Skip to content

Commit f5626a3

Browse files
geekpetetvernum
andcommitted
add additional SSLHandshakeException (#332)
Add addition to SSLHandshakeException troubleshooting guide for ECDH ServerKeyExchange that might be caused by cert/cacert/key mismatch. Co-Authored-By: Tim Vernum <[email protected]> Co-Authored-By: Peter Dyson <[email protected]>
1 parent eaaec1c commit f5626a3

File tree

1 file changed

+8
-0
lines changed

1 file changed

+8
-0
lines changed

docs/en/stack/security/troubleshooting.asciidoc

Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -244,6 +244,14 @@ found in the `keystore` or `truststore` and needs to be added to trust this
244244
certificate.
245245
--
246246

247+
`javax.net.ssl.SSLHandshakeException: Invalid ECDH ServerKeyExchange signature``::
248+
+
249+
--
250+
The `Invalid ECDH ServerKeyExchange signature` can indicate that a key and a corresponding certificate don't match and are
251+
causing the handshake to fail.
252+
Verify the contents of each of the files you are using for your configured certificate authorities, certificates and keys. In particular, check that the key and certificate belong to the same key pair.
253+
--
254+
247255
[[trb-security-ssl]]
248256
=== Common SSL/TLS exceptions
249257

0 commit comments

Comments
 (0)