SSLHandshakeException on https://svn.codehaus.org

[Luis Arias]

The bug reported here on svnkit has been determined to be an OpenJDK bug which is present in karmic but not in intrepid (I believe it is present in jaunty too).

http://svnkit.com/tracker/view.php?id=347

Original svnkit post

Using svnkit 1.3.2 I get the following exception when doing a checkout on the codehaus.org svn repo:

jsvn co https://svn.codehaus.org/grails-plugins/grails-wordpress/trunk [^] grails-wordpress

Dec 12, 2009 8:47:25 AM org.tmatesoft.svn.core.internal.util.DefaultSVNDebugLogger log
FINE: NETWORK: Received fatal alert: handshake_failure
javax.net.ssl.SSLHandshakeException: Received fatal alert: handshake_failure
    at sun.security.ssl.Alerts.getSSLException(Alerts.java:192)
    at sun.security.ssl.Alerts.getSSLException(Alerts.java:154)
    at sun.security.ssl.SSLSocketImpl.recvAlert(SSLSocketImpl.java:1693)
    at sun.security.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:952)
    at sun.security.ssl.SSLSocketImpl.performInitialHandshake(SSLSocketImpl.java:1132)
    at sun.security.ssl.SSLSocketImpl.writeRecord(SSLSocketImpl.java:643)
    at sun.security.ssl.AppOutputStream.write(AppOutputStream.java:78)
    at java.io.BufferedOutputStream.flushBuffer(BufferedOutputStream.java:82)
    at java.io.BufferedOutputStream.flush(BufferedOutputStream.java:140)
    at org.tmatesoft.svn.core.internal.util.SVNLogOutputStream.flush(SVNLogOutputStream.java:48)
    at org.tmatesoft.svn.core.internal.io.dav.http.HTTPConnection.sendData(HTTPConnection.java:227)
    at org.tmatesoft.svn.core.internal.io.dav.http.HTTPRequest.dispatch(HTTPRequest.java:166)
    at org.tmatesoft.svn.core.internal.io.dav.http.HTTPConnection.request(HTTPConnection.java:348)
    at org.tmatesoft.svn.core.internal.io.dav.http.HTTPConnection.request(HTTPConnection.java:274)
    at org.tmatesoft.svn.core.internal.io.dav.http.HTTPConnection.request(HTTPConnection.java:262)
    at org.tmatesoft.svn.core.internal.io.dav.DAVConnection.exchangeCapabilities(DAVConnection.java:516)
    at org.tmatesoft.svn.core.internal.io.dav.DAVConnection.open(DAVConnection.java:98)
    at org.tmatesoft.svn.core.internal.io.dav.DAVRepository.openConnection(DAVRepository.java:999)
    at org.tmatesoft.svn.core.internal.io.dav.DAVRepository.getLatestRevision(DAVRepository.java:178)
    at org.tmatesoft.svn.core.wc.SVNBasicClient.getRevisionNumber(SVNBasicClient.java:482)
    at org.tmatesoft.svn.core.wc.SVNBasicClient.getLocations(SVNBasicClient.java:873)
    at org.tmatesoft.svn.core.wc.SVNBasicClient.createRepository(SVNBasicClient.java:534)
    at org.tmatesoft.svn.core.wc.SVNUpdateClient.doCheckout(SVNUpdateClient.java:893)
    at org.tmatesoft.svn.cli.svn.SVNCheckoutCommand.run(SVNCheckoutCommand.java:99)
    at org.tmatesoft.svn.cli.AbstractSVNCommandEnvironment.run(AbstractSVNCommandEnvironment.java:134)
    at org.tmatesoft.svn.cli.AbstractSVNLauncher.run(AbstractSVNLauncher.java:81)
    at org.tmatesoft.svn.cli.svn.SVN.main(SVN.java:26)

[Matthias Klose (doko)]

from the svnkit report:

"Thank you for investigating this! It is known that OpenJDK contains SSL implementation different from those in Sun's JDK and former may not work properly with certain servers/certificates."

please could you recheck this with lucid?

[Luis Arias (kaaloo)]

Sure, I just did with svnkit 1.3.2 and today's OpenJDK update on lucid and it works fine ! :)

luis@persephone:~/opt/svnkit-1.3.2.6267$ java -version
java version "1.6.0_18"
OpenJDK Runtime Environment (IcedTea6 1.8pre) (6b18~pre3-0ubuntu1)
OpenJDK 64-Bit Server VM (build 16.0-b13, mixed mode)

[Matthias Klose (doko)]

> Sure, I just did with svnkit 1.3.2 and today's OpenJDK update
> on lucid and it works fine ! :)

thanks for checking

[Henrik Bach (bach-henrik)]

This doesn't seem to be fixed, due to when I run

ec2-describe-images -o self -o amazon
Unexpected error:
javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
 at sun.security.ssl.Alerts.getSSLException(Alerts.java:192)
 at sun.security.ssl.SSLSocketImpl.fatal(SSLSocketImpl.java:1639)
 at sun.security.ssl.Handshaker.fatalSE(Handshaker.java:215)
 at sun.security.ssl.Handshaker.fatalSE(Handshaker.java:209)
 at sun.security.ssl.ClientHandshaker.serverCertificate(ClientHandshaker.java:1033)
 at sun.security.ssl.ClientHandshaker.processMessage(ClientHandshaker.java:146)
 at sun.security.ssl.Handshaker.processLoop(Handshaker.java:546)
 at sun.security.ssl.Handshaker.process_record(Handshaker.java:482)
 at sun.security.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:904)
 at sun.security.ssl.SSLSocketImpl.performInitialHandshake(SSLSocketImpl.java:1140)
 at sun.security.ssl.SSLSocketImpl.writeRecord(SSLSocketImpl.java:643)
 at sun.security.ssl.AppOutputStream.write(AppOutputStream.java:78)
 at java.io.BufferedOutputStream.flushBuffer(BufferedOutputStream.java:82)
 at java.io.BufferedOutputStream.write(BufferedOutputStream.java:121)
 at java.io.FilterOutputStream.write(FilterOutputStream.java:97)
 at org.apache.commons.httpclient.methods.ByteArrayRequestEntity.writeRequest(ByteArrayRequestEntity.java:89)
 at org.apache.commons.httpclient.methods.EntityEnclosingMethod.writeRequestBody(EntityEnclosingMethod.java:495)
 at org.apache.commons.httpclient.HttpMethodBase.writeRequest(HttpMethodBase.java:1973)
 at org.apache.commons.httpclient.HttpMethodBase.execute(HttpMethodBase.java:993)
 at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(HttpMethodDirector.java:397)
 at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(HttpMethodDirector.java:170)
 at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:396)
 at org.codehaus.xfire.transport.http.CommonsHttpMessageSender.send(CommonsHttpMessageSender.java:369)
 at org.codehaus.xfire.transport.http.HttpChannel.sendViaClient(HttpChannel.java:123)
 at org.codehaus.xfire.transport.http.HttpChannel.send(HttpChannel.java:48)
 at org.codehaus.xfire.handler.OutMessageSender.invoke(OutMessageSender.java:26)
 at org.codehaus.xfire.handler.HandlerPipeline.invoke(HandlerPipeline.java:131)
 at org.codehaus.xfire.client.Invocation.invoke(Invocation.java:79)
 at org.codehaus.xfire.client.Invocation.invoke(Invocation.java:114)
 at org.codehaus.xfire.client.Client.invoke(Client.java:336)
 at org.codehaus.xfire.client.XFireProxy.handleRequest(XFireProxy.java:77)
 at org.codehaus.xfire.client.XFireProxy.invoke(XFireProxy.java:57)
 at $Proxy12.describeImages(Unknown Source)
 at com.amazon.aes.webservices.client.Jec2.describeImages(Jec2.java:485)
 at com.amazon.aes.webservices.client.cmd.DescribeImages.invokeOnline(DescribeImages.java:160)
 at com.amazon.aes.webservices.client.cmd.BaseCmd.invoke(BaseCmd.java:742)
 at com.amazon.aes.webservices.client.cmd.DescribeImages.main(DescribeImages.java:171)
Caused by...

[Henrik Bach (bach-henrik)]

It was Ubuntu 10.04.

[Henrik Bach (bach-henrik)]

More detailed version for java:

$ java -version
java version "1.6.0_18"
OpenJDK Runtime Environment (IcedTea6 1.8) (6b18-1.8-0ubuntu2)
OpenJDK Server VM (build 14.0-b16, mixed mode)