I have problems with SSL certificate management in my Jazz Authentification Server and CLM installation.Because OpenSSL attempts to negotiate all protocols it understands and because SSL 2 can be negotiated only using the old SSL 2 handshake, it uses this handshake as the default.
I pretty soon got stuck at the “: HelloRequest followed by an unexpected handshake message” error, but after reading several posts on the internet I solved that issue. The bug report that I linked to mentions a workaround using Bounc圜astle’s JCE implementation. The maximum-acceptable size that Java accepts is 1024 bits.