From mark at firedisk.net Sun Mar 1 13:02:26 2015 From: mark at firedisk.net (Mark Hellegers) Date: Sun, 01 Mar 2015 14:02:26 +0100 CET Subject: Problems with SSL Message-ID: <1767654292-BeMail@starquake> Hello, I have been running Jira with the OpenJDK port on Haiku for a while and it works quite well, so thank you very much for making this possible. There are some problems with it though and I am trying to figure out where the problems are coming from. One problem that I can find in the log is the following error: javax.net.ssl.SSLPeerUnverifiedException: peer not authenticated. Has this to do with the cacerts issue that came up earlier on this mailing list? Kind regards, Mark Hellegers -- Spangalese for beginners: `Geh nae?' `Do you know the serial number on the bumper of that 1958 Thunderbird?' From hamishm53 at gmail.com Mon Mar 2 18:20:48 2015 From: hamishm53 at gmail.com (Hamish Morrison) Date: Mon, 2 Mar 2015 18:20:48 +0000 Subject: Problems with SSL In-Reply-To: <1767654292-BeMail@starquake> References: <1767654292-BeMail@starquake> Message-ID: Hi Mark, That could well be caused by missing cacerts -- although it would be unusual for a client to send a certificate to the server. You can manually add a cacerts file from some other JDK7 distribution to the OpenJDK hpkg and see if it helps. In the next version of the hpkg I'll include a correct cacerts file. Cheers Hamish On Sun, Mar 1, 2015 at 1:02 PM, Mark Hellegers wrote: > Hello, > > I have been running Jira with the OpenJDK port on Haiku for a while and > it works quite well, so thank you very much for making this possible. > There are some problems with it though and I am trying to figure out > where the problems are coming from. > One problem that I can find in the log is the following error: > javax.net.ssl.SSLPeerUnverifiedException: peer not authenticated. > > Has this to do with the cacerts issue that came up earlier on this > mailing list? > > Kind regards, > > Mark Hellegers > > -- > Spangalese for beginners: > > `Geh nae?' > `Do you know the serial number on the bumper of that 1958 Thunderbird?' > > > -------------- next part -------------- An HTML attachment was scrubbed... URL: From mark at firedisk.net Mon Mar 2 21:41:32 2015 From: mark at firedisk.net (Mark Hellegers) Date: Mon, 02 Mar 2015 22:41:32 +0100 CET Subject: Problems with SSL In-Reply-To: Message-ID: <4760231986-BeMail@starquake> Hello Hamish, that does seem unlikely yes. Is this file not used for validating the certificate the server sends? I am still rather new to hpkg files. What would be the best place to put the cacerts file? Or if the next version is not too far away, I don't mind waiting a bit. Kind regards, Mark > Hi Mark, > > That could well be caused by missing cacerts -- although it would be > unusual for a client to send a certificate to the server. > > You can manually add a cacerts file from some other JDK7 distribution > to > the OpenJDK hpkg and see if it helps. > > In the next version of the hpkg I'll include a correct cacerts file. > > Cheers > Hamish > > On Sun, Mar 1, 2015 at 1:02 PM, Mark Hellegers > wrote: > > > Hello, > > > > I have been running Jira with the OpenJDK port on Haiku for a while > > and > > it works quite well, so thank you very much for making this > > possible. > > There are some problems with it though and I am trying to figure > > out > > where the problems are coming from. > > One problem that I can find in the log is the following error: > > javax.net.ssl.SSLPeerUnverifiedException: peer not authenticated. > > > > Has this to do with the cacerts issue that came up earlier on this > > mailing list? > > > > Kind regards, > > > > Mark Hellegers > > > > -- > > Spangalese for beginners: > > > > `Geh nae?' > > `Do you know the serial number on the bumper of that 1958 > > Thunderbird?' > > > > > > -- Spangalese for beginners: `Lipsanae bully booly.' `The Lemming is driving recklessly.' From hamishm53 at gmail.com Tue Mar 3 13:31:12 2015 From: hamishm53 at gmail.com (Hamish Morrison) Date: Tue, 3 Mar 2015 13:31:12 +0000 Subject: Problems with SSL In-Reply-To: <4760231986-BeMail@starquake> References: <4760231986-BeMail@starquake> Message-ID: Hi Mark, It depends on the configuration of the server. Usually (to my knowledge), the client is not required to send a certificate, but if it chooses to send one it will be verified. It's also possible that JIRA connects to backend services using SSL and the error comes from that. The cacerts file should go under j2sdk-image/jre/lib/security. You'll need to consult the hpkg for where the j2sdk-image directory is though. Cheers, Hamish On Mon, Mar 2, 2015 at 9:41 PM, Mark Hellegers wrote: > Hello Hamish, > > that does seem unlikely yes. > Is this file not used for validating the certificate the server sends? > I am still rather new to hpkg files. What would be the best place to > put the cacerts file? > Or if the next version is not too far away, I don't mind waiting a bit. > > Kind regards, > > Mark > > > Hi Mark, > > > > That could well be caused by missing cacerts -- although it would be > > unusual for a client to send a certificate to the server. > > > > You can manually add a cacerts file from some other JDK7 distribution > > to > > the OpenJDK hpkg and see if it helps. > > > > In the next version of the hpkg I'll include a correct cacerts file. > > > > Cheers > > Hamish > > > > On Sun, Mar 1, 2015 at 1:02 PM, Mark Hellegers > > wrote: > > > > > Hello, > > > > > > I have been running Jira with the OpenJDK port on Haiku for a while > > > and > > > it works quite well, so thank you very much for making this > > > possible. > > > There are some problems with it though and I am trying to figure > > > out > > > where the problems are coming from. > > > One problem that I can find in the log is the following error: > > > javax.net.ssl.SSLPeerUnverifiedException: peer not authenticated. > > > > > > Has this to do with the cacerts issue that came up earlier on this > > > mailing list? > > > > > > Kind regards, > > > > > > Mark Hellegers > > > > > > -- > > > Spangalese for beginners: > > > > > > `Geh nae?' > > > `Do you know the serial number on the bumper of that 1958 > > > Thunderbird?' > > > > > > > > > > > > -- > Spangalese for beginners: > > `Lipsanae bully booly.' > `The Lemming is driving recklessly.' > > > -------------- next part -------------- An HTML attachment was scrubbed... URL: From mark at firedisk.net Wed Mar 4 21:41:01 2015 From: mark at firedisk.net (Mark Hellegers) Date: Wed, 04 Mar 2015 22:41:01 +0100 CET Subject: Problems with SSL In-Reply-To: Message-ID: <2289739361-BeMail@starquake> > Hi Mark, > > It depends on the configuration of the server. Usually (to my > knowledge), > the client is not required to send a certificate, but if it chooses > to send > one it will be verified. > It's also possible that JIRA connects to backend services using SSL > and the > error comes from that. Ah yes, it connects to the Jira marketplace and that is where this error is coming from. I'm sorry. I should have included more of the error message, but I thought that would not be needed as the rest of the error message was about Jira code. > The cacerts file should go under j2sdk-image/jre/lib/security. You'll > need > to consult the hpkg for where the j2sdk-image directory is though. > Thanks, I will give it a try this weekend. Kind regards, Mark -- Spangalese for beginners: 'En sur vias plutoniut va' 'Don't put that in your mouth, the spiders haven't hatched yet'