hc-httpclient-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Stefan Magnus Landrø <stefan.lan...@gmail.com>
Subject Re: PoolingHttpClientConnectionManager SSL Handshake exception
Date Tue, 08 Sep 2015 13:40:17 GMT
Are you ONLY changing the http client you use and NOTHING else?

2015-09-08 10:31 GMT+02:00 Bhuvaneswari Anandhan <
bhuvaneswari.anandhan@oracle.com>:

> Hi ,
>
>
>
> Recently we have done a Apache http component migration from 3.1 to 4.4.1.
>
>
>
> We have changed the connection manager implementation from
> MultiThreadedHttpConnectionManager (3.1 implementation) to
> PoolingHttpClientConnectionManager (apache httpclient 4.4.1).
>
>
>
>
>
> Now we are getting SSL socket exception when we are trying to request
> using the connection.
>
>
>
> Exception trace:
>
> [9/8/15 12:04:27:192 IST] 00000064 SystemErr     R
> javax.net.ssl.SSLHandshakeException: com.ibm.jsse2.util.g: PKIX path
> building failed: java.security.cert.CertPathBuilderException:
> PKIXCertPathBuilderImpl could not build a valid CertPath.; internal cause
> is:
>
>                 java.security.cert.CertPathValidatorException: The
> certificate issued by CN=mumgo3206.in.oracle.com, OU=Root Certificate,
> OU=RSAppSrvCell1, OU=RSAppSrvNode1, O=IBM, C=US is not trusted; internal
> cause is:
>
>                 java.security.cert.CertPathValidatorException: Certificate
> chaining error
>
> [9/8/15 12:04:27:193 IST] 00000064 SystemErr     R             at
> com.ibm.jsse2.n.a(n.java:28)
>
> [9/8/15 12:04:27:193 IST] 00000064 SystemErr     R             at
> com.ibm.jsse2.tc.a(tc.java:251)
>
> [9/8/15 12:04:27:193 IST] 00000064 SystemErr     R             at
> com.ibm.jsse2.gb.a(gb.java:251)
>
> [9/8/15 12:04:27:194 IST] 00000064 SystemErr     R             at
> com.ibm.jsse2.gb.a(gb.java:228)
>
> [9/8/15 12:04:27:194 IST] 00000064 SystemErr     R             at
> com.ibm.jsse2.hb.a(hb.java:279)
>
> [9/8/15 12:04:27:194 IST] 00000064 SystemErr     R             at
> com.ibm.jsse2.hb.a(hb.java:292)
>
> [9/8/15 12:04:27:194 IST] 00000064 SystemErr     R             at
> com.ibm.jsse2.gb.n(gb.java:71)
>
> [9/8/15 12:04:27:194 IST] 00000064 SystemErr     R             at
> com.ibm.jsse2.gb.a(gb.java:324)
>
> [9/8/15 12:04:27:194 IST] 00000064 SystemErr     R             at
> com.ibm.jsse2.tc.a(tc.java:559)
>
> [9/8/15 12:04:27:195 IST] 00000064 SystemErr     R             at
> com.ibm.jsse2.tc.g(tc.java:25)
>
> [9/8/15 12:04:27:195 IST] 00000064 SystemErr     R             at
> com.ibm.jsse2.tc.a(tc.java:582)
>
> [9/8/15 12:04:27:195 IST] 00000064 SystemErr     R             at
> com.ibm.jsse2.tc.startHandshake(tc.java:652)
>
> [9/8/15 12:04:27:195 IST] 00000064 SystemErr     R             at
> org.apache.http.conn.ssl.SSLConnectionSocketFactory.createLayeredSocket(SSLConnectionSocketFactory.java:394)
>
> [9/8/15 12:04:27:195 IST] 00000064 SystemErr     R             at
> org.apache.http.conn.ssl.SSLConnectionSocketFactory.connectSocket(SSLConnectionSocketFactory.java:353)
>
> [9/8/15 12:04:27:195 IST] 00000064 SystemErr     R             at
> org.apache.http.impl.conn.DefaultHttpClientConnectionOperator.connect(DefaultHttpClientConnectionOperator.java:134)
>
> [9/8/15 12:04:27:195 IST] 00000064 SystemErr     R             at
> org.apache.http.impl.conn.PoolingHttpClientConnectionManager.connect(PoolingHttpClientConnectionManager.java:353)
>
> [9/8/15 12:04:27:196 IST] 00000064 SystemErr     R             at
> org.apache.http.impl.execchain.MainClientExec.establishRoute(MainClientExec.java:380)
>
> [9/8/15 12:04:27:196 IST] 00000064 SystemErr     R             at
> org.apache.http.impl.execchain.MainClientExec.execute(MainClientExec.java:236)
>
> [9/8/15 12:04:27:196 IST] 00000064 SystemErr     R             at
> org.apache.http.impl.execchain.ProtocolExec.execute(ProtocolExec.java:184)
>
> [9/8/15 12:04:27:196 IST] 00000064 SystemErr     R             at
> org.apache.http.impl.execchain.RetryExec.execute(RetryExec.java:88)
>
> [9/8/15 12:04:27:196 IST] 00000064 SystemErr     R             at
> org.apache.http.impl.execchain.RedirectExec.execute(RedirectExec.java:110)
>
> [9/8/15 12:04:27:196 IST] 00000064 SystemErr     R             at
> org.apache.http.impl.client.InternalHttpClient.doExecute(InternalHttpClient.java:184)
>
> [9/8/15 12:04:27:197 IST] 00000064 SystemErr     R             at
> org.apache.http.impl.client.CloseableHttpClient.execute(CloseableHttpClient.java:117)
>
> [9/8/15 12:04:27:197 IST] 00000064 SystemErr     R             at
> org.apache.http.impl.client.CloseableHttpClient.execute(CloseableHttpClient.java:55)
>
> [9/8/15 12:04:27:197 IST] 00000064 SystemErr     R             at
> com.citi.cpb.emea.revelation.proxy.ProxyServlet.sendApplicationRequest(ProxyServlet.java:392)
>
> [9/8/15 12:04:27:197 IST] 00000064 SystemErr     R             at
> com.citi.cpb.emea.revelation.proxy.ProxyServlet.doGet(ProxyServlet.java:130)
>
> [9/8/15 12:04:27:197 IST] 00000064 SystemErr     R             at
> javax.servlet.http.HttpServlet.service(HttpServlet.java:575)
>
> [9/8/15 12:04:27:197 IST] 00000064 SystemErr     R             at
> javax.servlet.http.HttpServlet.service(HttpServlet.java:668)
>
> [9/8/15 12:04:27:198 IST] 00000064 SystemErr     R             at
> com.ibm.ws.webcontainer.servlet.ServletWrapper.service(ServletWrapper.java:1147)
>
> [9/8/15 12:04:27:198 IST] 00000064 SystemErr     R             at
> com.ibm.ws.webcontainer.servlet.ServletWrapper.handleRequest(ServletWrapper.java:722)
>
> [9/8/15 12:04:27:198 IST] 00000064 SystemErr     R             at
> com.ibm.ws.webcontainer.servlet.ServletWrapper.handleRequest(ServletWrapper.java:449)
>
> [9/8/15 12:04:27:198 IST] 00000064 SystemErr     R             at
> com.ibm.ws.webcontainer.servlet.ServletWrapperImpl.handleRequest(ServletWrapperImpl.java:178)
>
> [9/8/15 12:04:27:198 IST] 00000064 SystemErr     R             at
> com.ibm.ws.webcontainer.filter.WebAppFilterManager.invokeFilters(WebAppFilterManager.java:1020)
>
> [9/8/15 12:04:27:198 IST] 00000064 SystemErr     R             at
> com.ibm.ws.webcontainer.webapp.WebApp.handleRequest(WebApp.java:3639)
>
> [9/8/15 12:04:27:199 IST] 00000064 SystemErr     R             at
> com.ibm.ws.webcontainer.webapp.WebGroup.handleRequest(WebGroup.java:304)
>
> [9/8/15 12:04:27:199 IST] 00000064 SystemErr     R             at
> com.ibm.ws.webcontainer.WebContainer.handleRequest(WebContainer.java:950)
>
> [9/8/15 12:04:27:199 IST] 00000064 SystemErr     R             at
> com.ibm.ws.webcontainer.WSWebContainer.handleRequest(WSWebContainer.java:1659)
>
> [9/8/15 12:04:27:199 IST] 00000064 SystemErr     R             at
> com.ibm.ws.webcontainer.channel.WCChannelLink.ready(WCChannelLink.java:195)
>
> [9/8/15 12:04:27:199 IST] 00000064 SystemErr     R             at
> com.ibm.ws.http.channel.inbound.impl.HttpInboundLink.handleDiscrimination(HttpInboundLink.java:452)
>
> [9/8/15 12:04:27:199 IST] 00000064 SystemErr     R             at
> com.ibm.ws.http.channel.inbound.impl.HttpInboundLink.handleNewRequest(HttpInboundLink.java:511)
>
> [9/8/15 12:04:27:200 IST] 00000064 SystemErr     R             at
> com.ibm.ws.http.channel.inbound.impl.HttpInboundLink.processRequest(HttpInboundLink.java:305)
>
> [9/8/15 12:04:27:200 IST] 00000064 SystemErr     R             at
> com.ibm.ws.http.channel.inbound.impl.HttpInboundLink.ready(HttpInboundLink.java:276)
>
> [9/8/15 12:04:27:200 IST] 00000064 SystemErr     R             at
> com.ibm.ws.ssl.channel.impl.SSLConnectionLink.determineNextChannel(SSLConnectionLink.java:1048)
>
> [9/8/15 12:04:27:200 IST] 00000064 SystemErr     R             at
> com.ibm.ws.ssl.channel.impl.SSLConnectionLink$MyReadCompletedCallback.complete(SSLConnectionLink.java:642)
>
> [9/8/15 12:04:27:200 IST] 00000064 SystemErr     R             at
> com.ibm.ws.ssl.channel.impl.SSLReadServiceContext$SSLReadCompletedCallback.complete(SSLReadServiceContext.java:1784)
>
> [9/8/15 12:04:27:200 IST] 00000064 SystemErr     R             at
> com.ibm.ws.tcp.channel.impl.AioReadCompletionListener.futureCompleted(AioReadCompletionListener.java:165)
>
> [9/8/15 12:04:27:201 IST] 00000064 SystemErr     R             at
> com.ibm.io.async.AbstractAsyncFuture.invokeCallback(AbstractAsyncFuture.java:217)
>
> [9/8/15 12:04:27:201 IST] 00000064 SystemErr     R             at
> com.ibm.io.async.AsyncChannelFuture.fireCompletionActions(AsyncChannelFuture.java:161)
>
> [9/8/15 12:04:27:201 IST] 00000064 SystemErr     R             at
> com.ibm.io.async.AsyncFuture.completed(AsyncFuture.java:138)
>
> [9/8/15 12:04:27:201 IST] 00000064 SystemErr     R             at
> com.ibm.io.async.ResultHandler.complete(ResultHandler.java:204)
>
> [9/8/15 12:04:27:201 IST] 00000064 SystemErr     R             at
> com.ibm.io.async.ResultHandler.runEventProcessingLoop(ResultHandler.java:775)
>
> [9/8/15 12:04:27:201 IST] 00000064 SystemErr     R             at
> com.ibm.io.async.ResultHandler$2.run(ResultHandler.java:905)
>
> [9/8/15 12:04:27:202 IST] 00000064 SystemErr     R             at
> com.ibm.ws.util.ThreadPool$Worker.run(ThreadPool.java:1648)
>
> [9/8/15 12:04:27:202 IST] 00000064 SystemErr     R Caused by:
> com.ibm.jsse2.util.g: PKIX path building failed:
> java.security.cert.CertPathBuilderException: PKIXCertPathBuilderImpl could
> not build a valid CertPath.; internal cause is:
>
>                 java.security.cert.CertPathValidatorException: The
> certificate issued by CN=mumgo3206.in.oracle.com, OU=Root Certificate,
> OU=RSAppSrvCell1, OU=RSAppSrvNode1, O=IBM, C=US is not trusted; internal
> cause is:
>
>                 java.security.cert.CertPathValidatorException: Certificate
> chaining error
>
> [9/8/15 12:04:27:202 IST] 00000064 SystemErr     R             at
> com.ibm.jsse2.util.e.b(e.java:30)
>
> [9/8/15 12:04:27:203 IST] 00000064 SystemErr     R             at
> com.ibm.jsse2.util.e.b(e.java:62)
>
> [9/8/15 12:04:27:203 IST] 00000064 SystemErr     R             at
> com.ibm.jsse2.util.d.a(d.java:11)
>
> [9/8/15 12:04:27:203 IST] 00000064 SystemErr     R             at
> com.ibm.jsse2.hc.a(hc.java:40)
>
> [9/8/15 12:04:27:203 IST] 00000064 SystemErr     R             at
> com.ibm.jsse2.hc.checkServerTrusted(hc.java:33)
>
> [9/8/15 12:04:27:203 IST] 00000064 SystemErr     R             at
> com.ibm.jsse2.hc.b(hc.java:80)
>
> [9/8/15 12:04:27:203 IST] 00000064 SystemErr     R             at
> com.ibm.jsse2.hb.a(hb.java:416)
>
> [9/8/15 12:04:27:203 IST] 00000064 SystemErr     R             ... 48 more
>
> [9/8/15 12:04:27:204 IST] 00000064 SystemErr     R Caused by:
> java.security.cert.CertPathBuilderException: PKIXCertPathBuilderImpl could
> not build a valid CertPath.; internal cause is:
>
>                 java.security.cert.CertPathValidatorException: The
> certificate issued by CN=mumgo3206.in.oracle.com, OU=Root Certificate,
> OU=RSAppSrvCell1, OU=RSAppSrvNode1, O=IBM, C=US is not trusted; internal
> cause is:
>
>                 java.security.cert.CertPathValidatorException: Certificate
> chaining error
>
> [9/8/15 12:04:27:204 IST] 00000064 SystemErr     R             at
> com.ibm.security.cert.PKIXCertPathBuilderImpl.engineBuild(PKIXCertPathBuilderImpl.java:411)
>
> [9/8/15 12:04:27:204 IST] 00000064 SystemErr     R             at
> java.security.cert.CertPathBuilder.build(CertPathBuilder.java:258)
>
> [9/8/15 12:04:27:205 IST] 00000064 SystemErr     R             at
> com.ibm.jsse2.util.e.b(e.java:103)
>
> [9/8/15 12:04:27:205 IST] 00000064 SystemErr     R             ... 54 more
>
> [9/8/15 12:04:27:205 IST] 00000064 SystemErr     R Caused by:
> java.security.cert.CertPathValidatorException: The certificate issued by CN=
> mumgo3206.in.oracle.com, OU=Root Certificate, OU=RSAppSrvCell1,
> OU=RSAppSrvNode1, O=IBM, C=US is not trusted; internal cause is:
>
>                 java.security.cert.CertPathValidatorException: Certificate
> chaining error
>
> [9/8/15 12:04:27:206 IST] 00000064 SystemErr     R             at
> com.ibm.security.cert.BasicChecker.<init>(BasicChecker.java:111)
>
> [9/8/15 12:04:27:206 IST] 00000064 SystemErr     R             at
> com.ibm.security.cert.PKIXCertPathValidatorImpl.engineValidate(PKIXCertPathValidatorImpl.java:176)
>
> [9/8/15 12:04:27:206 IST] 00000064 SystemErr     R             at
> com.ibm.security.cert.PKIXCertPathBuilderImpl.myValidator(PKIXCertPathBuilderImpl.java:737)
>
>
>
>
>
> Thanks & Regards,
>
> Bhuvaneswari
>
>
>


-- 
BEKK Open
http://open.bekk.no

TesTcl - a unit test framework for iRules
http://testcl.com

Mime
  • Unnamed multipart/alternative (inline, None, 0 bytes)
View raw message