[kaffe] Exception in GNUSecurityParameters.decrypt when using SSL socket

[n-roeser at gmx.net]

Hello!

I tried to create a test SSL server application with jessie-1.0.0 (in
kaffe-1.1.6). I connected to this application using s_client from openssl.

If I run s_client with -tls1, I get the following exception stack trace:

org.metastatic.jessie.provider.MacException
   at org.metastatic.jessie.provider.GNUSecurityParameters.decrypt
(GNUSecurityParameters.java:307)
   at org.metastatic.jessie.provider.RecordInput.readRecord
(RecordInput.java:207)
   at org.metastatic.jessie.provider.RecordInput.read (RecordInput.java:109)
   at org.metastatic.jessie.provider.RecordInputStream.read
(RecordInputStream.java:102)
   at org.metastatic.jessie.provider.RecordInputStream.read
(RecordInputStream.java:97)
   at org.metastatic.jessie.provider.RecordInputStream.read
(RecordInputStream.java:84)
   at org.metastatic.jessie.provider.SSLSocketInputStream.read
(SSLSocketInputStream.java:112)
   at org.metastatic.jessie.provider.DigestInputStream.read
(DigestInputStream.java:82)
   at org.metastatic.jessie.provider.Handshake$Type.read
(Handshake.java:372)
   at org.metastatic.jessie.provider.Handshake.read (Handshake.java:117)
   at org.metastatic.jessie.provider.Handshake.read (Handshake.java:104)
   at org.metastatic.jessie.provider.SSLSocket.doServerHandshake
(SSLSocket.java:2997)
   at org.metastatic.jessie.provider.SSLSocket.startHandshake
(SSLSocket.java:523)


And if I add -bugs, I get the following:

java.lang.ArrayIndexOutOfBoundsException
   at org.metastatic.jessie.provider.GNUSecurityParameters.decrypt
(GNUSecurityParameters.java:263)
   at org.metastatic.jessie.provider.RecordInput.readRecord
(RecordInput.java:207)
   at org.metastatic.jessie.provider.RecordInput.read (RecordInput.java:109)
   at org.metastatic.jessie.provider.RecordInputStream.read
(RecordInputStream.java:102)
   at org.metastatic.jessie.provider.RecordInputStream.read
(RecordInputStream.java:97)
   at org.metastatic.jessie.provider.RecordInputStream.read
(RecordInputStream.java:84)
   at org.metastatic.jessie.provider.SSLSocketInputStream.read
(SSLSocketInputStream.java:112)
   at org.metastatic.jessie.provider.DigestInputStream.read
(DigestInputStream.java:82)
   at org.metastatic.jessie.provider.Handshake$Type.read
(Handshake.java:372)
   at org.metastatic.jessie.provider.Handshake.read (Handshake.java:117)
   at org.metastatic.jessie.provider.Handshake.read (Handshake.java:104)
   at org.metastatic.jessie.provider.SSLSocket.doServerHandshake
(SSLSocket.java:2997)
   at org.metastatic.jessie.provider.SSLSocket.startHandshake
(SSLSocket.java:523)


I think this is a bug in Jessie, and I'd like to help debug/fix it, but I
don't know where to start.

Thanks,

-- 
Nico

5 GB Mailbox, 50 FreeSMS http://www.gmx.net/de/go/promail
+++ GMX - die erste Adresse für Mail, Message, More +++