{"action":"created","issue":{"url":"https://api.github.com/repos/OpenKMIP/PyKMIP/issues/184","repository_url":"https://api.github.com/repos/OpenKMIP/PyKMIP","labels_url":"https://api.github.com/repos/OpenKMIP/PyKMIP/issues/184/labels{/name}","comments_url":"https://api.github.com/repos/OpenKMIP/PyKMIP/issues/184/comments","events_url":"https://api.github.com/repos/OpenKMIP/PyKMIP/issues/184/events","html_url":"https://github.com/OpenKMIP/PyKMIP/issues/184","id":167787976,"number":184,"title":"pykmip server resetting connection request from kmip4j client","user":{"login":"deepak-kumar1985","id":19835107,"avatar_url":"https://avatars.githubusercontent.com/u/19835107?v=3","gravatar_id":"","url":"https://api.github.com/users/deepak-kumar1985","html_url":"https://github.com/deepak-kumar1985","followers_url":"https://api.github.com/users/deepak-kumar1985/followers","following_url":"https://api.github.com/users/deepak-kumar1985/following{/other_user}","gists_url":"https://api.github.com/users/deepak-kumar1985/gists{/gist_id}","starred_url":"https://api.github.com/users/deepak-kumar1985/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/deepak-kumar1985/subscriptions","organizations_url":"https://api.github.com/users/deepak-kumar1985/orgs","repos_url":"https://api.github.com/users/deepak-kumar1985/repos","events_url":"https://api.github.com/users/deepak-kumar1985/events{/privacy}","received_events_url":"https://api.github.com/users/deepak-kumar1985/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":1,"created_at":"2016-07-27T07:22:21Z","updated_at":"2016-08-01T14:32:44Z","closed_at":null,"body":"I am trying to connected to pykmip server from kmip4j client but I am getting below message in server logs.\r\n\r\n \"kmip.server - ERROR - [Errno 1] _ssl.c:510: error:1408\r\n F10B:SSL routines:SSL3_GET_RECORD:wrong version number\"\r\n\r\nI have created server certificates using below openssl commands.\r\n\r\nopenssl genrsa -des3 -out server.orig.key 2048\r\nopenssl rsa -in server.orig.key -out server.key\r\nopenssl req -new -key server.key -out server.csr\r\nopenssl x509 -req -days 365 -in server.csr -signkey server.key -out server.crt\r\n\r\nOn client side I am using kmip4j taken from github link.I use below command to bring up gui interface of client working on ubuntu.\r\n\r\njava -cp \"./gui/target/classes:./core/target/classes:/usr/share/maven-repo/org/slf4j/slf4j-api/1.6.4/:/usr/share/maven-repo/org/slf4j/slf4j-api/debian:/usr/share/maven-repo/org/slf4j/slf4j-api-1.7.21.jar:/usr/share/maven-repo/org/slf4j/slf4j-simple-1.7.2.jar:/usr/share/maven-repo/org/slf4j/impl/slf4j-simple-1.7.21.jar:./utils/target/kmip4j-utils-1.0.jar:./core/target/kmip4j-core-1.0.jar:./kmls/kmls/target/kmip4j-kmls-1.0.jar:./kmls/kmls-db/target/kmip4j-kmls-db-1.0.jar\" ch.ntb.inf.kmip.client.gui.KMIPClientGUI\r\n\r\nSolutions: Solution provided on different forums suggest disabling specific sslv version.\r\nBut I am getting a way of disabling this version with kmip4j client.\r\nPlease help\r\n"},"comment":{"url":"https://api.github.com/repos/OpenKMIP/PyKMIP/issues/comments/236597950","html_url":"https://github.com/OpenKMIP/PyKMIP/issues/184#issuecomment-236597950","issue_url":"https://api.github.com/repos/OpenKMIP/PyKMIP/issues/184","id":236597950,"user":{"login":"PeterHamilton","id":8269688,"avatar_url":"https://avatars.githubusercontent.com/u/8269688?v=3","gravatar_id":"","url":"https://api.github.com/users/PeterHamilton","html_url":"https://github.com/PeterHamilton","followers_url":"https://api.github.com/users/PeterHamilton/followers","following_url":"https://api.github.com/users/PeterHamilton/following{/other_user}","gists_url":"https://api.github.com/users/PeterHamilton/gists{/gist_id}","starred_url":"https://api.github.com/users/PeterHamilton/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/PeterHamilton/subscriptions","organizations_url":"https://api.github.com/users/PeterHamilton/orgs","repos_url":"https://api.github.com/users/PeterHamilton/repos","events_url":"https://api.github.com/users/PeterHamilton/events{/privacy}","received_events_url":"https://api.github.com/users/PeterHamilton/received_events","type":"User","site_admin":false},"created_at":"2016-08-01T14:32:44Z","updated_at":"2016-08-01T14:32:44Z","body":"I'm not familiar with using the kmip4j client. However the error you're seeing indicates that the likely problem is an SSL/TLS mismatch. The PyKMIP server will only establish TLS 1.0/1.2 connections, depending upon the version of Python being used. If the kmip4j client can only establish SSL connections it will not be able to connect to the server.\r\n\r\nRight now there is no way to disable TLS for the PyKMIP server. If the kmip4j client cannot use, or be upgraded to use, a more secure version of TLS it will not be able to connect to the server. However, this would also be true if you were using this client to connect to a certified KMIP appliance. To be KMIP compliant, an appliance *must* only support TLS 1.0/1.2. Anything else is insufficient."}}
{"actor":{"display_login":"PeterHamilton"}}