javax.net.ssl.SSLHandshakeException: extension (5) should not be presented in certificate_request

Jul 20th, 2020 | Filed under Uncategorized

After bumping to latest docker (19.03.12) or minikube (0.12.1) you might quickly realise that you cannot push images from under maven build lifecycle.

This is because docker guys bumped go lang dependency which by default is using TLS 1.3

Either add

-Djdk.tls.client.protocols=TLSv1.2

to your java / maven command line or update your java to the very latest as this is fixed in every major java version now.

https://github.com/golang/go/issues/35722

https://bugs.openjdk.java.net/browse/JDK-8236039

Also it might be great opportunity to learn about TLS 1.3.. the biggest improvement is reducing handshake time. Are you microservices talking to each other using latest TLS.. by default currently it’s rather unlikely and the change could greatly improve your integration test time, not to say about waiting time of your users.

No comments yet.

*
To prove you're a person (not a spam script), type the security word shown in the picture. Click on the picture to hear an audio file of the word.
Anti-spam image