From commits-return-8642-archive-asf-public=cust-asf.ponee.io@fineract.apache.org Thu May 7 03:15:04 2020 Return-Path: X-Original-To: archive-asf-public@cust-asf.ponee.io Delivered-To: archive-asf-public@cust-asf.ponee.io Received: from mail.apache.org (hermes.apache.org [207.244.88.153]) by mx-eu-01.ponee.io (Postfix) with SMTP id 4266718064F for ; Thu, 7 May 2020 05:15:04 +0200 (CEST) Received: (qmail 83919 invoked by uid 500); 7 May 2020 03:15:03 -0000 Mailing-List: contact commits-help@fineract.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: dev@fineract.apache.org Delivered-To: mailing list commits@fineract.apache.org Received: (qmail 83906 invoked by uid 99); 7 May 2020 03:15:03 -0000 Received: from ec2-52-202-80-70.compute-1.amazonaws.com (HELO gitbox.apache.org) (52.202.80.70) by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 07 May 2020 03:15:03 +0000 From: =?utf-8?q?GitBox?= To: commits@fineract.apache.org Subject: =?utf-8?q?=5BGitHub=5D_=5Bfineract=5D_ptuomola_commented_on_pull_request_=23?= =?utf-8?q?820=3A_=5BWIP=5D_FINERACT-846=3A_Migrating_to_Java_11?= Message-ID: <158882130329.26397.16373836115626552611.asfpy@gitbox.apache.org> Date: Thu, 07 May 2020 03:15:03 -0000 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit References: In-Reply-To: ptuomola commented on pull request #820: URL: https://github.com/apache/fineract/pull/820#issuecomment-625004656 > @ptuomola I've run into this kind of thing before - it could be caused e.g. by Oracle Java vs. OpenJDK, which include different root certificates. Haven't investigated this particular problem, but thought I'd mention it here in case that is it. Thanks! Found the issue: there is a bug in OpenJDK 11.0.2. The logic for reusing a SSL connection discards all the certificates shared during the earlier use of the connection, which results in this error. relaxedHTTPSValidation doesn't help as it still expects some certificate, and in this case there is none. The issue is fixed in later OpenJDK 11 builds (e.g. 11.0.7) which is what I have on my own machine, and hence I did not see this. However Travis pulls in 11.0.2 and I was not able to find an easy way to get it to use a later minor version. So I fixed the Travis build by getting it to use OpenJDK 12 which has this fix. I'm assuming that will still be OK, because in the Gradle file we specify JDK 11. Alternatively need to find some way to get Travis to download and install 11.0.7 instead... ---------------------------------------------------------------- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. For queries about this service, please contact Infrastructure at: users@infra.apache.org