Unrecognized SSL message, plaintext connection?

[Orscrider]

I setup a simple HTTPS server with a custom certificate using the Java SE 2.2 framework. Whenever I try to connect to the server through a browser (haven't tried the client API yet), it can't connect and throws the following error (not on default debug level):

javax.net.ssl.SSLException: Unrecognized SSL message, plaintext connection?
    at sun.security.ssl.EngineInputRecord.bytesInCompletePacket(EngineInputRecord.java:156)
    at sun.security.ssl.SSLEngineImpl.readNetRecord(SSLEngineImpl.java:862)
    at sun.security.ssl.SSLEngineImpl.unwrap(SSLEngineImpl.java:775)
    at javax.net.ssl.SSLEngine.unwrap(SSLEngine.java:624)
    at sun.net.httpserver.SSLStreams$EngineWrapper.recvAndUnwrap(SSLStreams.java:338)
    at sun.net.httpserver.SSLStreams.recvData(SSLStreams.java:406)
    at sun.net.httpserver.SSLStreams$InputStream.read(SSLStreams.java:522)
    at sun.net.httpserver.SSLStreams$InputStream.read(SSLStreams.java:591)
    at sun.net.httpserver.Request.readLine(Request.java:80)
    at sun.net.httpserver.Request.<init>(Request.java:50)
    at sun.net.httpserver.ServerImpl$Exchange.run(ServerImpl.java:536)
    at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142)
    at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617)
    at java.lang.Thread.run(Thread.java:745)

HTTP works fine. The first time I tried it, I trusted the certificate and it worked though. Btw is there a way to guard everything with one guard?

[thboileau]

you can guard everything by setting the guard at the top of the application inbound root:
cf http://restlet.com/technical-resources/restlet-framework/tutorial/2.2/#part09

For example, in your application, override the createInboundRoot method:

Application application = new Application() {
    @Override
    public Restlet createInboundRoot() {
        // Create a simple password verifier
        MapVerifier verifier = new MapVerifier();
        verifier.getLocalSecrets().put("scott", "tiger".toCharArray());

        // Create a Guard
        ChallengeAuthenticator guard = new ChallengeAuthenticator(getContext(), ChallengeScheme.HTTP_BASIC, "Tutorial");
        guard.setVerifier(verifier);

        // Create a Directory able to return a deep hierarchy of files
        Directory directory = new Directory(getContext(), ROOT_URI);
        directory.setListingAllowed(true);
        // you can protect not only a directory but a router, etc
        guard.setNext(directory);

        return guard;
    }
};

[Orscrider]

Thanks for your help

[spraguep]

I have hit this same issue. We are upgrading form Restlet 2.2.1+JDK7 to Restlet 2.3.0+JDK8. We are using self-signed certs on the client and server with client authentication enabled.