Return-Path: X-Original-To: apmail-hc-httpclient-users-archive@www.apache.org Delivered-To: apmail-hc-httpclient-users-archive@www.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id 3F11210B90 for ; Tue, 8 Sep 2015 08:31:40 +0000 (UTC) Received: (qmail 73360 invoked by uid 500); 8 Sep 2015 08:31:00 -0000 Delivered-To: apmail-hc-httpclient-users-archive@hc.apache.org Received: (qmail 73310 invoked by uid 500); 8 Sep 2015 08:31:00 -0000 Mailing-List: contact httpclient-users-help@hc.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: "HttpClient User Discussion" Delivered-To: mailing list httpclient-users@hc.apache.org Received: (qmail 73285 invoked by uid 99); 8 Sep 2015 08:31:00 -0000 Received: from Unknown (HELO spamd4-us-west.apache.org) (209.188.14.142) by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 08 Sep 2015 08:31:00 +0000 Received: from localhost (localhost [127.0.0.1]) by spamd4-us-west.apache.org (ASF Mail Server at spamd4-us-west.apache.org) with ESMTP id 148F7C0252 for ; Tue, 8 Sep 2015 08:31:00 +0000 (UTC) X-Virus-Scanned: Debian amavisd-new at spamd4-us-west.apache.org X-Spam-Flag: NO X-Spam-Score: 2.992 X-Spam-Level: ** X-Spam-Status: No, score=2.992 tagged_above=-999 required=6.31 tests=[HTML_MESSAGE=3, RCVD_IN_MSPIKE_H2=-0.001, RP_MATCHES_RCVD=-0.006, SPF_PASS=-0.001] autolearn=disabled Received: from mx1-us-west.apache.org ([10.40.0.8]) by localhost (spamd4-us-west.apache.org [10.40.0.11]) (amavisd-new, port 10024) with ESMTP id rBXY5HSymKOO for ; Tue, 8 Sep 2015 08:30:52 +0000 (UTC) Received: from aserp1040.oracle.com (aserp1040.oracle.com [141.146.126.69]) by mx1-us-west.apache.org (ASF Mail Server at mx1-us-west.apache.org) with ESMTPS id 9BDFB22F0C for ; Tue, 8 Sep 2015 08:30:51 +0000 (UTC) Received: from userv0022.oracle.com (userv0022.oracle.com [156.151.31.74]) by aserp1040.oracle.com (Sentrion-MTA-4.3.2/Sentrion-MTA-4.3.2) with ESMTP id t888UilE015993 (version=TLSv1 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK) for ; Tue, 8 Sep 2015 08:30:44 GMT Received: from aserv0122.oracle.com (aserv0122.oracle.com [141.146.126.236]) by userv0022.oracle.com (8.13.8/8.13.8) with ESMTP id t888UhFp030406 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=FAIL) for ; Tue, 8 Sep 2015 08:30:44 GMT Received: from abhmp0004.oracle.com (abhmp0004.oracle.com [141.146.116.10]) by aserv0122.oracle.com (8.13.8/8.13.8) with ESMTP id t888UhQZ007374 for ; Tue, 8 Sep 2015 08:30:43 GMT MIME-Version: 1.0 Message-ID: <9dd9cd4e-469b-4ff9-8bff-ab5d1f101f55@default> Date: Tue, 8 Sep 2015 01:31:12 -0700 (PDT) From: Bhuvaneswari Anandhan Sender: Bhuvaneswari Anandhan To: httpclient-users@hc.apache.org Subject: PoolingHttpClientConnectionManager SSL Handshake exception X-Priority: 3 X-Mailer: Oracle Beehive Extensions for Outlook 2.0.1.9 (901082) [OL 12.0.6691.5000 (x86)] Content-Type: multipart/alternative; boundary="__144170104345549571abhmp0004.oracle.com" X-Source-IP: userv0022.oracle.com [156.151.31.74] --__144170104345549571abhmp0004.oracle.com Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: quoted-printable Hi , =20 Recently we have done a Apache http component migration from 3.1 to 4.4.1. =20 We have changed the connection manager implementation from MultiThreadedHtt= pConnectionManager (3.1 implementation) to PoolingHttpClientConnectionManag= er (apache httpclient 4.4.1).=20 =20 =20 Now we are getting SSL socket exception when we are trying to request using= the connection. =20 Exception trace: [9/8/15 12:04:27:192 IST] 00000064 SystemErr R javax.net.ssl.SSLHandsha= keException: com.ibm.jsse2.util.g: PKIX path building failed: java.security= .cert.CertPathBuilderException: PKIXCertPathBuilderImpl could not build a v= alid CertPath.; internal cause is:=20 java.security.cert.CertPathValidatorException: The certific= ate issued by CN=3Dmumgo3206.in.oracle.com, OU=3DRoot Certificate, OU=3DRSA= ppSrvCell1, OU=3DRSAppSrvNode1, O=3DIBM, C=3DUS is not trusted; internal ca= use is:=20 java.security.cert.CertPathValidatorException: Certificate = chaining error [9/8/15 12:04:27:193 IST] 00000064 SystemErr R at com.ibm.j= sse2.n.a(n.java:28) [9/8/15 12:04:27:193 IST] 00000064 SystemErr R at com.ibm.j= sse2.tc.a(tc.java:251) [9/8/15 12:04:27:193 IST] 00000064 SystemErr R at com.ibm.j= sse2.gb.a(gb.java:251) [9/8/15 12:04:27:194 IST] 00000064 SystemErr R at com.ibm.j= sse2.gb.a(gb.java:228) [9/8/15 12:04:27:194 IST] 00000064 SystemErr R at com.ibm.j= sse2.hb.a(hb.java:279) [9/8/15 12:04:27:194 IST] 00000064 SystemErr R at com.ibm.j= sse2.hb.a(hb.java:292) [9/8/15 12:04:27:194 IST] 00000064 SystemErr R at com.ibm.j= sse2.gb.n(gb.java:71) [9/8/15 12:04:27:194 IST] 00000064 SystemErr R at com.ibm.j= sse2.gb.a(gb.java:324) [9/8/15 12:04:27:194 IST] 00000064 SystemErr R at com.ibm.j= sse2.tc.a(tc.java:559) [9/8/15 12:04:27:195 IST] 00000064 SystemErr R at com.ibm.j= sse2.tc.g(tc.java:25) [9/8/15 12:04:27:195 IST] 00000064 SystemErr R at com.ibm.j= sse2.tc.a(tc.java:582) [9/8/15 12:04:27:195 IST] 00000064 SystemErr R at com.ibm.j= sse2.tc.startHandshake(tc.java:652) [9/8/15 12:04:27:195 IST] 00000064 SystemErr R at org.apach= e.http.conn.ssl.SSLConnectionSocketFactory.createLayeredSocket(SSLConnectio= nSocketFactory.java:394) [9/8/15 12:04:27:195 IST] 00000064 SystemErr R at org.apach= e.http.conn.ssl.SSLConnectionSocketFactory.connectSocket(SSLConnectionSocke= tFactory.java:353) [9/8/15 12:04:27:195 IST] 00000064 SystemErr R at org.apach= e.http.impl.conn.DefaultHttpClientConnectionOperator.connect(DefaultHttpCli= entConnectionOperator.java:134) [9/8/15 12:04:27:195 IST] 00000064 SystemErr R at org.apach= e.http.impl.conn.PoolingHttpClientConnectionManager.connect(PoolingHttpClie= ntConnectionManager.java:353) [9/8/15 12:04:27:196 IST] 00000064 SystemErr R at org.apach= e.http.impl.execchain.MainClientExec.establishRoute(MainClientExec.java:380= ) [9/8/15 12:04:27:196 IST] 00000064 SystemErr R at org.apach= e.http.impl.execchain.MainClientExec.execute(MainClientExec.java:236) [9/8/15 12:04:27:196 IST] 00000064 SystemErr R at org.apach= e.http.impl.execchain.ProtocolExec.execute(ProtocolExec.java:184) [9/8/15 12:04:27:196 IST] 00000064 SystemErr R at org.apach= e.http.impl.execchain.RetryExec.execute(RetryExec.java:88) [9/8/15 12:04:27:196 IST] 00000064 SystemErr R at org.apach= e.http.impl.execchain.RedirectExec.execute(RedirectExec.java:110) [9/8/15 12:04:27:196 IST] 00000064 SystemErr R at org.apach= e.http.impl.client.InternalHttpClient.doExecute(InternalHttpClient.java:184= ) [9/8/15 12:04:27:197 IST] 00000064 SystemErr R at org.apach= e.http.impl.client.CloseableHttpClient.execute(CloseableHttpClient.java:117= ) [9/8/15 12:04:27:197 IST] 00000064 SystemErr R at org.apach= e.http.impl.client.CloseableHttpClient.execute(CloseableHttpClient.java:55) [9/8/15 12:04:27:197 IST] 00000064 SystemErr R at com.citi.= cpb.emea.revelation.proxy.ProxyServlet.sendApplicationRequest(ProxyServlet.= java:392) [9/8/15 12:04:27:197 IST] 00000064 SystemErr R at com.citi.= cpb.emea.revelation.proxy.ProxyServlet.doGet(ProxyServlet.java:130) [9/8/15 12:04:27:197 IST] 00000064 SystemErr R at javax.ser= vlet.http.HttpServlet.service(HttpServlet.java:575) [9/8/15 12:04:27:197 IST] 00000064 SystemErr R at javax.ser= vlet.http.HttpServlet.service(HttpServlet.java:668) [9/8/15 12:04:27:198 IST] 00000064 SystemErr R at com.ibm.w= s.webcontainer.servlet.ServletWrapper.service(ServletWrapper.java:1147) [9/8/15 12:04:27:198 IST] 00000064 SystemErr R at com.ibm.w= s.webcontainer.servlet.ServletWrapper.handleRequest(ServletWrapper.java:722= ) [9/8/15 12:04:27:198 IST] 00000064 SystemErr R at com.ibm.w= s.webcontainer.servlet.ServletWrapper.handleRequest(ServletWrapper.java:449= ) [9/8/15 12:04:27:198 IST] 00000064 SystemErr R at com.ibm.w= s.webcontainer.servlet.ServletWrapperImpl.handleRequest(ServletWrapperImpl.= java:178) [9/8/15 12:04:27:198 IST] 00000064 SystemErr R at com.ibm.w= s.webcontainer.filter.WebAppFilterManager.invokeFilters(WebAppFilterManager= .java:1020) [9/8/15 12:04:27:198 IST] 00000064 SystemErr R at com.ibm.w= s.webcontainer.webapp.WebApp.handleRequest(WebApp.java:3639) [9/8/15 12:04:27:199 IST] 00000064 SystemErr R at com.ibm.w= s.webcontainer.webapp.WebGroup.handleRequest(WebGroup.java:304) [9/8/15 12:04:27:199 IST] 00000064 SystemErr R at com.ibm.w= s.webcontainer.WebContainer.handleRequest(WebContainer.java:950) [9/8/15 12:04:27:199 IST] 00000064 SystemErr R at com.ibm.w= s.webcontainer.WSWebContainer.handleRequest(WSWebContainer.java:1659) [9/8/15 12:04:27:199 IST] 00000064 SystemErr R at com.ibm.w= s.webcontainer.channel.WCChannelLink.ready(WCChannelLink.java:195) [9/8/15 12:04:27:199 IST] 00000064 SystemErr R at com.ibm.w= s.http.channel.inbound.impl.HttpInboundLink.handleDiscrimination(HttpInboun= dLink.java:452) [9/8/15 12:04:27:199 IST] 00000064 SystemErr R at com.ibm.w= s.http.channel.inbound.impl.HttpInboundLink.handleNewRequest(HttpInboundLin= k.java:511) [9/8/15 12:04:27:200 IST] 00000064 SystemErr R at com.ibm.w= s.http.channel.inbound.impl.HttpInboundLink.processRequest(HttpInboundLink.= java:305) [9/8/15 12:04:27:200 IST] 00000064 SystemErr R at com.ibm.w= s.http.channel.inbound.impl.HttpInboundLink.ready(HttpInboundLink.java:276) [9/8/15 12:04:27:200 IST] 00000064 SystemErr R at com.ibm.w= s.ssl.channel.impl.SSLConnectionLink.determineNextChannel(SSLConnectionLink= .java:1048) [9/8/15 12:04:27:200 IST] 00000064 SystemErr R at com.ibm.w= s.ssl.channel.impl.SSLConnectionLink$MyReadCompletedCallback.complete(SSLCo= nnectionLink.java:642) [9/8/15 12:04:27:200 IST] 00000064 SystemErr R at com.ibm.w= s.ssl.channel.impl.SSLReadServiceContext$SSLReadCompletedCallback.complete(= SSLReadServiceContext.java:1784) [9/8/15 12:04:27:200 IST] 00000064 SystemErr R at com.ibm.w= s.tcp.channel.impl.AioReadCompletionListener.futureCompleted(AioReadComplet= ionListener.java:165) [9/8/15 12:04:27:201 IST] 00000064 SystemErr R at com.ibm.i= o.async.AbstractAsyncFuture.invokeCallback(AbstractAsyncFuture.java:217) [9/8/15 12:04:27:201 IST] 00000064 SystemErr R at com.ibm.i= o.async.AsyncChannelFuture.fireCompletionActions(AsyncChannelFuture.java:16= 1) [9/8/15 12:04:27:201 IST] 00000064 SystemErr R at com.ibm.i= o.async.AsyncFuture.completed(AsyncFuture.java:138) [9/8/15 12:04:27:201 IST] 00000064 SystemErr R at com.ibm.i= o.async.ResultHandler.complete(ResultHandler.java:204) [9/8/15 12:04:27:201 IST] 00000064 SystemErr R at com.ibm.i= o.async.ResultHandler.runEventProcessingLoop(ResultHandler.java:775) [9/8/15 12:04:27:201 IST] 00000064 SystemErr R at com.ibm.i= o.async.ResultHandler$2.run(ResultHandler.java:905) [9/8/15 12:04:27:202 IST] 00000064 SystemErr R at com.ibm.w= s.util.ThreadPool$Worker.run(ThreadPool.java:1648) [9/8/15 12:04:27:202 IST] 00000064 SystemErr R Caused by: com.ibm.jsse2= .util.g: PKIX path building failed: java.security.cert.CertPathBuilderExcep= tion: PKIXCertPathBuilderImpl could not build a valid CertPath.; internal c= ause is:=20 java.security.cert.CertPathValidatorException: The certific= ate issued by CN=3Dmumgo3206.in.oracle.com, OU=3DRoot Certificate, OU=3DRSA= ppSrvCell1, OU=3DRSAppSrvNode1, O=3DIBM, C=3DUS is not trusted; internal ca= use is:=20 java.security.cert.CertPathValidatorException: Certificate = chaining error [9/8/15 12:04:27:202 IST] 00000064 SystemErr R at com.ibm.j= sse2.util.e.b(e.java:30) [9/8/15 12:04:27:203 IST] 00000064 SystemErr R at com.ibm.j= sse2.util.e.b(e.java:62) [9/8/15 12:04:27:203 IST] 00000064 SystemErr R at com.ibm.j= sse2.util.d.a(d.java:11) [9/8/15 12:04:27:203 IST] 00000064 SystemErr R at com.ibm.j= sse2.hc.a(hc.java:40) [9/8/15 12:04:27:203 IST] 00000064 SystemErr R at com.ibm.j= sse2.hc.checkServerTrusted(hc.java:33) [9/8/15 12:04:27:203 IST] 00000064 SystemErr R at com.ibm.j= sse2.hc.b(hc.java:80) [9/8/15 12:04:27:203 IST] 00000064 SystemErr R at com.ibm.j= sse2.hb.a(hb.java:416) [9/8/15 12:04:27:203 IST] 00000064 SystemErr R ... 48 more [9/8/15 12:04:27:204 IST] 00000064 SystemErr R Caused by: java.security= .cert.CertPathBuilderException: PKIXCertPathBuilderImpl could not build a v= alid CertPath.; internal cause is:=20 java.security.cert.CertPathValidatorException: The certific= ate issued by CN=3Dmumgo3206.in.oracle.com, OU=3DRoot Certificate, OU=3DRSA= ppSrvCell1, OU=3DRSAppSrvNode1, O=3DIBM, C=3DUS is not trusted; internal ca= use is:=20 java.security.cert.CertPathValidatorException: Certificate = chaining error [9/8/15 12:04:27:204 IST] 00000064 SystemErr R at com.ibm.s= ecurity.cert.PKIXCertPathBuilderImpl.engineBuild(PKIXCertPathBuilderImpl.ja= va:411) [9/8/15 12:04:27:204 IST] 00000064 SystemErr R at java.secu= rity.cert.CertPathBuilder.build(CertPathBuilder.java:258) [9/8/15 12:04:27:205 IST] 00000064 SystemErr R at com.ibm.j= sse2.util.e.b(e.java:103) [9/8/15 12:04:27:205 IST] 00000064 SystemErr R ... 54 more [9/8/15 12:04:27:205 IST] 00000064 SystemErr R Caused by: java.security= .cert.CertPathValidatorException: The certificate issued by CN=3Dmumgo3206.= in.oracle.com, OU=3DRoot Certificate, OU=3DRSAppSrvCell1, OU=3DRSAppSrvNode= 1, O=3DIBM, C=3DUS is not trusted; internal cause is:=20 java.security.cert.CertPathValidatorException: Certificate = chaining error [9/8/15 12:04:27:206 IST] 00000064 SystemErr R at com.ibm.s= ecurity.cert.BasicChecker.(BasicChecker.java:111) [9/8/15 12:04:27:206 IST] 00000064 SystemErr R at com.ibm.s= ecurity.cert.PKIXCertPathValidatorImpl.engineValidate(PKIXCertPathValidator= Impl.java:176) [9/8/15 12:04:27:206 IST] 00000064 SystemErr R at com.ibm.s= ecurity.cert.PKIXCertPathBuilderImpl.myValidator(PKIXCertPathBuilderImpl.ja= va:737) =20 =20 Thanks & Regards, Bhuvaneswari =20 --__144170104345549571abhmp0004.oracle.com--