Получили ту же самую проблему.

Используем JCP 1.0.35 и JTLS 1.0.35!!!

При длине сообщения 18 422 байт получаем:

=============
javax.net.ssl.SSLException: bad record MAC
at ru.CryptoPro.ssl.H.a(Unknown Source)
at ru.CryptoPro.ssl.s.a(Unknown Source)
at ru.CryptoPro.ssl.s.a(Unknown Source)
at ru.CryptoPro.ssl.s.a(Unknown Source)
at ru.CryptoPro.ssl.s.a(Unknown Source)
at ru.CryptoPro.ssl.ab.read(Unknown Source)
at java.io.BufferedInputStream.fill(BufferedInputStream.java:218)
at java.io.BufferedInputStream.read(BufferedInputStream.java:237)

=============

это же сообщение удается успешно разобрать на .Net с Вашим Шарпеем и CSP? что означает у Вас бага в реализуции SSL сокетов на Java.

Когда ждать решения данном проблемы???


Прокси не используется!!!

Отредактировано пользователем 5 июня 2008 г. 21:57:31(UTC)  | Причина: Не указана

Ольга, как именно должен выглядеть журнал???

У меня обычный сокет соединяется в Http сервером. Все по умолчанию ...

Что Вам выслать?

Добрый день. Пытаемся послать журнал. Он большой.

07.06.2008 15:18:16 ru.CryptoPro.JCP.pref.JCPPref getInt
CONFIG: User Preference Node: /ru/CryptoPro/ssl.Session_cache_size_default=0
07.06.2008 15:18:16 ru.CryptoPro.JCP.pref.JCPPref getInt
CONFIG: User Preference Node: /ru/CryptoPro/ssl.Session_time_default=24
07.06.2008 15:18:16 ru.CryptoPro.JCP.pref.JCPPref getInt
CONFIG: User Preference Node: /ru/CryptoPro/ssl.Session_cache_size_default=0
07.06.2008 15:18:16 ru.CryptoPro.JCP.pref.JCPPref getInt
CONFIG: User Preference Node: /ru/CryptoPro/ssl.Session_time_default=24
07.06.2008 15:18:16 ru.CryptoPro.ssl.a a
FINE: %% No cached client session
07.06.2008 15:18:16 ru.CryptoPro.ssl.I m
FINE: %% ClientHello, TLSv1; Cipher Suites: [TLS_CIPHER_2001, TLS_CIPHER_94, SSL3_CK_GVO_KB2]; Compression Methods: 0
07.06.2008 15:18:16 ru.CryptoPro.ssl.a a
FINE: %% ServerHello, TLSv1; Cipher Suite: TLS_CIPHER_2001; Compression Method: 0
07.06.2008 15:18:16 ru.CryptoPro.ssl.a a
FINE: %% New session TLS_CIPHER_2001
07.06.2008 15:18:16 ru.CryptoPro.ssl.a a
FINE: %% Certificate message:

---

Subject: CN=www.testgate.blizko.net, O="ОАО АКБ Связь-Банк ", L=Москва, C=RU, EMAILADDRESS=support@blizko.biz
Valid from Mon Apr 14 13:37:17 MSD 2008 until Tue Apr 14 13:47:17 MSD 2009

---

Subject: CN=Sviaz-Bank Certification Authority, O=Sviaz-Bank, L=Moscow, C=RU, EMAILADDRESS=security@sviaz-bank.ru
Valid from Wed May 18 11:19:17 MSD 2005 until Wed May 18 11:27:27 MSD 2011

---

07.06.2008 15:18:17 ru.CryptoPro.ssl.a a
FINE: %% CertificateRequest
07.06.2008 15:18:17 ru.CryptoPro.ssl.a a
FINE: %% ServerHelloDone (empty)
07.06.2008 15:18:17 ru.CryptoPro.ssl.d a
FINE: %% getting aliases for Client
07.06.2008 15:18:17 ru.CryptoPro.ssl.d a
FINE: %% matching alias: inver
07.06.2008 15:18:17 ru.CryptoPro.ssl.a a
FINE: %% Certificate message:

---

Subject: CN=БлизкоТест, OU=Разработка, O=Инверсия, L=Москва, ST=Россия, C=RU
Valid from Mon Apr 28 16:36:52 MSD 2008 until Tue Apr 28 16:46:52 MSD 2009

---

Subject: CN=Sviaz-Bank Certification Authority, O=Sviaz-Bank, L=Moscow, C=RU, EMAILADDRESS=security@sviaz-bank.ru
Valid from Wed May 18 11:19:17 MSD 2005 until Wed May 18 11:27:27 MSD 2011

---

07.06.2008 15:18:17 ru.CryptoPro.ssl.a a
FINE: %% ClientKeyExchange...
07.06.2008 15:18:18 ru.CryptoPro.ssl.a a
FINE: %% CertificateVerify
07.06.2008 15:18:18 ru.CryptoPro.ssl.I a
FINE: %% Finished.
07.06.2008 15:18:18 ru.CryptoPro.ssl.a b
FINE: %% Finished.
07.06.2008 15:18:18 ru.CryptoPro.ssl.a b
FINE: %% Didn't cache non-resumable client session: [Session-1, TLS_CIPHER_2001]
07.06.2008 15:18:18 ru.CryptoPro.JCP.pref.JCPPref getInt
CONFIG: System Preference Node: /ru/CryptoPro/JCP/tools/CPVerify.DigestStoreDefaultCPVerify_class_WhatRepositoryKeyName=1
07.06.2008 15:18:18 ru.CryptoPro.JCP.pref.JCPPref getInt
CONFIG: System Preference Node: /ru/CryptoPro/JCP/tools/CPVerify.DigestStoreDefaultCPVerify_class_WhatRepositoryKeyName=1
07.06.2008 15:18:18 ru.CryptoPro.JCP.pref.JCPPref getInt
CONFIG: System Preference Node: /ru/CryptoPro/JCP/tools/CPVerify.DigestStoreREGkeyforcount=0
07.06.2008 15:18:18 ru.CryptoPro.JCP.pref.JCPPref getInt
CONFIG: System Preference Node: /ru/CryptoPro/JCP/tools/CPVerify.DigestStoreREGkeyforcount=0
Считано 56123 байт
ru.inversion.app.error.AppError: Ошибка чтения ответного сообщения.

at ru.inversion.blizko.connection.BlizkoUrlConnection.readResponse(BlizkoUrlConnection.java:254)
at ru.inversion.blizko.connection.BlizkoUrlConnection.send(BlizkoUrlConnection.java:310)
at ru.inversion.blizko.connection.BlizkoUrlConnection.send(BlizkoUrlConnection.java:354)
at ru.inversion.blizko.client.BlizkoClient.sendMessage(BlizkoClient.java:213)
at ru.inversion.blizko.client.BlizkoClient.send(BlizkoClient.java:118)
at ru.inversion.BlizkoTest.cliSend(BlizkoTest.java:140)
at ru.inversion.BlizkoTest.getAgent(BlizkoTest.java:213)
at ru.inversion.BlizkoTest.getAgents(BlizkoTest.java:321)
at ru.inversion.BlizkoTest.main(BlizkoTest.java:85)
Caused by: javax.net.ssl.SSLException: bad record MAC
at ru.CryptoPro.ssl.H.a(Unknown Source)
at ru.CryptoPro.ssl.s.a(Unknown Source)
at ru.CryptoPro.ssl.s.a(Unknown Source)
at ru.CryptoPro.ssl.s.a(Unknown Source)
at ru.CryptoPro.ssl.s.a(Unknown Source)
at ru.CryptoPro.ssl.ab.read(Unknown Source)
at java.io.BufferedInputStream.fill(BufferedInputStream.java:218)
at java.io.BufferedInputStream.read1(BufferedInputStream.java:256)
at java.io.BufferedInputStream.read(BufferedInputStream.java:313)
at sun.net.www.http.ChunkedInputStream.readAheadBlocking(ChunkedInputStream.java:525)
at sun.net.www.http.ChunkedInputStream.readAhead(ChunkedInputStream.java:582)
at sun.net.www.http.ChunkedInputStream.read(ChunkedInputStream.java:669)
at java.io.FilterInputStream.read(FilterInputStream.java:111)
at sun.net.www.protocol.http.HttpURLConnection$HttpInputStream.read(HttpURLConnection.java:2172)
at sun.nio.cs.StreamDecoder$CharsetSD.readBytes(StreamDecoder.java:411)
at sun.nio.cs.StreamDecoder$CharsetSD.implRead(StreamDecoder.java:453)
at sun.nio.cs.StreamDecoder.read(StreamDecoder.java:183)
at java.io.InputStreamReader.read(InputStreamReader.java:167)
at java.io.BufferedReader.read1(BufferedReader.java:185)
at java.io.BufferedReader.read(BufferedReader.java:261)
at java.io.Reader.read(Reader.java:122)
at ru.inversion.blizko.connection.BlizkoUrlConnection.readResponse(BlizkoUrlConnection.java:233)
... 8 more

С нашей стороны:
JAVA 1.5.0_11
#
# List of providers and their preference orders (see above):
#
security.provider.1=sun.security.provider.Sun
security.provider.2=sun.security.rsa.SunRsaSign
security.provider.3=com.sun.net.ssl.internal.ssl.Provider
security.provider.4=com.sun.crypto.provider.SunJCE
security.provider.5=sun.security.jgss.SunProvider
security.provider.6=com.sun.security.sasl.Provider
security.provider.7=ru.CryptoPro.JCP.JCP
security.provider.8=ru.CryptoPro.Crypto.CryptoProvider
security.provider.9=ru.CryptoPro.ssl.Provider

У партнёра запросили. Нужна ли ещё какая-нибудь информация?