www-infrastructure-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Chris Lambertus (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (INFRA-12332) Reverse proxy's TLS cert of repository.apache.org fails with Java
Date Mon, 01 Aug 2016 23:20:21 GMT

    [ https://issues.apache.org/jira/browse/INFRA-12332?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15403022#comment-15403022
] 

Chris Lambertus commented on INFRA-12332:
-----------------------------------------

I set up the proxy.. It's copied over identically (including certs) from the old proxy at
OSU. The only difference is that as of last Wednesday the proxy uses the private IP backend
instead of the publicly routed one.

> Reverse proxy's TLS cert of repository.apache.org fails with Java
> -----------------------------------------------------------------
>
>                 Key: INFRA-12332
>                 URL: https://issues.apache.org/jira/browse/INFRA-12332
>             Project: Infrastructure
>          Issue Type: Bug
>          Components: Nexus
>         Environment: Apache Maven 3.3.9 (bb52d8502b132ec0a5a3f4c09453c07478323dc5; 2015-11-10T17:41:47+01:00)
> Maven home: /usr/local/apache-maven-3.3.9
> Java version: 1.8.0_92, vendor: Oracle Corporation
> Java home: /usr/local/openjdk8/jre
> Default locale: de_DE, platform encoding: UTF-8
> OS name: "freebsd", version: "10.3-release-p4", arch: "i386", family: "unix"
>            Reporter: Michael Osipov
>            Assignee: Chris Lambertus
>
> Artifact retrieval from {{repository.apache.org}} fails due to changed reverse proxy:
> {noformat}
> [ERROR] Failed to execute goal on project maven-core: Could not resolve dependencies
for project org.apache.maven:maven-core:jar:3.4.0-SNAPSHOT: Failed to collect dependencies
at org.apache.maven.shared:maven-shared-utils:jar:3.1.0-SNAPSHOT: Failed to read artifact
descriptor for org.apache.maven.shared:maven-shared-utils:jar:3.1.0-SNAPSHOT: Could not transfer
artifact org.apache.maven.shared:maven-shared-utils:pom:3.1.0-SNAPSHOT from/to apache.snapshots
(https://repository.apache.org/snapshots): handshake alert:  unrecognized_name -> [Help
1]
> org.apache.maven.lifecycle.LifecycleExecutionException: Failed to execute goal on project
maven-core: Could not resolve dependencies for project org.apache.maven:maven-core:jar:3.4.0-SNAPSHOT:
Failed to collect dependencies at org.apache.maven.shared:maven-shared-utils:jar:3.1.0-SNAPSHOT
>         at org.apache.maven.lifecycle.internal.LifecycleDependencyResolver.getDependencies(LifecycleDependencyResolver.java:221)
>         at org.apache.maven.lifecycle.internal.LifecycleDependencyResolver.resolveProjectDependencies(LifecycleDependencyResolver.java:127)
>         at org.apache.maven.lifecycle.internal.MojoExecutor.ensureDependenciesAreResolved(MojoExecutor.java:245)
>         at org.apache.maven.lifecycle.internal.MojoExecutor.execute(MojoExecutor.java:199)
>         at org.apache.maven.lifecycle.internal.MojoExecutor.execute(MojoExecutor.java:153)
>         at org.apache.maven.lifecycle.internal.MojoExecutor.execute(MojoExecutor.java:145)
>         at org.apache.maven.lifecycle.internal.LifecycleModuleBuilder.buildProject(LifecycleModuleBuilder.java:116)
>         at org.apache.maven.lifecycle.internal.LifecycleModuleBuilder.buildProject(LifecycleModuleBuilder.java:80)
>         at org.apache.maven.lifecycle.internal.builder.singlethreaded.SingleThreadedBuilder.build(SingleThreadedBuilder.java:51)
>         at org.apache.maven.lifecycle.internal.LifecycleStarter.execute(LifecycleStarter.java:128)
>         at org.apache.maven.DefaultMaven.doExecute(DefaultMaven.java:307)
>         at org.apache.maven.DefaultMaven.doExecute(DefaultMaven.java:193)
>         at org.apache.maven.DefaultMaven.execute(DefaultMaven.java:106)
>         at org.apache.maven.cli.MavenCli.execute(MavenCli.java:863)
>         at org.apache.maven.cli.MavenCli.doMain(MavenCli.java:288)
>         at org.apache.maven.cli.MavenCli.main(MavenCli.java:199)
>         at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
>         at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
>         at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
>         at java.lang.reflect.Method.invoke(Method.java:498)
>         at org.codehaus.plexus.classworlds.launcher.Launcher.launchEnhanced(Launcher.java:289)
>         at org.codehaus.plexus.classworlds.launcher.Launcher.launch(Launcher.java:229)
>         at org.codehaus.plexus.classworlds.launcher.Launcher.mainWithExitCode(Launcher.java:415)
>         at org.codehaus.plexus.classworlds.launcher.Launcher.main(Launcher.java:356)
> Caused by: org.apache.maven.project.DependencyResolutionException: Could not resolve
dependencies for project org.apache.maven:maven-core:jar:3.4.0-SNAPSHOT: Failed to collect
dependencies at org.apache.maven.shared:maven-shared-utils:jar:3.1.0-SNAPSHOT
>         at org.apache.maven.project.DefaultProjectDependenciesResolver.resolve(DefaultProjectDependenciesResolver.java:180)
>         at org.apache.maven.lifecycle.internal.LifecycleDependencyResolver.getDependencies(LifecycleDependencyResolver.java:195)
>         ... 23 more
> Caused by: org.eclipse.aether.collection.DependencyCollectionException: Failed to collect
dependencies at org.apache.maven.shared:maven-shared-utils:jar:3.1.0-SNAPSHOT
>         at org.eclipse.aether.internal.impl.DefaultDependencyCollector.collectDependencies(DefaultDependencyCollector.java:291)
>         at org.eclipse.aether.internal.impl.DefaultRepositorySystem.collectDependencies(DefaultRepositorySystem.java:316)
>         at org.apache.maven.project.DefaultProjectDependenciesResolver.resolve(DefaultProjectDependenciesResolver.java:172)
>         ... 24 more
> Caused by: org.eclipse.aether.resolution.ArtifactDescriptorException: Failed to read
artifact descriptor for org.apache.maven.shared:maven-shared-utils:jar:3.1.0-SNAPSHOT
>         at org.apache.maven.repository.internal.DefaultArtifactDescriptorReader.loadPom(DefaultArtifactDescriptorReader.java:282)
>         at org.apache.maven.repository.internal.DefaultArtifactDescriptorReader.readArtifactDescriptor(DefaultArtifactDescriptorReader.java:198)
>         at org.eclipse.aether.internal.impl.DefaultDependencyCollector.resolveCachedArtifactDescriptor(DefaultDependencyCollector.java:535)
>         at org.eclipse.aether.internal.impl.DefaultDependencyCollector.getArtifactDescriptorResult(DefaultDependencyCollector.java:519)
>         at org.eclipse.aether.internal.impl.DefaultDependencyCollector.processDependency(DefaultDependencyCollector.java:409)
>         at org.eclipse.aether.internal.impl.DefaultDependencyCollector.processDependency(DefaultDependencyCollector.java:363)
>         at org.eclipse.aether.internal.impl.DefaultDependencyCollector.process(DefaultDependencyCollector.java:351)
>         at org.eclipse.aether.internal.impl.DefaultDependencyCollector.collectDependencies(DefaultDependencyCollector.java:254)
>         ... 26 more
> Caused by: org.eclipse.aether.resolution.ArtifactResolutionException: Could not transfer
artifact org.apache.maven.shared:maven-shared-utils:pom:3.1.0-SNAPSHOT from/to apache.snapshots
(https://repository.apache.org/snapshots): handshake alert:  unrecognized_name
>         at org.eclipse.aether.internal.impl.DefaultArtifactResolver.resolve(DefaultArtifactResolver.java:444)
>         at org.eclipse.aether.internal.impl.DefaultArtifactResolver.resolveArtifacts(DefaultArtifactResolver.java:246)
>         at org.eclipse.aether.internal.impl.DefaultArtifactResolver.resolveArtifact(DefaultArtifactResolver.java:223)
>         at org.apache.maven.repository.internal.DefaultArtifactDescriptorReader.loadPom(DefaultArtifactDescriptorReader.java:267)
>         ... 33 more
> Caused by: org.eclipse.aether.transfer.ArtifactTransferException: Could not transfer
artifact org.apache.maven.shared:maven-shared-utils:pom:3.1.0-SNAPSHOT from/to apache.snapshots
(https://repository.apache.org/snapshots): handshake alert:  unrecognized_name
>         at org.eclipse.aether.connector.basic.ArtifactTransportListener.transferFailed(ArtifactTransportListener.java:43)
>         at org.eclipse.aether.connector.basic.BasicRepositoryConnector$TaskRunner.run(BasicRepositoryConnector.java:355)
>         at org.eclipse.aether.util.concurrency.RunnableErrorForwarder$1.run(RunnableErrorForwarder.java:67)
>         at org.eclipse.aether.connector.basic.BasicRepositoryConnector$DirectExecutor.execute(BasicRepositoryConnector.java:581)
>         at org.eclipse.aether.connector.basic.BasicRepositoryConnector.get(BasicRepositoryConnector.java:249)
>         at org.eclipse.aether.internal.impl.DefaultArtifactResolver.performDownloads(DefaultArtifactResolver.java:520)
>         at org.eclipse.aether.internal.impl.DefaultArtifactResolver.resolve(DefaultArtifactResolver.java:421)
>         ... 36 more
> Caused by: org.apache.maven.wagon.TransferFailedException: handshake alert:  unrecognized_name
>         at org.apache.maven.wagon.providers.http.AbstractHttpClientWagon.fillInputData(AbstractHttpClientWagon.java:1066)
>         at org.apache.maven.wagon.providers.http.AbstractHttpClientWagon.fillInputData(AbstractHttpClientWagon.java:960)
>         at org.apache.maven.wagon.StreamWagon.getInputStream(StreamWagon.java:116)
>         at org.apache.maven.wagon.StreamWagon.getIfNewer(StreamWagon.java:88)
>         at org.apache.maven.wagon.StreamWagon.get(StreamWagon.java:61)
>         at org.eclipse.aether.transport.wagon.WagonTransporter$GetTaskRunner.run(WagonTransporter.java:560)
>         at org.eclipse.aether.transport.wagon.WagonTransporter.execute(WagonTransporter.java:427)
>         at org.eclipse.aether.transport.wagon.WagonTransporter.get(WagonTransporter.java:404)
>         at org.eclipse.aether.connector.basic.BasicRepositoryConnector$GetTaskRunner.runTask(BasicRepositoryConnector.java:447)
>         at org.eclipse.aether.connector.basic.BasicRepositoryConnector$TaskRunner.run(BasicRepositoryConnector.java:350)
>         ... 41 more
> Caused by: javax.net.ssl.SSLProtocolException: handshake alert:  unrecognized_name
>         at sun.security.ssl.ClientHandshaker.handshakeAlert(ClientHandshaker.java:1441)
>         at sun.security.ssl.SSLSocketImpl.recvAlert(SSLSocketImpl.java:2016)
>         at sun.security.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:1125)
>         at sun.security.ssl.SSLSocketImpl.performInitialHandshake(SSLSocketImpl.java:1375)
>         at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1403)
>         at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1387)
>         at org.apache.maven.wagon.providers.http.httpclient.conn.ssl.SSLConnectionSocketFactory.createLayeredSocket(SSLConnectionSocketFactory.java:275)
>         at org.apache.maven.wagon.providers.http.httpclient.conn.ssl.SSLConnectionSocketFactory.connectSocket(SSLConnectionSocketFactory.java:254)
>         at org.apache.maven.wagon.providers.http.httpclient.impl.conn.HttpClientConnectionOperator.connect(HttpClientConnectionOperator.java:123)
>         at org.apache.maven.wagon.providers.http.httpclient.impl.conn.PoolingHttpClientConnectionManager.connect(PoolingHttpClientConnectionManager.java:318)
>         at org.apache.maven.wagon.providers.http.httpclient.impl.execchain.MainClientExec.establishRoute(MainClientExec.java:363)
>         at org.apache.maven.wagon.providers.http.httpclient.impl.execchain.MainClientExec.execute(MainClientExec.java:219)
>         at org.apache.maven.wagon.providers.http.httpclient.impl.execchain.ProtocolExec.execute(ProtocolExec.java:195)
>         at org.apache.maven.wagon.providers.http.httpclient.impl.execchain.RetryExec.execute(RetryExec.java:86)
>         at org.apache.maven.wagon.providers.http.httpclient.impl.execchain.RedirectExec.execute(RedirectExec.java:108)
>         at org.apache.maven.wagon.providers.http.httpclient.impl.client.InternalHttpClient.doExecute(InternalHttpClient.java:184)
>         at org.apache.maven.wagon.providers.http.httpclient.impl.client.CloseableHttpClient.execute(CloseableHttpClient.java:82)
>         at org.apache.maven.wagon.providers.http.AbstractHttpClientWagon.execute(AbstractHttpClientWagon.java:832)
>         at org.apache.maven.wagon.providers.http.AbstractHttpClientWagon.fillInputData(AbstractHttpClientWagon.java:983)
>         ... 50 more
> {noformat}
> There are several references for this: [1|http://bugs.java.com/bugdatabase/view_bug.do?bug_id=7127374],
[2|https://confluence.atlassian.com/confkb/error-handshake-alert-unrecognized_name-when-setting-up-application-links-after-upgrading-confluence-753895174.html],
[3|https://github.com/lightbody/browsermob-proxy/issues/117], [4|http://stackoverflow.com/q/7615645/696632].

> OpenSSL debug output ({{openssl s_client -servername repository.apache.org -connect 
repository.apache.org:443 -state}}):
> {noformat}
> CONNECTED(00000003)
> SSL_connect:before/connect initialization
> SSL_connect:SSLv2/v3 write client hello A
> SSL3 alert read:warning:unrecognized name
> SSL_connect:SSLv3 read server hello A
> depth=2 C = US, O = "VeriSign, Inc.", OU = VeriSign Trust Network, OU = "(c) 2006 VeriSign,
Inc. - For authorized use only", CN = VeriSign Class 3 Public Primary Certification Authority
- G5
> ...
> {noformat}
> The warning and the references denote that there is some misconfiguration on the reverse
proxy side and Java is behaving correctly.
> Please investigate.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Mime
View raw message