OpenJdk 13 HTTPS handling issue - BCXDHPublicKey cannot be cast to class XECPublicKey

[tkohegyi]

Proxy log contains this error message:

java.lang.ClassCastException: class org.bouncycastle.jcajce.provider.asymmetric.edec.BCXDHPublicKey cannot be cast to class java.security.interfaces.XECPublicKey (org.bouncycastle.jcajce.provider.asymmetric.edec.BCXDHPublicKey is in unnamed module of loader 'app'; java.security.interfaces.XECPublicKey is in module java.base of loader 'bootstrap')

The issue is caused by issue in 3rd party library - https://github.com/bcgit/bc-java/issues/589 - see more details there. Meanwhile we are waiting for real solution, this workaround sometimes work:

Start Wilma with additional parameter in command line: -Djdk.tls.namedGroups="secp256r1, secp384r1, ffdhe2048, ffdhe3072"

[tkohegyi]

Issue still exists after BCv1.69 - https://github.com/bcgit/bc-java/issues/620 is still active

[tkohegyi]

Issue still exists with BCv1.71

[tkohegyi]

Issue still exists with BCv1.77