7:51 a.m.
S3_PING: certificate exception when run on EC2
----------------------------------------------
Key: JGRP-1023
URL: https://jira.jboss.org/jira/browse/JGRP-1023
Project: JGroups
Issue Type: Bug
Reporter: Bela Ban
Assignee: Bela Ban
Fix For: 2.9
S3_PING does not work on EC2. It works perfectly when run on a local box
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
https://jira.jboss.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
7:55 a.m.
New subject: [JBoss JIRA] Commented: (JGRP-1023) S3_PING: certificate exception when run on EC2
[
https://jira.jboss.org/jira/browse/JGRP-1023?page=com.atlassian.jira.plug...
]
Bela Ban commented on JGRP-1023:
--------------------------------
stack trace:
Caused by: org.jgroups.ChannelException: unable to setup the protocol stack:
sun.security.validator.ValidatorException: PKIX path building failed:
sun.security.provider.certpath.SunCertPathBuilderE
xception: unable to find valid certification path to requested target
at org.jgroups.JChannel.init(JChannel.java:1584)
at org.jgroups.JChannel.<init>(JChannel.java:248)
at
org.jboss.ha.framework.server.JChannelFactory.createMultiplexerChannel(JChannelFactory.java:265)
at org.jboss.cache.RPCManagerImpl.getMultiplexerChannel(RPCManagerImpl.java:633)
... 90 more
Caused by: javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException:
PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException:
unable to find vali
d certification path to requested target
at sun.security.ssl.Alerts.getSSLException(Alerts.java:192)
at sun.security.ssl.SSLSocketImpl.fatal(SSLSocketImpl.java:1627)
at sun.security.ssl.Handshaker.fatalSE(Handshaker.java:204)
at sun.security.ssl.Handshaker.fatalSE(Handshaker.java:198)
at sun.security.ssl.ClientHandshaker.serverCertificate(ClientHandshaker.java:994)
at sun.security.ssl.ClientHandshaker.processMessage(ClientHandshaker.java:142)
at sun.security.ssl.Handshaker.processLoop(Handshaker.java:533)
at sun.security.ssl.Handshaker.process_record(Handshaker.java:471)
at sun.security.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:904)
at
sun.security.ssl.SSLSocketImpl.performInitialHandshake(SSLSocketImpl.java:1132)
at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1159)
at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1143)
at sun.net.www.protocol.https.HttpsClient.afterConnect(HttpsClient.java:423)
at
sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.connect(AbstractDelegateHttpsURLConnection.java:185)
at
sun.net.www.protocol.http.HttpURLConnection.getInputStream(HttpURLConnection.java:1005)
at java.net.HttpURLConnection.getResponseCode(HttpURLConnection.java:391)
at
sun.net.www.protocol.https.HttpsURLConnectionImpl.getResponseCode(HttpsURLConnectionImpl.java:338)
at
org.jgroups.protocols.S3_PING$AWSAuthConnection.checkBucketExists(S3_PING.java:293)
at org.jgroups.protocols.S3_PING.init(S3_PING.java:71)
at org.jgroups.stack.Configurator.initProtocolStack(Configurator.java:72)
at org.jgroups.stack.ProtocolStack.setup(ProtocolStack.java:307)
at org.jgroups.JChannel.init(JChannel.java:1581)
... 93 more
Caused by: sun.security.validator.ValidatorException: PKIX path building failed:
sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid
certification path to requested tar
get
at sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:302)
at sun.security.validator.PKIXValidator.engineValidate(PKIXValidator.java:205)
at sun.security.validator.Validator.validate(Validator.java:235)
at sun.security.ssl.X509TrustManagerImpl.validate(X509TrustManagerImpl.java:147)
at
sun.security.ssl.X509TrustManagerImpl.checkServerTrusted(X509TrustManagerImpl.java:230)
at
sun.security.ssl.X509TrustManagerImpl.checkServerTrusted(X509TrustManagerImpl.java:270)
at sun.security.ssl.ClientHandshaker.serverCertificate(ClientHandshaker.java:973)
... 110 more
Caused by: sun.security.provider.certpath.SunCertPathBuilderException: unable to find
valid certification path to requested target
at
sun.security.provider.certpath.SunCertPathBuilder.engineBuild(SunCertPathBuilder.java:191)
at java.security.cert.CertPathBuilder.build(CertPathBuilder.java:255)
at sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:297)
... 116 more
S3_PING: certificate exception when run on EC2
----------------------------------------------
Key: JGRP-1023
URL: https://jira.jboss.org/jira/browse/JGRP-1023
Project: JGroups
Issue Type: Bug
Reporter: Bela Ban
Assignee: Bela Ban
Fix For: 2.9
S3_PING does not work on EC2. It works perfectly when run on a local box
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
https://jira.jboss.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
8:44 a.m.
New subject: [JBoss JIRA] Commented: (JGRP-1023) S3_PING: certificate exception when run on EC2
[
https://jira.jboss.org/jira/browse/JGRP-1023?page=com.atlassian.jira.plug...
]
Anil Saldhana commented on JGRP-1023:
-------------------------------------
The server is using a test certificate (such as self signed certificate) and not a real
one. A non-recommended solution is to import the test certificate into your trust store
on the client side.
Some description is here: http://blogs.sun.com/andreas/entry/no_more_unable_to_find
S3_PING: certificate exception when run on EC2
----------------------------------------------
Key: JGRP-1023
URL: https://jira.jboss.org/jira/browse/JGRP-1023
Project: JGroups
Issue Type: Bug
Reporter: Bela Ban
Assignee: Bela Ban
Fix For: 2.9
S3_PING does not work on EC2. It works perfectly when run on a local box
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
https://jira.jboss.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
8:46 a.m.
New subject: [JBoss JIRA] Commented: (JGRP-1023) S3_PING: certificate exception when run on EC2
[
https://jira.jboss.org/jira/browse/JGRP-1023?page=com.atlassian.jira.plug...
]
Bela Ban commented on JGRP-1023:
--------------------------------
Yes, I read the link, but why does this work on my local host ?
S3_PING: certificate exception when run on EC2
----------------------------------------------
Key: JGRP-1023
URL: https://jira.jboss.org/jira/browse/JGRP-1023
Project: JGroups
Issue Type: Bug
Reporter: Bela Ban
Assignee: Bela Ban
Fix For: 2.9
S3_PING does not work on EC2. It works perfectly when run on a local box
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
https://jira.jboss.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
11:51 p.m.
New subject: [JBoss JIRA] Commented: (JGRP-1023) S3_PING: certificate exception when run on EC2
[
https://jira.jboss.org/jira/browse/JGRP-1023?page=com.atlassian.jira.plug...
]
Bela Ban commented on JGRP-1023:
--------------------------------
[comments by Anil]
On your local box, if the certificate is part of your keystore (and you are also using it
as the truststore), then the certificate is trusted.
System Property
javax.net.debug=all will print out the debug info at either end.
S3_PING: certificate exception when run on EC2
----------------------------------------------
Key: JGRP-1023
URL: https://jira.jboss.org/jira/browse/JGRP-1023
Project: JGroups
Issue Type: Bug
Reporter: Bela Ban
Assignee: Bela Ban
Fix For: 2.9
S3_PING does not work on EC2. It works perfectly when run on a local box
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
https://jira.jboss.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
5:44 a.m.
New subject: [JBoss JIRA] Updated: (JGRP-1023) S3_PING: certificate exception when run on EC2
[
https://jira.jboss.org/jira/browse/JGRP-1023?page=com.atlassian.jira.plug...
]
Bela Ban updated JGRP-1023:
---------------------------
Fix Version/s: 2.10
(was: 2.9)
S3_PING: certificate exception when run on EC2
----------------------------------------------
Key: JGRP-1023
URL: https://jira.jboss.org/jira/browse/JGRP-1023
Project: JGroups
Issue Type: Bug
Reporter: Bela Ban
Assignee: Bela Ban
Fix For: 2.10
S3_PING does not work on EC2. It works perfectly when run on a local box
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
https://jira.jboss.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
5:31 a.m.
New subject: [JBoss JIRA] Updated: (JGRP-1023) S3_PING: certificate exception when run on EC2
[
https://jira.jboss.org/jira/browse/JGRP-1023?page=com.atlassian.jira.plug...
]
Bela Ban updated JGRP-1023:
---------------------------
Fix Version/s: 2.11
(was: 2.10)
S3_PING: certificate exception when run on EC2
----------------------------------------------
Key: JGRP-1023
URL: https://jira.jboss.org/jira/browse/JGRP-1023
Project: JGroups
Issue Type: Bug
Reporter: Bela Ban
Assignee: Bela Ban
Fix For: 2.11
S3_PING does not work on EC2. It works perfectly when run on a local box
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
https://jira.jboss.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
4:30 a.m.
New subject: [JBoss JIRA] Resolved: (JGRP-1023) S3_PING: certificate exception when run on EC2
[
https://jira.jboss.org/browse/JGRP-1023?page=com.atlassian.jira.plugin.sy...
]
Bela Ban resolved JGRP-1023.
----------------------------
Resolution: Cannot Reproduce Bug
S3_PING: certificate exception when run on EC2
----------------------------------------------
Key: JGRP-1023
URL: https://jira.jboss.org/browse/JGRP-1023
Project: JGroups
Issue Type: Bug
Reporter: Bela Ban
Assignee: Bela Ban
Fix For: 2.11
S3_PING does not work on EC2. It works perfectly when run on a local box
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
https://jira.jboss.org/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
5856
days inactive
6191
days old
7 comments
2 participants
participants (2)
-
Anil Saldhana (JIRA) -
Bela Ban (JIRA)