Hi! I'm trying to login to my local RTC server with help of some legacy code that is said to work fine, but I receive the javax.net.ssl.SSLHandshakeException: Received fatal alert: handshake_failure all the time.

The trick is that I am trying to write a wrapper plugin for RTC web interface that would proxy calls from WebUI to a REST client implementation that was used to work with repository via REST from a remote client. So I wrote a MODELLED_REST service plugin and embedded the legacy code in it. It compiles and runs, but when the legacy method tries to login, it gets a handshake_failure error. Is what I am doing possible at all? I'll be grateful for any hints on this.

Is there a smarter way to reuse the legacy code? This restClient has a lot of logic in it and I'd like to make as much use of it as possible.

UPD: When I try to login from my service running on Jetty to a different instance of RTC running on Tomcat it works fine with Scheme set on port 443. The login URL I use there is https://127.0.0.1:9443/ccm/authenticated/identity. But Jetty doesn't have this kind of a link and uses https://127.0.0.1:7443/jazz/.. to address everything. So the URL for Jetty is https://127.0.0.1:7443/jazz/authenticated/identity

Here is the code that is used to login (the bold line is the one where the Exception is thrown):

public boolean loginRTC() {
HttpResponse response;
  logger.info("trying to log in");
try {
httpClient = getHttpClient();

logger.info("getting cookies");
cookieStore = new BasicCookieStore();
localContext = new BasicHttpContext();
localContext.setAttribute(ClientContext.COOKIE_STORE, cookieStore);

//this link in browser redirects me to the login page
HttpGet httpGetID = new HttpGet("https://127.0.0.1:7443/jazz/authenticated/identity"); 
response = httpClient.execute(httpGetID, localContext);
logger.info(response.getStatusLine().toString());
httpGetID.abort();

logger.info("cookies:");
List<Cookie> cookies1 = cookieStore.getCookies();
for (Cookie cookie : cookies1) {
logger.info("\t" + cookie.getName() + " : " + cookie.getValue());
}

logger.info("send username and password");
List<NameValuePair> authFormParams = new ArrayList<NameValuePair>();
  authFormParams.add(new BasicNameValuePair("j_username", "ADMIN"));
  authFormParams.add(new BasicNameValuePair("j_password", "ADMIN"));
UrlEncodedFormEntity entity;
entity = new UrlEncodedFormEntity(authFormParams, "UTF-8");
HttpPost httpPostAuth = new HttpPost(rtcUrl + LOGIN_CHECK_URL);
httpPostAuth.setEntity(entity);
response = httpClient.execute(httpPostAuth, localContext);
logger.info(response.getStatusLine().toString());
httpPostAuth.abort();

// retrieve new cookies
HttpGet httpGetCookie = new HttpGet(rtcUrl + LOGIN_FORM_URL);
response = httpClient.execute(httpGetCookie, localContext);
logger.info(response.getStatusLine().toString());
httpGetCookie.abort();

if (checkAuthorized()) {
logger.info("login SUCCESSFUL");
return true;
}
} catch (Exception e) {
logger.error(e.getMessage(), e);
}
logger.info("login FAILED");
return false;
}

and getHttpClient is as follows:

private HttpClient getHttpClient() throws RequestException {
try {
SSLSocketFactory socketFactory = new SSLSocketFactory(
new TrustStrategy() {
public boolean isTrusted(X509Certificate[] chain, String authType)
throws CertificateException {
return true;
}
}, SSLSocketFactory.ALLOW_ALL_HOSTNAME_VERIFIER);
Scheme sch = new Scheme("https", 443, socketFactory);

ThreadSafeClientConnManager cm = new ThreadSafeClientConnManager();
cm.setMaxTotal(MAX_CONNECTION_COUNT);
HttpClient result = new DefaultHttpClient(cm);
result.getConnectionManager().getSchemeRegistry().register(sch);
return result;
} catch (Exception e) {
String msg = "Couldn't set SSL trust strategy: " + e.getMessage();
logger.error(msg, e);
throw new RequestException(msg);
}
}