RSA premaster secret error

[theTrav]

On attempting to log in (guessing my password because I don't remember it, so it might be right or might be wrong, don't think that makes a difference, trying ones I KNOW to be wrong results in the same error)

Using Ubuntu 9.04 64 bit

Code: Select all

travis@travis-xps:~$ java -version
java version "1.6.0_0"
OpenJDK Runtime Environment (IcedTea6 1.4.1) (6b14-1.4.1-0ubuntu11)
OpenJDK 64-Bit Server VM (build 14.0-b08, mixed mode)


Launched via firefox but don't think that matters

{edit}

first time I try to execute it it also fails before app startup and says it's reported it to you, here's the stack trace in case it didn't

Code: Select all

java.lang.RuntimeException: Delayed error in resource gfx/tiles/wald/wald (v4), from forking source backed by HTTP res source (https://www.havenandhearth.com/res/)
   at haven.Resource.checkerr(Resource.java:1021)
   at haven.Resource.layer(Resource.java:904)
   at haven.MCache.loadset(MCache.java:142)
   at haven.MCache.tilemap(MCache.java:407)
   at haven.Session$RWorker.handlerel(Session.java:366)
   at haven.Session$RWorker.getrel(Session.java:375)
   at haven.Session$RWorker.run(Session.java:443)
Caused by: haven.Resource$LoadException: javax.net.ssl.SSLKeyException: RSA premaster secret error
   at haven.Resource$Loader.handle(Resource.java:393)
   at haven.Resource$Loader.run(Resource.java:367)
   at java.lang.Thread.run(Thread.java:636)
Caused by: javax.net.ssl.SSLKeyException: RSA premaster secret error
   at sun.security.ssl.RSAClientKeyExchange.<init>(RSAClientKeyExchange.java:116)
   at sun.security.ssl.ClientHandshaker.serverHelloDone(ClientHandshaker.java:593)
   at sun.security.ssl.ClientHandshaker.processMessage(ClientHandshaker.java:216)
   at sun.security.ssl.Handshaker.processLoop(Handshaker.java:533)
   at sun.security.ssl.Handshaker.process_record(Handshaker.java:471)
   at sun.security.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:904)
   at sun.security.ssl.SSLSocketImpl.performInitialHandshake(SSLSocketImpl.java:1132)
   at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1159)
   at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1143)
   at sun.net.www.protocol.https.HttpsClient.afterConnect(HttpsClient.java:423)
   at sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.connect(AbstractDelegateHttpsURLConnection.java:185)
   at sun.net.www.protocol.http.HttpURLConnection.getInputStream(HttpURLConnection.java:1005)
   at sun.net.www.protocol.https.HttpsURLConnectionImpl.getInputStream(HttpsURLConnectionImpl.java:254)
   at haven.Resource$HttpSource.get(Resource.java:319)
   at haven.Resource$TeeSource.get(Resource.java:224)
   at haven.Resource$Loader.handle(Resource.java:387)
   ... 2 more
Caused by: java.security.NoSuchAlgorithmException: SunTlsRsaPremasterSecret KeyGenerator not available
   at javax.crypto.KeyGenerator.<init>(KeyGenerator.java:141)
   at javax.crypto.KeyGenerator.getInstance(KeyGenerator.java:191)
   at sun.security.ssl.JsseJce.getKeyGenerator(JsseJce.java:240)
   at sun.security.ssl.RSAClientKeyExchange.<init>(RSAClientKeyExchange.java:108)
   ... 17 more

[trollfairy]

Try running H&H using Sun's version instead of OpenJDK
Works for me, at least.

[loftar]

That's weird, though. Last I checked, OpenJDK worked. I guess I might need to check again.

[loftar]

Indeed. OpenJDK still works for me, so that, of all things, shouldn't be the problem.

[theTrav]

Indeed. OpenJDK still works for me, so that, of all things, shouldn't be the problem.

I'll have a look at it tonight, the error message indicates that it's trying to use a Sun specific algorithm

Code: Select all

SunTlsRsaPremasterSecret KeyGenerator not available

So it might be some sort of configuration problem

[sunshine]

Hello world! Pardon me for reviving an old post, but I got the same problem on my archlinux box when using OpenJDK and wanted to help others.

The issue seems to be with missing java policies, which are by default not shipped with the java package (thanks to the restricting US export laws of cryptography... *grumble*).
To solve this, one has to manually download the JCE ("Unlimited Strength Java(TM) Cryptography Extension Policy Files") from Sun, put the contents of the downloaded archive (specificly, 'local_policy.jar' and "US_export_policy.jar") in java's lib/security/ directory (ie., on my box this would be /opt/java/jre/lib/security/).

And please note, I haven't actually tried this yet and therefore can't confirm if this really works, but it might be worth a try if all else fails...

Source: JCE Readme file