CWPKI0028E: SSL handshake protocol "TLSv1" is not valid.  This protocol is specified in the SSL configuration alias "NodeDefaultSSLSettings" loaded from SSL configuration file "security.xml".  The extended error message is: "no such algorithm: TLSv1 for provider JTLS".

[root@localhost bin]# ./java -cp '/mnt/hgfs/exchange/jcp_plus_jtls_1.0.54/jcp.1.0.54/Samples/samples.jar' ComLine/CheckConfFull 
Mar 1, 2016 3:16:08 PM ComLine.CheckConfFull checkJCP
INFO: ***Check JCP key pair generation and writing to store
Mar 1, 2016 3:16:08 PM ru.CryptoPro.JCP.tools.Starter check
INFO: Loading JCP 1.0.54 36641
Mar 1, 2016 3:16:08 PM ru.CryptoPro.JCP.tools.Starter check
INFO: JCP loaded.
Mar 1, 2016 3:16:10 PM ComLine.CheckConfFull keyGen
INFO: Generation of key pair is completed (GOST3410)
Mar 1, 2016 3:16:10 PM ComLine.CheckConfFull keyGen
INFO: Generation of certificate is completed
Mar 1, 2016 3:16:10 PM ComLine.CheckConfFull keyGen
INFO: Recording of a private key named "jcptestsignkey" to HDImageStore is completed.
Mar 1, 2016 3:16:10 PM ComLine.CheckConfFull checkJCP
INFO: ***Check JCP key pair generation and writing to store - OK
Mar 1, 2016 3:16:10 PM ComLine.CheckConfFull checkJCP
INFO: ***Check JCP signature generation|verifycation
Mar 1, 2016 3:16:10 PM ComLine.CheckConfFull signVer
INFO: Loading of a private key is completed
Mar 1, 2016 3:16:10 PM ComLine.CheckConfFull signVer
INFO: Loading of a text is completed
Mar 1, 2016 3:16:10 PM ComLine.CheckConfFull signVer
INFO: Generation of the signature is completed
Mar 1, 2016 3:16:10 PM ComLine.CheckConfFull signVer
INFO: Loading of a public key is completed
Mar 1, 2016 3:16:10 PM ComLine.CheckConfFull signVer
INFO: The signature is true
Mar 1, 2016 3:16:10 PM ComLine.CheckConfFull checkJCP
INFO: ***JCP signature generation|verifycation - OK
Mar 1, 2016 3:16:10 PM ComLine.CheckConfFull main
INFO: 
JCP - OK

Mar 1, 2016 3:16:10 PM ComLine.CheckConfFull checkCrypto
INFO: ***Check Crypto key pair generation and writing to store
Mar 1, 2016 3:16:11 PM ComLine.CheckConfFull keyGen
INFO: Generation of key pair is completed (GOST3410DH)
Mar 1, 2016 3:16:11 PM ComLine.CheckConfFull keyGen
INFO: Generation of certificate is completed
Mar 1, 2016 3:16:11 PM ComLine.CheckConfFull keyGen
INFO: Recording of a private key named "jcptestcryptokey" to HDImageStore is completed.
Mar 1, 2016 3:16:11 PM ComLine.CheckConfFull checkCrypto
INFO: ***Check Crypto key pair generation and writing to store - OK
Mar 1, 2016 3:16:11 PM ComLine.CheckConfFull main
INFO: 
Crypto - OK

Mar 1, 2016 3:16:11 PM ComLine.CheckConfFull checkJTLS
INFO: ***Prepare keys
Mar 1, 2016 3:16:12 PM ComLine.CheckConfFull keyGen
INFO: Generation of key pair is completed (GOST3410DH)
Mar 1, 2016 3:16:12 PM ComLine.CheckConfFull keyGen
INFO: Generation of certificate is completed
Mar 1, 2016 3:16:12 PM ComLine.CheckConfFull keyGen
INFO: Recording of a private key named "jcptestserverkey" to HDImageStore is completed.
Mar 1, 2016 3:16:13 PM ComLine.CheckConfFull keyGen
INFO: Generation of key pair is completed (GOST3410DH)
Mar 1, 2016 3:16:13 PM ComLine.CheckConfFull keyGen
INFO: Generation of certificate is completed
Mar 1, 2016 3:16:13 PM ComLine.CheckConfFull keyGen
INFO: Recording of a private key named "jcptestclientkey" to HDImageStore is completed.
Mar 1, 2016 3:16:13 PM ComLine.CheckConfFull checkJTLS
INFO: ***Prepare files
Mar 1, 2016 3:16:13 PM ComLine.CheckConfFull checkJTLS
INFO: ***Prepare TrustStore
Mar 1, 2016 3:16:13 PM ComLine.CheckConfFull createTrustStore
INFO: Loading of a certificate is completed
Mar 1, 2016 3:16:13 PM ComLine.CheckConfFull createTrustStore
INFO: Loading of a certificate is completed
Mar 1, 2016 3:16:14 PM ComLine.CheckConfFull checkJTLS
INFO: ***Test ssl without autentification of client
Mar 1, 2016 3:16:14 PM ru.CryptoPro.ssl.SSLContextImpl d
INFO: keyStore is : 
Mar 1, 2016 3:16:14 PM ru.CryptoPro.ssl.SSLContextImpl d
INFO: keyStore type is : HDImageStore
Mar 1, 2016 3:16:14 PM ru.CryptoPro.ssl.SSLContextImpl d
INFO: keyStore provider is : 
Mar 1, 2016 3:16:14 PM ru.CryptoPro.ssl.SSLContextImpl d
INFO: init keystore
Mar 1, 2016 3:16:14 PM ru.CryptoPro.ssl.SSLContextImpl d
INFO: defaultStoreProvider = 
Mar 1, 2016 3:16:14 PM ru.CryptoPro.ssl.SSLContextImpl d
INFO: 
Mar 1, 2016 3:16:14 PM ru.CryptoPro.ssl.SSLContextImpl d
INFO: init keymanager of type GostX509
Mar 1, 2016 3:16:14 PM ru.CryptoPro.ssl.SSLContextImpl d
INFO: trustStore is: /opt/IBM/WebSphere/AppServer/java/jre/bin/jcptesttrust.store
Mar 1, 2016 3:16:14 PM ru.CryptoPro.ssl.SSLContextImpl d
INFO: trustStore type is : HDImageStore
Mar 1, 2016 3:16:14 PM ru.CryptoPro.ssl.SSLContextImpl d
INFO: trustStore provider is : 
Mar 1, 2016 3:16:14 PM ru.CryptoPro.ssl.SSLContextImpl d
INFO: init truststore
Mar 1, 2016 3:16:14 PM ru.CryptoPro.ssl.SSLContextImpl d
INFO: init trustmanager of type GostX509
Mar 1, 2016 3:16:14 PM ru.CryptoPro.ssl.SSLContextImpl d
INFO: init context...
Mar 1, 2016 3:16:14 PM ru.CryptoPro.ssl.SSLContextImpl d
INFO: Context inited.
Mar 1, 2016 3:16:14 PM ComLine.CheckConfFull tls
INFO: server started
Mar 1, 2016 3:16:14 PM JTLS_samples.Server proc
INFO: Server: read request
Mar 1, 2016 3:16:14 PM JTLS_samples.Client proc
INFO:  Client request: GET /jcptestdoc.in HTTP/1.0


Mar 1, 2016 3:16:14 PM JTLS_samples.Client proc
INFO:  Client: parse answer
Mar 1, 2016 3:16:14 PM JTLS_samples.Server proc
INFO: Server: parse request
Mar 1, 2016 3:16:14 PM JTLS_samples.Server proc
INFO: Server: read file
Mar 1, 2016 3:16:14 PM JTLS_samples.Server proc
INFO: Server: answer
HTTP/1.0 200 OK
Content-Length: 5


Mar 1, 2016 3:16:14 PM JTLS_samples.Client proc
INFO: answer was writing to: /opt/IBM/WebSphere/AppServer/java/jre/bin/jcptestdoc.outjcptestdoc.in
Mar 1, 2016 3:16:14 PM ComLine.CheckConfFull tls
INFO: GET complete
Mar 1, 2016 3:16:14 PM JTLS_samples.Server run
SEVERE: Server error:java.net.SocketException: Socket closed
Mar 1, 2016 3:16:14 PM ComLine.CheckConfFull checkJTLS
INFO: ***Test ssl with autentification of client
Mar 1, 2016 3:16:15 PM ComLine.CheckConfFull tls
INFO: server started
Mar 1, 2016 3:16:15 PM JTLS_samples.Server proc
INFO: Server: read request
Mar 1, 2016 3:16:15 PM JTLS_samples.Client proc
INFO:  Client request: GET /jcptestdoc.in HTTP/1.0


Mar 1, 2016 3:16:15 PM JTLS_samples.Client proc
INFO:  Client: parse answer
Mar 1, 2016 3:16:15 PM JTLS_samples.Server proc
INFO: Server: parse request
Mar 1, 2016 3:16:15 PM JTLS_samples.Server proc
INFO: Server: read file
Mar 1, 2016 3:16:15 PM JTLS_samples.Server proc
INFO: Server: answer
HTTP/1.0 200 OK
Content-Length: 5


Mar 1, 2016 3:16:15 PM JTLS_samples.Client proc
INFO: answer was writing to: /opt/IBM/WebSphere/AppServer/java/jre/bin/jcptestdoc_a.outjcptestdoc.in
Mar 1, 2016 3:16:15 PM ComLine.CheckConfFull tls
INFO: GET complete
Mar 1, 2016 3:16:15 PM JTLS_samples.Server run
SEVERE: Server error:java.net.SocketException: Socket closed
Mar 1, 2016 3:16:15 PM ComLine.CheckConfFull main
INFO: 
JTLS - OK

[#text: return code:  403
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"> 
<html xmlns="http://www.w3.org/1999/xhtml"> 
<head> 
<title>Подробно об ошибке IIS 7.5 - 403.7 - Forbidden</title> 
<style type="text/css"> 
<!-- 
body{margin:0;font-size:.7em;font-family:Verdana,Arial,Helvetica,sans-serif;background:#CBE1EF;} 
code{margin:0;color:#006600;font-size:1.1em;font-weight:bold;} 
.config_source code{font-size:.8em;color:#000000;} 
pre{margin:0;font-size:1.4em;word-wrap:break-word;} 
ul,ol{margin:10px 0 10px 40px;} 
ul.first,ol.first{margin-top:5px;} 
fieldset{padding:0 15px 10px 15px;} 
.summary-container fieldset{padding-bottom:5px;margin-top:4px;} 
legend.no-expand-all{padding:2px 15px 4px 10px;margin:0 0 0 -12px;} 
legend{color:#333333;padding:4px 15px 4px 10px;margin:4px 0 8px -12px;_margin-top:0px; 
 border-top:1px solid #EDEDED;border-left:1px solid #EDEDED;border-right:1px solid #969696; 
 border-bottom:1px solid #969696;background:#E7ECF0;font-weight:bold;font-size:1em;} 
a:link,a:visited{color:#007EFF;font-weight:bold;} 
a:hover{text-decoration:none;} 
h1{font-size:2.4em;margin:0;color:#FFF;} 
h2{font-size:1.7em;margin:0;color:#CC0000;} 
h3{font-size:1.4em;margin:10px 0 0 0;color:#CC0000;} 
h4{font-size:1.2em;margin:10px 0 5px 0; 
}#header{width:96%;margin:0 0 0 0;padding:6px 2% 6px 2%;font-family:"trebuchet MS",Verdana,sans-serif; 
 color:#FFF;background-color:#5C87B2; 
}#content{margin:0 0 0 2%;position:relative;} 
.summary-container,.content-container{background:#FFF;width:96%;margin-top:8px;padding:10px;position:relative;} 
.config_source{background:#fff5c4;} 
.content-container p{margin:0 0 10px 0; 
}#details-left{width:35%;float:left;margin-right:2%; 
}#details-right{width:63%;float:left;overflow:hidden; 
}#server_version{width:96%;_height:1px;min-height:1px;margin:0 0 5px 0;padding:11px 2% 8px 2%;color:#FFFFFF; 
 background-color:#5A7FA5;border-bottom:1px solid #C1CFDD;border-top:1px solid #4A6C8E;font-weight:normal; 
 font-size:1em;color:#FFF;text-align:right; 
}#server_version p{margin:5px 0;} 
table{margin:4px 0 4px 0;width:100%;border:none;} 
td,th{vertical-align:top;padding:3px 0;text-align:left;font-weight:bold;border:none;} 
th{width:30%;text-align:right;padding-right:2%;font-weight:normal;} 
thead th{background-color:#ebebeb;width:25%; 
}#details-right th{width:20%;} 
table tr.alt td,table tr.alt th{background-color:#ebebeb;} 
.highlight-code{color:#CC0000;font-weight:bold;font-style:italic;} 
.clear{clear:both;} 
.preferred{padding:0 5px 2px 5px;font-weight:normal;background:#006633;color:#FFF;font-size:.8em;} 
--> 
</style> 
 
</head> 
<body> 
<div id="header"><h1>Ошибка сервера в приложении "RA5555/RA"</h1></div> 
<div id="server_version"><p>Internet Information Services 7.5</p></div> 
<div id="content"> 
<div class="content-container"> 
 <fieldset><legend>Описание ошибки:</legend> 
  <h2>Ошибка HTTP 403.7 - Forbidden</h2> 
  <h3>Страница, к которой вы пытаетесь обратиться, требует, чтобы веб-браузер имел SSL-сертификат клиента, признаваемый веб-сервером.</h3> 
 </fieldset> 
</div> 
<div class="content-container"> 
 <fieldset><legend>Подробные сведения об ошибке</legend> 
  <div id="details-left"> 
   <table border="0" cellpadding="0" cellspacing="0"> 
    <tr class="alt"><th>Модуль</th><td>IIS Web Core</td></tr> 
    <tr><th>Уведомление</th><td>BeginRequest</td></tr> 
    <tr class="alt"><th>Обработчик</th><td>AboMapperCustom-16239</td></tr> 
    <tr><th>Код ошибки</th><td>0x80070005</td></tr> 
     
   </table> 
  </div> 
  <div id="details-right"> 
   <table border="0" cellpadding="0" cellspacing="0"> 
    <tr class="alt"><th>Запрашиваемый URL-адрес</th><td>https://cryptopro.ru:5555/ra/ra.asp</td></tr> 
    <tr><th>Физический путь</th><td>C:\ProgramData\Crypto Pro\RA\Inetpub\3\RA\ra.asp</td></tr> 
    <tr class="alt"><th>Способ входа</th><td>Пока не определено</td></tr> 
    <tr><th>Пользователь, выполнивший вход</th><td>Пока не определено</td></tr> 
     
   </table> 
   <div class="clear"></div> 
  </div> 
 </fieldset> 
</div> 
<div class="content-container"> 
 <fieldset><legend>Наиболее вероятные причины:</legend> 
  <ul> 	<li>Страница, к которой вы пытаетесь обратиться, требует наличия SSL-сертификата клиента.</li> 	<li>Вы просматриваете эту страницу с помощью протокола HTTP.</li> 	<li>Срок действия сертификата клиента истек, или он еще не вступил в силу.</li> 	<li>Корневой сертификат (сертификат центра сертификации) сервера, выдающего сертификаты клиентов, не установлен на веб-сервере.</li> </ul> 
 </fieldset> 
</div> 
<div class="content-container"> 
 <fieldset><legend>Что можно предпринять:</legend> 
  <ul> 	<li>Обратитесь к администратору сайта за получением действительного сертификата клиента для данного веб-сайта.</li> 	<li>Попробуйте просмотреть эту страницу с помощью протокола HTTPS.</li> 	<li>Если у вас установлен сертификат клиента, проверьте, не истек ли срок его действия и пришло ли время для его вступления в силу.</li> 	<li>Удостоверьтесь, что корневой сертификат установлен на веб-сервере.</li> </ul> 
 </fieldset> 
</div> 
 
 
<div class="content-container"> 
 <fieldset><legend>Ссылки и дополнительные сведения...</legend> 
  Эта ошибка означает, что для доступа к запрошенному URL-адресу нужно использовать протокол SSL. Сертификат клиента используется для подтверждения ваших прав как законного пользователя этого ресурса. С вопросами о том, как получить корректный сертификат для использования на веб-сайте, обращайтесь к администратору сайта. 
  <p><a href="http://go.microsoft.com/fwlink/?LinkID=62293&amp;IIS70Error=403,7,0x80070005,7601">Дополнительные сведения...&raquo;</a></p> 
   
 </fieldset> 
</div> 
</div> 
</body> 
</html> 
]

        System.setProperty("javax.net.ssl.supportGVO", "true");
        System.setProperty("javax.net.ssl.requireClientAuth", "true");
        System.setProperty("javax.net.ssl.trustStoreType", "CertStore");
        System.setProperty("javax.net.ssl.trustStore", "/var/CPROcsp/keys/client.store");
        System.setProperty("javax.net.ssl.trustStorePassword", "Qwer1234");
        System.setProperty("javax.net.ssl.keyStoreType", "HDImageStore");
        System.setProperty("javax.net.ssl.keyStorePassword", "1");