Skip to content

Commit 67bf440

Browse files
tvernumgeekpete
andauthored
add additional SSLHandshakeException (#468)
Add addition to SSLHandshakeException troubleshooting guide for ECDH ServerKeyExchange that might be caused by cert/cacert/key mismatch. Backport of: #332 Co-Authored-By: Tim Vernum <[email protected]> Co-Authored-By: Peter Dyson <[email protected]>
1 parent f0efbf8 commit 67bf440

File tree

1 file changed

+8
-0
lines changed

1 file changed

+8
-0
lines changed

docs/en/stack/security/troubleshooting.asciidoc

Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -244,6 +244,14 @@ found in the `keystore` or `truststore` and needs to be added to trust this
244244
certificate.
245245
--
246246

247+
`javax.net.ssl.SSLHandshakeException: Invalid ECDH ServerKeyExchange signature`::
248+
+
249+
--
250+
The `Invalid ECDH ServerKeyExchange signature` can indicate that a key and a corresponding certificate don't match and are
251+
causing the handshake to fail.
252+
Verify the contents of each of the files you are using for your configured certificate authorities, certificates and keys. In particular, check that the key and certificate belong to the same key pair.
253+
--
254+
247255
[[trb-security-ssl]]
248256
=== Common SSL/TLS exceptions
249257

0 commit comments

Comments
 (0)