Gazelle Security Suite

Permanent link

https://pancanadianio.ca/gss/details/connection.seam?id=6336

Connection date

3/21/23 12:05:50 PM (EDT GMT-0400)

SUT address

test01.ententee.com:3001

Simulator address

canada-prod.ihe-europe.net:33204

Simulator keyword

Client PAT2023

Simulator certificate

CN=pancanadianio.ca

Handshake success

Protocol

Cipher suite

Error message

result=FAILED
errors list :
PKIX validation (CN=pancanadianio.ca, O=IHE, C=CA) : The certificate has a
valid signature, but is no trust anchor (PKIX)

Error stack trace

javax.net.ssl.SSLHandshakeException: General SSLEngine problem
at sun.security.ssl.Handshaker.checkThrown(Handshaker.java:1480)
at
        sun.security.ssl.SSLEngineImpl.checkTaskThrown(SSLEngineImpl.java:509)
at sun.security.ssl.SSLEngineImpl.readNetRecord(SSLEngineImpl.java:780)
at sun.security.ssl.SSLEngineImpl.unwrap(SSLEngineImpl.java:744)
at javax.net.ssl.SSLEngine.unwrap(SSLEngine.java:624)
at org.jboss.netty.handler.ssl.SslHandler.unwrap(SslHandler.java:1212)
at org.jboss.netty.handler.ssl.SslHandler.decode(SslHandler.java:910)
at org.jboss.netty.handler.codec.frame.FrameDecoder.callDecode(FrameDe-
        coder.java:425)
at org.jboss.netty.handler.codec.frame.FrameDecoder.messageReceived(Fr-
        ameDecoder.java:303)
at org.jboss.netty.channel.SimpleChannelUpstreamHandler.handleUpstream-
        (SimpleChannelUpstreamHandler.java:70)
at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(Default-
        ChannelPipeline.java:560)
at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(Default-
        ChannelPipeline.java:555)
at
        org.jboss.netty.channel.Channels.fireMessageReceived(Channels.java:268)
at
        org.jboss.netty.channel.Channels.fireMessageReceived(Channels.java:255)
at org.jboss.netty.channel.socket.nio.NioWorker.read(NioWorker.java:88)
at org.jboss.netty.channel.socket.nio.AbstractNioWorker.process(Abstra-
        ctNioWorker.java:107)
at org.jboss.netty.channel.socket.nio.AbstractNioSelector.run(Abstract-
        NioSelector.java:312)
at org.jboss.netty.channel.socket.nio.AbstractNioWorker.run(AbstractNi-
        oWorker.java:88)
at org.jboss.netty.channel.socket.nio.NioWorker.run(NioWorker.java:178)
at org.jboss.netty.util.ThreadRenamingRunnable.run(ThreadRenamingRunna-
        ble.java:108)
at org.jboss.netty.util.internal.DeadLockProofWorker$1.run(DeadLockPro-
        ofWorker.java:42)
at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecuto-
        r.java:1152)
at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecut-
        or.java:622)
at java.lang.Thread.run(Thread.java:748)
Caused by: javax.net.ssl.SSLHandshakeException: General SSLEngine problem
at sun.security.ssl.Alerts.getSSLException(Alerts.java:192)
at sun.security.ssl.SSLEngineImpl.fatal(SSLEngineImpl.java:1672)
at sun.security.ssl.Handshaker.fatalSE(Handshaker.java:296)
at sun.security.ssl.Handshaker.fatalSE(Handshaker.java:288)
at sun.security.ssl.ClientHandshaker.serverCertificate(ClientHandshake-
        r.java:1598)
at sun.security.ssl.ClientHandshaker.processMessage(ClientHandshaker.j-
        ava:216)
at sun.security.ssl.Handshaker.processLoop(Handshaker.java:997)
at sun.security.ssl.Handshaker$1.run(Handshaker.java:930)
at sun.security.ssl.Handshaker$1.run(Handshaker.java:928)
at java.security.AccessController.doPrivileged(Native Method)
at sun.security.ssl.Handshaker$DelegatedTask.run(Handshaker.java:1418)
at org.jboss.netty.handler.ssl.SslHandler$4.run(SslHandler.java:1348)
at org.jboss.netty.handler.ssl.ImmediateExecutor.execute(ImmediateExec-
        utor.java:31)
at org.jboss.netty.handler.ssl.SslHandler.runDelegatedTasks(SslHandler-
        .java:1345)
at org.jboss.netty.handler.ssl.SslHandler.unwrap(SslHandler.java:1232)
... 18 more
Caused by: java.security.cert.CertificateException: result=FAILED
errors list :
PKIX validation (CN=pancanadianio.ca, O=IHE, C=CA) : The certificate has a
valid signature, but is no trust anchor (PKIX)

at net.ihe.gazelle.simulators.tls.common.TestTrustManager.checkServerT-
        rusted(TestTrustManager.java:58)
at sun.security.ssl.AbstractTrustManagerWrapper.checkServerTrusted(SSL-
        ContextImpl.java:1100)
at sun.security.ssl.ClientHandshaker.serverCertificate(ClientHandshake-
        r.java:1585)
... 28 more

TLS/SSL events

Date

03/21/2023 16:05:50.136

Type

CHECK_TRUSTED_SERVER

Details

Details

result=FAILED errors list : PKIX validation (CN=pancanadianio.ca, O=IHE, C=CA) : The certificate has a valid signature, but is no trust anchor (PKIX)

EMAILADDRESS=garrett.carver@cerner.com, SURNAME=carver, GIVENNAME=garrett, CN=cerner interop network services, O=cerner corporation, C=US
[
[
  Version: V3
  Subject: EMAILADDRESS=garrett.carver@cerner.com, SURNAME=carver,
  GIVENNAME=garrett, CN=cerner interop network services, O=cerner corporation,
  C=US
  Signature Algorithm: SHA512withRSA, OID = 1.2.840.113549.1.1.13

  Key:  Sun RSA public key, 1024 bits
  modulus: 1480838805780944695566528687503900478909238152311458598368636352851-
  3380713522897781295176378680164905459501583825056057163906225683849959974552-
  7544645989327785016161482506766942146647449692428450438708821470961996631135-
  2423756280192981318612003833697217487620961158349318235444749865123787886862-
  50170598569197
  public exponent: 65537
  Validity: [From: Mon Mar 21 15:07:49 CET 2022,
               To: Sun Mar 21 15:07:49 CET 2032]
  Issuer: CN=pancanadianio.ca, O=IHE, C=CA
  SerialNumber: [    15]

Certificate Extensions: 9
[1]: ObjectId: 2.16.840.1.113730.1.3 Criticality=false
Extension unknown: DER encoded OCTET string =
0000: 04 2E 16 2C 68 74 74 70   73 3A 2F 2F 70 61 6E 63  ...,https://panc
0010: 61 6E 61 64 69 61 6E 69   6F 2E 63 61 2F 67 73 73  anadianio.ca/gss
0020: 2F 63 72 6C 2F 31 2F 63   61 63 72 6C 2E 63 72 6C  /crl/1/cacrl.crl

[2]: ObjectId: 2.16.840.1.113730.1.4 Criticality=false
Extension unknown: DER encoded OCTET string =
0000: 04 2E 16 2C 68 74 74 70   73 3A 2F 2F 70 61 6E 63  ...,https://panc
0010: 61 6E 61 64 69 61 6E 69   6F 2E 63 61 2F 67 73 73  anadianio.ca/gss
0020: 2F 63 72 6C 2F 31 2F 63   61 63 72 6C 2E 63 72 6C  /crl/1/cacrl.crl

[3]: ObjectId: 2.5.29.35 Criticality=false
AuthorityKeyIdentifier [
KeyIdentifier [
0000: 49 F0 31 42 10 9B B3 F6   65 EB 68 9C 26 01 DC 7A  I.1B....e.h.&..z
0010: 93 9D C3 7A                                        ...z
]
]

[4]: ObjectId: 2.5.29.19 Criticality=true
BasicConstraints:[
  CA:false
  PathLen: undefined
]

[5]: ObjectId: 2.5.29.31 Criticality=false
CRLDistributionPoints [
  [DistributionPoint:
     [URIName: https://pancanadianio.ca/gss/crl/1/cacrl.crl]
]]

[6]: ObjectId: 2.5.29.37 Criticality=false
ExtendedKeyUsages [
  clientAuth
  emailProtection
  1.3.6.1.4.1.311.20.2.2
  serverAuth
]

[7]: ObjectId: 2.5.29.15 Criticality=true
KeyUsage [
  DigitalSignature
  Non_repudiation
  Key_Encipherment
  Data_Encipherment
]

[8]: ObjectId: 2.16.840.1.113730.1.1 Criticality=false
NetscapeCertType [
   SSL client
   SSL server
   S/MIME
]

[9]: ObjectId: 2.5.29.14 Criticality=false
SubjectKeyIdentifier [
KeyIdentifier [
0000: B4 C7 2C 11 27 4F 8C D0   4D 4C B7 A2 B4 9F EC 6D  ..,.'O..ML.....m
0010: 39 B7 61 6C                                        9.al
]
]

]
  Algorithm: [SHA512withRSA]
  Signature:
0000: 37 13 56 54 B8 ED 9C 5A   59 B3 AE EF 54 E0 06 F9  7.VT...ZY...T...
0010: F1 7A 38 D7 ED 26 12 E0   B1 0D F9 0E F4 04 A2 4C  .z8..&.........L
0020: D8 EC 50 1B 34 B5 11 AA   6E 65 3B 5D CC E4 6F 6A  ..P.4...ne;]..oj
0030: 11 43 BD 88 FD 92 06 C9   66 73 8B 89 B0 2F 42 70  .C......fs.../Bp
0040: AC 03 7F FB C7 3B 8C 87   96 E0 DA 79 5A F6 88 F4  .....;.....yZ...
0050: 0F 99 71 FE 67 2A E3 5D   70 48 2D E1 D7 1A CA E3  ..q.g*.]pH-.....
0060: BA 85 6F 31 5F DC B4 A0   1D 2B 76 E0 A0 B0 E5 C7  ..o1_....+v.....
0070: AD 8B B7 B9 A3 B0 02 69   C8 D8 F6 51 5E BF 05 8D  .......i...Q^...
0080: 83 F3 AB 28 2F 82 36 85   EA A1 2E B9 B3 19 D2 02  ...(/.6.........
0090: 30 77 C6 25 18 17 B3 1C   68 A6 58 D8 94 10 4F DA  0w.%....h.X...O.
00A0: E6 82 FE C0 95 B3 78 50   AE C0 BA 3D 90 03 41 67  ......xP...=..Ag
00B0: 6F 89 70 7F 7D 64 8E 86   C4 30 7E E7 61 CB F2 70  o.p..d...0..a..p
00C0: D1 2B AF 55 78 D6 8F B9   DD B6 61 1B 81 DB 5A 7A  .+.Ux.....a...Zz
00D0: 96 1D E6 7E 87 0E 4F 0E   67 D8 A6 8B A6 B0 BD 96  ......O.g.......
00E0: DA 7F D2 62 F4 79 CF 1E   D1 E3 C6 91 A2 D8 D1 1A  ...b.y..........
00F0: FD 2E 5C 21 C3 EF B9 52   56 8E 58 3A 2D FD C0 BA  ..\!...RV.X:-...

]
CN=pancanadianio.ca, O=IHE, C=CA
[
[
  Version: V3
  Subject: CN=pancanadianio.ca, O=IHE, C=CA
  Signature Algorithm: SHA512withRSA, OID = 1.2.840.113549.1.1.13

  Key:  Sun RSA public key, 2048 bits
  modulus: 2367195668656841304924180287703656851467753959575985269595933072350-
  1048324617920098432132563196205333717871307150391101462128441136451004654185-
  6564267593006141653867347121865402387008463080171233926993029523372811274941-
  0628342783185334345486217109408217237719358497525112955888749586847991267478-
  3760106266504173706012700168577739496784091577471132376628778309952018908681-
  0640354681025587890640635091631963146729105264037237291314107860908019386838-
  7156950095879827587126141882258716797766646533218834980828591514158674987077-
  1766158865354926186822635676644916585272281370372219882871249637424789557077-
  864069015683202849
  public exponent: 65537
  Validity: [From: Wed Feb 09 09:59:15 CET 2022,
               To: Mon Feb 09 09:59:15 CET 2032]
  Issuer: CN=pancanadianio.ca, O=IHE, C=CA
  SerialNumber: [    01]

Certificate Extensions: 8
[1]: ObjectId: 2.16.840.1.113730.1.3 Criticality=false
Extension unknown: DER encoded OCTET string =
0000: 04 2E 16 2C 68 74 74 70   73 3A 2F 2F 70 61 6E 63  ...,https://panc
0010: 61 6E 61 64 69 61 6E 69   6F 2E 63 61 2F 67 73 73  anadianio.ca/gss
0020: 2F 63 72 6C 2F 31 2F 63   61 63 72 6C 2E 63 72 6C  /crl/1/cacrl.crl

[2]: ObjectId: 2.16.840.1.113730.1.4 Criticality=false
Extension unknown: DER encoded OCTET string =
0000: 04 2E 16 2C 68 74 74 70   73 3A 2F 2F 70 61 6E 63  ...,https://panc
0010: 61 6E 61 64 69 61 6E 69   6F 2E 63 61 2F 67 73 73  anadianio.ca/gss
0020: 2F 63 72 6C 2F 31 2F 63   61 63 72 6C 2E 63 72 6C  /crl/1/cacrl.crl

[3]: ObjectId: 2.5.29.35 Criticality=false
AuthorityKeyIdentifier [
KeyIdentifier [
0000: 49 F0 31 42 10 9B B3 F6   65 EB 68 9C 26 01 DC 7A  I.1B....e.h.&..z
0010: 93 9D C3 7A                                        ...z
]
]

[4]: ObjectId: 2.5.29.19 Criticality=true
BasicConstraints:[
  CA:true
  PathLen:2147483647
]

[5]: ObjectId: 2.5.29.31 Criticality=false
CRLDistributionPoints [
  [DistributionPoint:
     [URIName: https://pancanadianio.ca/gss/crl/1/cacrl.crl]
]]

[6]: ObjectId: 2.5.29.15 Criticality=true
KeyUsage [
  Key_CertSign
  Crl_Sign
]

[7]: ObjectId: 2.16.840.1.113730.1.1 Criticality=false
NetscapeCertType [
   SSL CA
   S/MIME CA
   Object Signing CA]

[8]: ObjectId: 2.5.29.14 Criticality=false
SubjectKeyIdentifier [
KeyIdentifier [
0000: 49 F0 31 42 10 9B B3 F6   65 EB 68 9C 26 01 DC 7A  I.1B....e.h.&..z
0010: 93 9D C3 7A                                        ...z
]
]

]
  Algorithm: [SHA512withRSA]
  Signature:
0000: 0B C6 89 0D FE F6 43 87   39 6F 7C 5A 21 B6 9D 0A  ......C.9o.Z!...
0010: BB 18 AC 13 B4 1B AB 69   0C 6F 39 C1 05 7E 48 B6  .......i.o9...H.
0020: D6 17 42 CC 75 B7 B7 0F   5C F5 5C 16 D5 FE 9D 5E  ..B.u...\.\....^
0030: 68 89 1A 7D 0D 09 C7 BC   8A 97 14 71 C0 EF 5F CB  h..........q.._.
0040: 36 C4 FB 05 1E BE 5C 0B   F7 76 75 34 82 1E AD E3  6.....\..vu4....
0050: 4F 2F 8C 81 0C 2A DB 7F   D7 18 87 A4 44 52 24 39  O/...*......DR$9
0060: 28 80 F9 14 78 6E 4D 88   69 F8 B8 1F 1F 59 07 51  (...xnM.i....Y.Q
0070: F0 3A 25 AD C4 E6 9C D1   D9 DC 36 94 5A 0E 1C 2F  .:%.......6.Z../
0080: 91 FB 4A FF 16 00 AD 80   3C 80 3D 71 29 66 A0 93  ..J.....<.=q)f..
0090: BB 78 4C 8D 1F CC FF BF   54 4C C1 A3 62 D9 51 A8  .xL.....TL..b.Q.
00A0: 7F E4 6E 6A 8B FC D6 B4   20 95 00 5C A4 30 5D C2  ..nj.... ..\.0].
00B0: 4A FB 19 71 B9 80 B2 50   18 71 28 97 0D D3 E2 AA  J..q...P.q(.....
00C0: C9 21 66 A9 E3 41 1D FA   0E 06 7D 27 5A D0 EC FC  .!f..A.....'Z...
00D0: DB AC B8 B5 8B B6 3B FE   B9 92 2E FA CF A9 0E 87  ......;.........
00E0: 55 3D 18 FA 70 59 AE E9   45 D6 EB E0 FA E9 39 50  U=..pY..E.....9P
00F0: 70 2B 5A 09 96 37 04 85   F8 04 92 F0 8E A0 C7 2A  p+Z..7.........*

]

Connection Id	Index	Details	Date	Time (µs)	From	To	Proxy	Info
Number of results per page :
225	1	Details	3/21/23 12:05:50 PM (EDT GMT-0400)	092981	127.0.0.1 : 59730	89.187.153.9 : 3001	1024	application/soap+xml

TLS/SSL connection

Connection details

Error stack trace

Details

Intercepted messages