shindig-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From daviesd <davi...@oclc.org>
Subject Re: httpclient version upgrade causing SSL exceptions
Date Fri, 06 Jan 2012 14:58:47 GMT
Thanks. Are snapshots happening? I donĀ¹t seem to be picking up anything new
since 12/26. Could be an issue on my end.

doug


On 1/3/12 4:21 PM, "Paul Lindner" <lindner@inuus.com> wrote:

> ugh.  I reverted the revert.  I'll get it back in place.
> 
> 
> commit f30c4decb5332f18acbacacedd29dee7df54b12e
> Author: Paul Lindner <lindner@apache.org>
> Date:   Mon Dec 26 10:44:42 2011 +0000
> 
>     fix deprecated usage for httpclient
> 
>     git-svn-id:
> https://svn.apache.org/repos/asf/shindig/trunk@122470813f79535-47bb-0310-9956-
> ffa450edef68
> 
> 
> On Tue, Jan 3, 2012 at 12:46 PM, daviesd <daviesd@oclc.org> wrote:
> 
>> > Did this change again recently?  The ssl certificate error is back.
>> >
>> > doug
>> >
>> >
>> > On 11/7/11 1:45 PM, "Ryan J Baxter" <rjbaxter@us.ibm.com> wrote:
>> >
>>> > > I have been seeing SSL exceptions being thrown relating to certificates
>>> > > not matching in builds from trunk recently.  I have traced this back
to
a
>>> > > httpclient upgrade from 4.1.1 to 4.1.2.  Would anyone be opposed to
>>> > > reverting back to 4.1.1 for the time being?
>>> > >
>>> > > Looking that the changes that went into 4.1.2, this change looks like
it
>>> > > might be related to the problem.  I have CCed Sebastian, maybe he can
>>> > > confirm.
>>> > >
>>> > > * [HTTPCLIENT-1097] BrowserCompatHostnameVerifier and
>>> > > StrictHostnameVerifier should handle
>>> > >   wildcards in SSL certificates better.
>>> > >   Contributed by Sebastian Bazley <sebb at apache.org>
>>> > >
>>> > > INFO: The following exception occurred when fetching
>>> > > https://ajax.googleapis.com/ajax/libs/jquery/1.6.4/jquery.min.js: 405
ms
>>> > > elapsed.
>>> > > Nov 7, 2011 1:38:28 PM org.apache.shindig.gadgets.http.BasicHttpFetcher
>>> > > fetch
>>> > > INFO:
>>> > > javax.net.ssl.SSLException: hostname in certificate didn't match:
>>> > > <ajax.googleapis.com/74.125.115.95> != <*.googleapis.com>
OR
>>> > > <googleapis.com> OR <*.googleapis.com>
>>> > >         at org.apache.http.conn.ssl.AbstractVerifier.verify(
>>> > > AbstractVerifier.java:228)
>>> > >         at 
>>> org.apache.http.conn.ssl.BrowserCompatHostnameVerifier.verify(
>>> > > BrowserCompatHostnameVerifier.java:54)
>>> > >         at org.apache.http.conn.ssl.AbstractVerifier.verify(
>>> > > AbstractVerifier.java:149)
>>> > >         at org.apache.http.conn.ssl.AbstractVerifier.verify(
>>> > > AbstractVerifier.java:130)
>>> > >         at org.apache.http.conn.ssl.SSLSocketFactory.connectSocket(
>>> > > SSLSocketFactory.java:397)
>>> > >         at org.apache.http.conn.ssl.SSLSocketFactory.connectSocket(
>>> > > SSLSocketFactory.java:495)
>>> > >         at
>>> > > org.apache.http.conn.scheme.SchemeSocketFactoryAdaptor.connectSocket(
>>> > > SchemeSocketFactoryAdaptor.java:62)
>>> > >         at
>>> > > 
>>> org.apache.http.impl.conn.DefaultClientConnectionOperator.openConnection(
>>> > > DefaultClientConnectionOperator.java:148)
>>> > >         at org.apache.http.impl.conn.AbstractPoolEntry.open(
>>> > > AbstractPoolEntry.java:149)
>>> > >         at org.apache.http.impl.conn.AbstractPooledConnAdapter.open(
>>> > > AbstractPooledConnAdapter.java:121)
>>> > >         at 
>>> org.apache.http.impl.client.DefaultRequestDirector.tryConnect(
>>> > > DefaultRequestDirector.java:573)
>>> > >         at org.apache.http.impl.client.DefaultRequestDirector.execute(
>>> > > DefaultRequestDirector.java:425)
>>> > >         at org.apache.http.impl.client.AbstractHttpClient.execute(
>>> > > AbstractHttpClient.java:820)
>>> > >         at org.apache.http.impl.client.AbstractHttpClient.execute(
>>> > > AbstractHttpClient.java:776)
>>> > >         at org.apache.shindig.gadgets.http.BasicHttpFetcher.fetch(
>>> > > BasicHttpFetcher.java:361)
>>> > >         at
>> > org.apache.shindig.gadgets.http.DefaultRequestPipeline.execute(
>>> > > DefaultRequestPipeline.java:108)
>>> > >         at
>>> > >
>> > 
>> 
org.apache.shindig.gadgets.http.MultipleResourceHttpFetcher$HttpFetchCallable.
>>> > > call(
>>> > > MultipleResourceHttpFetcher.java:105)
>>> > >         at
>>> > >
>> > 
>> 
org.apache.shindig.gadgets.http.MultipleResourceHttpFetcher$HttpFetchCallable.
>>> > > call(
>>> > > MultipleResourceHttpFetcher.java:92)
>>> > >         at java.util.concurrent.FutureTask$Sync.innerRun(
>>> > > FutureTask.java:303)
>>> > >         at java.util.concurrent.FutureTask.run(FutureTask.java:138)
>>> > >         at java.util.concurrent.ThreadPoolExecutor$Worker.runTask(
>>> > > ThreadPoolExecutor.java:886)
>>> > >         at java.util.concurrent.ThreadPoolExecutor$Worker.run(
>>> > > ThreadPoolExecutor.java:908)
>>> > >         at java.lang.Thread.run(Thread.java:662)
>>> > > Nov 7, 2011 1:38:28 PM
>>> > > org.apache.shindig.gadgets.servlet.ConcatProxyServlet outputError
>>> > > INFO: The following error occurred when requesting a concatenated proxy:
>>> > > /* ---- Error INTERNAL_SERVER_ERROR concat(
>>> > > https://ajax.googleapis.com/ajax/libs/jquery/1.6.4/jquery.min.js)
>>> > > javax.net.ssl.SSLException: hostname in certificate didn't match:
>>> > > <ajax.googleapis.com/74.125.115.95> != <*.googleapis.com>
OR
>>> > > <googleapis.com> OR <*.googleapis.com> ---- */.
>>> > >
>>> > > -Ryan
>>> > >
>>> > > Email: rjbaxter@us.ibm.com
>>> > > Phone: 978-899-3041
>>> > > developerWorks Profile
>>> > >
>> >
>> >
>> >
> 


Mime
  • Unnamed multipart/alternative (inline, None, 0 bytes)
View raw message