[Netarchivesuite-devel] HTTPS and DH keypair

[sara.aubry at bnf.fr]

Hello everyone,

Still running NAS 4, heritrix 1.14 and Java 1.6.0_17. We are having more 
and more trouble with HTTPS websites, getting "Could not generate DH 
keypair" errors while crawling.
We already had some exchanges about this last year but we were wondering 
if some of you solved the problem and how.
Also, is there a way we could define a JAVA_HOME for heritrix which is 
different than the one of the HarvestController?
Thanks for your help,
Sara


----- Transféré par Sara AUBRY/ETS/BnF le 24/03/2016 15:19 -----

De :    Bert WENDLAND/ETS/BnF
A :     Sara AUBRY/ETS/BnF at BnF
Date :  24/03/2016 15:14
Objet : DH keypair


2016-03-24T14:02:47.736Z    -2          - 
https://www.estrepublicain.fr/e-services/Login R 
http://www.estrepublicain.fr/e-services/Login no-type #137 - - 
http://www.estrepublicain.fr/e-services/Login le:SSLException at HTTP
 javax.net.ssl.SSLException: java.lang.RuntimeException: Could not 
generate DH keypair
                 at 
com.sun.net.ssl.internal.ssl.Alerts.getSSLException(Alerts.java:190)
                 at 
com.sun.net.ssl.internal.ssl.SSLSocketImpl.fatal(SSLSocketImpl.java:1611)
                 at 
com.sun.net.ssl.internal.ssl.SSLSocketImpl.fatal(SSLSocketImpl.java:1574)
                 at 
com.sun.net.ssl.internal.ssl.SSLSocketImpl.handleException(SSLSocketImpl.java:1557)
                 at 
com.sun.net.ssl.internal.ssl.SSLSocketImpl.handleException(SSLSocketImpl.java:1483)
                 at 
com.sun.net.ssl.internal.ssl.AppOutputStream.write(AppOutputStream.java:64)
                 at 
java.io.BufferedOutputStream.flushBuffer(BufferedOutputStream.java:65)
                 at 
java.io.BufferedOutputStream.flush(BufferedOutputStream.java:123)
                 at 
org.archive.io.RecordingOutputStream.flush(RecordingOutputStream.java:388)
                 at 
java.io.FilterOutputStream.flush(FilterOutputStream.java:123)
                 at 
org.apache.commons.httpclient.methods.EntityEnclosingMethod.writeRequestBody(EntityEnclosingMethod.java:506)
                 at 
org.apache.commons.httpclient.HttpMethodBase.writeRequest(HttpMethodBase.java:1982)
                 at 
org.apache.commons.httpclient.HttpMethodBase.execute(HttpMethodBase.java:1000)
                 at 
org.archive.httpclient.HttpRecorderPostMethod.execute(HttpRecorderPostMethod.java:78)
                 at 
org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(HttpMethodDirector.java:398)
                 at 
org.apache.commons.httpclient.HttpMethodDirector.executeMethod(HttpMethodDirector.java:171)
                 at 
org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397)
                 at 
org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:346)
                 at 
org.archive.crawler.fetcher.FetchHTTP.innerProcess(FetchHTTP.java:500)
                 at 
org.archive.crawler.framework.Processor.process(Processor.java:109)
                 at 
org.archive.crawler.framework.ToeThread.processCrawlUri(ToeThread.java:306)
                 at 
org.archive.crawler.framework.ToeThread.run(ToeThread.java:154)
Caused by: java.lang.RuntimeException: Could not generate DH keypair
                 at 
com.sun.net.ssl.internal.ssl.DHCrypt.<init>(DHCrypt.java:106)
                 at 
com.sun.net.ssl.internal.ssl.ClientHandshaker.serverKeyExchange(ClientHandshaker.java:446)
                 at 
com.sun.net.ssl.internal.ssl.ClientHandshaker.processMessage(ClientHandshaker.java:171)
                 at 
com.sun.net.ssl.internal.ssl.Handshaker.processLoop(Handshaker.java:516)
                 at 
com.sun.net.ssl.internal.ssl.Handshaker.process_record(Handshaker.java:454)
                 at 
com.sun.net.ssl.internal.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:884)
                 at 
com.sun.net.ssl.internal.ssl.SSLSocketImpl.performInitialHandshake(SSLSocketImpl.java:1112)
                 at 
com.sun.net.ssl.internal.ssl.SSLSocketImpl.writeRecord(SSLSocketImpl.java:623)
                 at 
com.sun.net.ssl.internal.ssl.AppOutputStream.write(AppOutputStream.java:59)
                 ... 16 more
Caused by: java.security.InvalidAlgorithmParameterException: Prime size 
must be multiple of 64, and can only range from 512 to 1024 (inclusive)
                 at 
com.sun.crypto.provider.DHKeyPairGenerator.initialize(DashoA13*..)
                 at 
java.security.KeyPairGenerator$Delegate.initialize(KeyPairGenerator.java:627)
                 at 
com.sun.net.ssl.internal.ssl.DHCrypt.<init>(DHCrypt.java:100)
                 ... 24 more
Expositions : 
Miquel Barceló. Sol y sombra  - du 22 mars 2016 au 28 août 2016 - BnF - François-Mitterrand Avant d'imprimer, pensez à l'environnement. 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://ml.sbforge.org/pipermail/netarchivesuite-devel/attachments/20160324/a61be47c/attachment.html>