite: TLS_RSA_WITH_AES_128_CBC_SHA256
Allow unsafe renegotiation: false
Allow legacy hello messages: true
Is initial handshake: true
Is secure renegotiation: false
%% No cached client session
*** ClientHello, TLSv1
RandomCookie: GMT: 1346850382 bytes = { 22, 221, 126, 183, 51, 111, 253, 229, 253, 68, 72, 158, 170, 21, 16, 106, 17, 208, 81, 83, 221, 179, 10, 242, 49, 110, 123, 242 }
Session ID: {}
Cipher Suites: [TLS_DHE_RSA_WITH_AES_128_CBC_SHA, TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA, SSL_DHE_RSA_WITH_3DES_EDE_CBC_SHA, SSL_RSA_WITH_RC4_128_SHA, TLS_ECDH_ECDSA_WITH_3DES_EDE_CBC_SHA, TLS_ECDHE_RSA_WITH_RC4_128_SHA, TLS_ECDH_ECDSA_WITH_RC4_128_SHA, TLS_ECDHE_ECDSA_WITH_RC4_128_SHA, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA, TLS_ECDH_RSA_WITH_RC4_128_SHA, TLS_EMPTY_RENEGOTIATION_INFO_SCSV, TLS_ECDH_RSA_WITH_3DES_EDE_CBC_SHA, TLS_ECDH_RSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA, SSL_RSA_WITH_RC4_128_MD5, TLS_DHE_DSS_WITH_AES_128_CBC_SHA, SSL_DHE_DSS_WITH_3DES_EDE_CBC_SHA, SSL_RSA_WITH_3DES_EDE_CBC_SHA]
Compression Methods: { 0 }
Extension elliptic_curves, curve names: {secp256r1, sect163k1, sect163r2, secp192r1, secp224r1, sect233k1, sect233r1, sect283k1, sect283r1, secp384r1, sect409k1, sect409r1, secp521r1, sect571k1, sect571r1, secp160k1, secp160r1, secp160r2, sect163r1, secp192k1, sect193r1, sect193r2, secp224k1, sect239k1, secp256k1}
Extension ec_point_formats, formats: [uncompressed]
Extension server_name, server_name: [host_name: dev1.lps.dmp.gouv.fr]
***
[write] MD5 and SHA1 hashes: len = 178
0000: 01 00 00 AE 03 01 50 47 4E 4E 16 DD 7E B7 33 6F ......PGNN....3o
0010: FD E5 FD 44 48 9E AA 15 10 6A 11 D0 51 53 DD B3 ...DH....j..QS..
0020: 0A F2 31 6E 7B F2 00 00 2A 00 33 C0 04 00 16 00 ..1n....*.3.....
0030: 05 C0 03 C0 11 C0 02 C0 07 C0 13 C0 08 C0 0C 00 ................
0040: FF C0 0D C0 0E C0 09 00 2F C0 12 00 04 00 32 00 ......../.....2.
0050: 13 00 0A 01 00 00 5B 00 0A 00 34 00 32 00 17 00 ......[...4.2...
0060: 01 00 03 00 13 00 15 00 06 00 07 00 09 00 0A 00 ................
0070: 18 00 0B 00 0C 00 19 00 0D 00 0E 00 0F 00 10 00 ................
0080: 11 00 02 00 12 00 04 00 05 00 14 00 08 00 16 00 ................
0090: 0B 00 02 01 00 00 00 00 19 00 17 00 00 14 64 65 ..............de
00A0: 76 31 2E 6C 70 73 2E 64 6D 70 2E 67 6F 75 76 2E v1.lps.dmp.gouv.
00B0: 66 72 fr
main, WRITE: TLSv1 Handshake, length = 178
[Raw write]: length = 183
0000: 16 03 01 00 B2 01 00 00 AE 03 01 50 47 4E 4E 16 ...........PGNN.
0010: DD 7E B7 33 6F FD E5 FD 44 48 9E AA 15 10 6A 11 ...3o...DH....j.
0020: D0 51 53 DD B3 0A F2 31 6E 7B F2 00 00 2A 00 33 .QS....1n....*.3
0030: C0 04 00 16 00 05 C0 03 C0 11 C0 02 C0 07 C0 13 ................
0040: C0 08 C0 0C 00 FF C0 0D C0 0E C0 09 00 2F C0 12 ............./..
0050: 00 04 00 32 00 13 00 0A 01 00 00 5B 00 0A 00 34 ...2.......[...4
0060: 00 32 00 17 00 01 00 03 00 13 00 15 00 06 00 07 .2..............
0070: 00 09 00 0A 00 18 00 0B 00 0C 00 19 00 0D 00 0E ................
0080: 00 0F 00 10 00 11 00 02 00 12 00 04 00 05 00 14 ................
0090: 00 08 00 16 00 0B 00 02 01 00 00 00 00 19 00 17 ................
00A0: 00 00 14 64 65 76 31 2E 6C 70 73 2E 64 6D 70 2E ...dev1.lps.dmp.
00B0: 67 6F 75 76 2E 66 72 gouv.fr
[Raw read]: length = 5
0000: 16 03 01 00 51 ....Q
[Raw read]: length = 81
0000: 02 00 00 4D 03 01 1D 87 18 37 F0 3B 57 40 59 69 ...M.....7.;W@Yi
0010: B8 F6 1F FC F8 B3 6F 69 AE C7 00 EC 3C 70 FB 73 ......oi....<p.s
0020: B9 6D 59 32 10 22 20 DE 54 94 33 A0 D7 BF 2E 17 .mY2." .T.3.....
0030: 83 AC E3 3A 5D 66 EE 78 0F 39 16 A8 4D BC 95 49 ...:]f.x.9..M..I
0040: A7 9F 60 3E CD 01 FB 00 2F 00 00 05 FF 01 00 01 ..`>..../.......
0050: 00 .
main, READ: TLSv1 Handshake, length = 81
*** ServerHello, TLSv1
RandomCookie: GMT: 478615607 bytes = { 240, 59, 87, 64, 89, 105, 184, 246, 31, 252, 248, 179, 111, 105, 174, 199, 0, 236, 60, 112, 251, 115, 185, 109, 89, 50, 16, 34 }
Session ID: {222, 84, 148, 51, 160, 215, 191, 46, 23, 131, 172, 227, 58, 93, 102, 238, 120, 15, 57, 22, 168, 77, 188, 149, 73, 167, 159, 96, 62, 205, 1, 251}
Cipher Suite: TLS_RSA_WITH_AES_128_CBC_SHA
Compression Method: 0
Extension renegotiation_info, renegotiated_connection: <empty>
***
%% Initialized: [Session-1, TLS_RSA_WITH_AES_128_CBC_SHA]
** TLS_RSA_WITH_AES_128_CBC_SHA
[read] MD5 and SHA1 hashes: len = 81
0000: 02 00 00 4D 03 01 1D 87 18 37 F0 3B 57 40 59 69 ...M.....7.;W@Yi
0010: B8 F6 1F FC F8 B3 6F 69 AE C7 00 EC 3C 70 FB 73 ......oi....<p.s
0020: B9 6D 59 32 10 22 20 DE 54 94 33 A0 D7 BF 2E 17 .mY2." .T.3.....
0030: 83 AC E3 3A 5D 66 EE 78 0F 39 16 A8 4D BC 95 49 ...:]f.x.9..M..I
0040: A7 9F 60 3E CD 01 FB 00 2F 00 00 05 FF 01 00 01 ..`>..../.......
0050: 00 .
[Raw read]: length = 5
0000: 16 03 01 03 0D .....
[Raw read]: length = 781
0000: 0B 00 03 09 00 03 06 00 03 03 30 82 02 FF 30 82 ..........0...0.
0010: 02 68 A0 03 02 01 02 02 10 30 30 30 31 32 30 38 .h.......0001208
0020: 31 35 39 40 D8 BE 84 4A 96 30 0D 06 09 2A 86 48 159@...J.0...*.H
0030: 86 F7 0D 01 01 05 05 00 30 35 31 0B 30 09 06 03 ........051.0...
0040: 55 04 06 13 02 46 52 31 10 30 0E 06 03 55 04 0A U....FR1.0...U..
0050: 13 07 47 49 50 2D 43 50 53 31 14 30 12 06 03 55 ..GIP-CPS1.0...U
0060: 04 0B 13 0B 41 43 2D 43 4C 41 53 53 45 2D 34 30 ....AC-CLASSE-40
0070: 1E 17 0D 31 30 31 32 30 32 31 34 32 39 34 38 5A ...101202142948Z
0080: 17 0D 31 33 31 32 30 32 31 34 32 39 34 38 5A 30 ..131202142948Z0
0090: 76 31 0B 30 09 06 03 55 04 06 13 02 46 52 31 10 v1.0...U....FR1.
00A0: 30 0E 06 03 55 04 0A 13 07 47 49 50 2D 43 50 53 0...U....GIP-CPS
00B0: 31 1C 30 1A 06 03 55 04 07 14 13 48 61 75 74 73 1.0...U....Hauts
00C0: 2D 64 65 2D 53 65 69 6E 65 20 28 39 32 29 31 18 -de-Seine (92)1.
00D0: 30 16 06 03 55 04 0B 13 0F 33 34 31 39 33 30 30 0...U....3419300
00E0: 36 37 38 30 30 30 36 39 31 1D 30 1B 06 03 55 04 678000691.0...U.
00F0: 03 13 14 64 65 76 31 2E 6C 70 73 2E 64 6D 70 2E ...dev1.lps.dmp.
0100: 67 6F 75 76 2E 66 72 30 81 9F 30 0D 06 09 2A 86 gouv.fr0..0...*.
0110: 48 86 F7 0D 01 01 01 05 00 03 81 8D 00 30 81 89 H............0..
0120: 02 81 81 00 AB 67 2C 8D F8 FF 95 82 2D 85 53 5E .....g,.....-.S^
0130: 32 E6 42 3B E6 27 AA 2C 57 C8 7F 5C C8 C3 5E 5D 2.B;.'.,W..\..^]
0140: B8 69 F0 BA 80 0B D6 E1 EB 0D B7 DC 2E 0D 06 C5 .i..............
0150: 76 F0 AA 7E D5 A9 EA 93 AD 79 A9 59 6A EA 11 2B v........y.Yj..+
0160: A3 DA 37 F0 72 1D 58 BD F4 8B 64 F0 72 51 54 7F ..7.r.X...d.rQT.
0170: 6A 18 74 D1 26 BC 24 DE C6 9A D9 17 CD F9 8F E2 j.t.&.$.........
0180: AC 05 54 FE C4 BA BC DE B6 DD 64 5C B2 B4 01 CF ..T.......d\....
0190: 16 11 6E 69 59 24 8F F8 66 DF BE EA 1C 35 25 56 ..niY$..f....5%V
01A0: 2D 7D C0 71 02 03 01 00 01 A3 81 CE 30 81 CB 30 -..q........0..0
01B0: 0E 06 03 55 1D 0F 01 01 FF 04 04 03 02 05 A0 30 ...U...........0
01C0: 1D 06 03 55 1D 25 04 16 30 14 06 08 2B 06 01 05 ...U.%..0...+...
01D0: 05 07 03 01 06 08 2B 06 01 05 05 07 03 02 30 11 ......+.......0.
01E0: 06 09 60 86 48 01 86 F8 42 01 01 04 04 03 02 06 ..`.H...B.......
01F0: C0 30 1F 06 03 55 1D 11 04 18 30 16 82 14 64 65 .0...U....0...de
0200: 76 31 2E 6C 70 73 2E 64 6D 70 2E 67 6F 75 76 2E v1.lps.dmp.gouv.
0210: 66 72 30 15 06 03 55 1D 20 04 0E 30 0C 30 0A 06 fr0...U. ..0.0..
0220: 08 2A 81 7A 01 47 03 07 05 30 0F 06 08 2A 81 7A .*.z.G...0...*.z
0230: 01 47 01 02 05 04 03 04 01 02 30 1D 06 03 55 1D .G........0...U.
0240: 0E 04 16 04 14 04 15 04 A6 02 7A 2D 98 7B 84 F9 ..........z-....
0250: 57 2E 78 1D DC 05 A5 08 E5 30 1F 06 03 55 1D 23 W.x......0...U.#
0260: 04 18 30 16 80 14 25 AF 15 AF C2 4A AE 48 D1 CF ..0...%....J.H..
0270: 24 1B 14 B8 FC 7D 0F 04 1F EB 30 0D 06 09 2A 86 $.........0...*.
0280: 48 86 F7 0D 01 01 05 05 00 03 81 81 00 7A 0F 8F H............z..
0290: CA 9F A9 8E 04 18 29 36 92 1E 0B 8D 59 7B 75 74 ......)6....Y.ut
02A0: 3E 04 A0 D9 2B 3F 96 87 02 16 95 50 9D D1 BE FC >...+?.....P....
02B0: 65 69 B1 66 2B 6A 8E C3 C4 11 28 A5 D7 99 85 3C ei.f+j....(....<
02C0: 91 D8 2E A6 29 9C 74 F9 9F 52 0C 28 7A F5 B5 3B ....).t..R.(z..;
02D0: 18 B3 AE AF F0 53 A7 95 4C 8E D5 75 86 65 52 AD .....S..L..u.eR.
02E0: 6B 74 1B C4 44 07 4C C1 E3 7A 13 C3 B6 1B F5 48 kt..D.L..z.....H
02F0: 0D 2A EA 02 52 E5 DC 74 D5 0A 19 F6 15 9A 9A 77 .*..R..t.......w
0300: 25 DF A4 0A CB 8E 7C EF 26 16 91 C0 43 %.......&...C
main, READ: TLSv1 Handshake, length = 781
*** Certificate chain
chain [0] = [
[
Version: V3
Subject: CN=dev1.lps.dmp.gouv.fr, OU=341930067800069, L=Hauts-de-Seine (92), O=GIP-CPS, C=FR
Signature Algorithm: SHA1withRSA, OID = 1.2.840.113549.1.1.5
Key: Sun RSA public key, 1024 bits
modulus: 120363296413465839968124077289230754027174827454412510949537503837113834541421361602221271921494367781517989597834161877635742384051800856938277523665963364301363072097960974872331552063097492142043418330507250467404882119898322018602188818372970290748777691863852476243794385341757874963504311652985580929137
public exponent: 65537
Validity: [From: Thu Dec 02 15:29:48 CET 2010,
To: Mon Dec 02 15:29:48 CET 2013]
Issuer: OU=AC-CLASSE-4, O=GIP-CPS, C=FR
SerialNumber: [ 30303031 32303831 353940d8 be844a96]
Certificate Extensions: 8
[1]: ObjectId: 2.5.29.14 Criticality=false
SubjectKeyIdentifier [
KeyIdentifier [
0000: 04 15 04 A6 02 7A 2D 98 7B 84 F9 57 2E 78 1D DC .....z-....W.x..
0010: 05 A5 08 E5 ....
]
]
[2]: ObjectId: 2.16.840.1.113730.1.1 Criticality=false
NetscapeCertType [
SSL client
SSL server
]
[3]: ObjectId: 2.5.29.35 Criticality=false
AuthorityKeyIdentifier [
KeyIdentifier [
0000: 25 AF 15 AF C2 4A AE 48 D1 CF 24 1B 14 B8 FC 7D %....J.H..$.....
0010: 0F 04 1F EB ....
]
]
[4]: ObjectId: 2.5.29.17 Criticality=false
SubjectAlternativeName [
DNSName: dev1.lps.dmp.gouv.fr
]
[5]: ObjectId: 1.2.250.1.71.1.2.5 Criticality=false
Extension unknown: DER encoded OCTET string =
0000: 04 03 04 01 02 .....
[6]: ObjectId: 2.5.29.32 Criticality=false
CertificatePolicies [
[CertificatePolicyId: [1.2.250.1.71.3.7.5]
[] ]
]
[7]: ObjectId: 2.5.29.37 Criticality=false
ExtendedKeyUsages [
serverAuth
clientAuth
]
[8]: ObjectId: 2.5.29.15 Criticality=true
KeyUsage [
DigitalSignature
Key_Encipherment
]
]
Algorithm: [SHA1withRSA]
Signature:
0000: 7A 0F 8F CA 9F A9 8E 04 18 29 36 92 1E 0B 8D 59 z........)6....Y
0010: 7B 75 74 3E 04 A0 D9 2B 3F 96 87 02 16 95 50 9D .ut>...+?.....P.
0020: D1 BE FC 65 69 B1 66 2B 6A 8E C3 C4 11 28 A5 D7 ...ei.f+j....(..
0030: 99 85 3C 91 D8 2E A6 29 9C 74 F9 9F 52 0C 28 7A ..<....).t..R.(z
0040: F5 B5 3B 18 B3 AE AF F0 53 A7 95 4C 8E D5 75 86 ..;.....S..L..u.
0050: 65 52 AD 6B 74 1B C4 44 07 4C C1 E3 7A 13 C3 B6 eR.kt..D.L..z...
0060: 1B F5 48 0D 2A EA 02 52 E5 DC 74 D5 0A 19 F6 15 ..H.*..R..t.....
0070: 9A 9A 77 25 DF A4 0A CB 8E 7C EF 26 16 91 C0 43 ..w%.......&...C
]
***
%% Invalidated: [Session-1, TLS_RSA_WITH_AES_128_CBC_SHA]
main, SEND TLSv1 ALERT: fatal, description = certificate_unknown
main, WRITE: TLSv1 Alert, length = 2
[Raw write]: length = 7
0000: 15 03 01 00 02 02 2E .......
main, called closeSocket()
main, handling exception: javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target |
Partager