Categories
Uncategorized

javax.net.ssl.SSLHandshakeException: extension (5) should not be presented in certificate_request

After bumping to latest docker (19.03.12) or minikube (0.12.1) you might quickly realise that you cannot push images from under maven build lifecycle.

This is because docker guys bumped go lang dependency which by default is using TLS 1.3

Either add

-Djdk.tls.client.protocols=TLSv1.2

to your java / maven command line or update your java to the very latest as this is fixed in every major java version now.

https://github.com/golang/go/issues/35722

https://bugs.openjdk.java.net/browse/JDK-8236039

Also it might be great opportunity to learn about TLS 1.3.. the biggest improvement is reducing handshake time. Are you microservices talking to each other using latest TLS.. by default currently it’s rather unlikely and the change could greatly improve your integration test time, not to say about waiting time of your users.

1 reply on “javax.net.ssl.SSLHandshakeException: extension (5) should not be presented in certificate_request”

Leave a Reply

Your email address will not be published. Required fields are marked *

25 − = 22