Re: HttpURLConnection throws SunCertPathBuilderException in jdk11

2018-07-24 Thread Sean Mullan 
This should be fixed in JDK 11 b23. Please try again. See 
https://bugs.openjdk.java.net/browse/JDK-8199779 for more info.


--Sean

On 6/25/18 12:28 AM, Jaikiran Pai wrote:
I couldn't locate this bug in the JIRA nor the bugs.java.net, to see if 
it's acknowledged as an issue. So FWIW - I can reproduce this even on 
MacOS (so it isn't just specific to Windows OS). This is the code:


import java.net.URL;
import java.io.InputStream;

public class CertTest {
     public static void main(final String[] args) throws Exception {
         final URL targetURL = new URL("https://api.vk.com/";);
         try (final InputStream is = 
targetURL.openConnection().getInputStream()) {

             is.read();
         }
     }
}


-Jaikiran


On 16/06/18 12:51 AM, Andrey Turbanov wrote:

Thank you for response.
I submitted bug to bugtracker. Iinternal review ID : 9055666
Didn't find a way to attach files there, but program example is short 
and can be easily run by anyone.



Andrey Turbanov.

2018-06-15 16:58 GMT+03:00 Sean Mullan >:


The 2nd (good) logfile looks like it is from a completely
different program - are you sure you are using the same code?

If it is, please rerun again and also add -Djavax.net.debug=all to
the command-line which should give a bit more debug info as to
where the issue is occurring in the TLS handshake.

I would also recommend filing a bug and attaching the logfiles so
that this is tracked and evaluated more formally:
https://bugreport.java.com/bugreport/


If this is indeed a regression, it's important that we get to the
bottom of it.

Thanks,
Sean


On 6/12/18 11:10 AM, Андрей Турбанов wrote:

2 log files attached.

Андрей Турбанов

2018-06-12 15:40 GMT+03:00 Sean Mullan mailto:sean.mul...@oracle.com> >>:


    Please add -Djava.security.debug=certpath to the java
command line
    and attach the log file. Preferably, attach 2 log files,
one for a
    good run and one for a bad run. This should help show what the
    problem is.

    --Sean

    On 6/11/18 7:59 PM, Андрей Турбанов wrote:

        Hello.
        I tried to use early jdk11 build
(http://jdk.java.net/11/) -
        Oracle JDK build for Windows.
        I got exception when my program tries to connect (via
        HttpURLConnection) to https://api.vk.com/

   
sun.security.provider.certpath.SunCertPathBuilderException:

        unable to find valid certification path to requested
target
          at
   
sun.security.provider.certpath.SunCertPathBuilder.build(SunCertPathBuilder.java:141)

        ~[?:?]
          at
   
sun.security.provider.certpath.SunCertPathBuilder.engineBuild(SunCertPathBuilder.java:126)

        ~[?:?]
          at
   
java.security.cert.CertPathBuilder.build(CertPathBuilder.java:297)

        ~[?:?]
          at
   
sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:380)

        ~[?:?]
          at
   
sun.security.validator.PKIXValidator.engineValidate(PKIXValidator.java:290)

        ~[?:?]
          at
   
sun.security.validator.Validator.validate(Validator.java:264)

~[?:?]
          at
   
sun.security.ssl.X509TrustManagerImpl.validate(X509TrustManagerImpl.java:343)

        ~[?:?]

        Same code works well with JDK 10.
        Does JDK11 have different set of SSL certificates? Is
there any
        way to allow connection to vk.com 
 ?

        Andrey Turbanov

Re: HttpURLConnection throws SunCertPathBuilderException in jdk11

2018-06-24 Thread Jaikiran Pai 
I couldn't locate this bug in the JIRA nor the bugs.java.net, to see if 
it's acknowledged as an issue. So FWIW - I can reproduce this even on 
MacOS (so it isn't just specific to Windows OS). This is the code:


import java.net.URL;
import java.io.InputStream;

public class CertTest {
    public static void main(final String[] args) throws Exception {
        final URL targetURL = new URL("https://api.vk.com/";);
        try (final InputStream is = 
targetURL.openConnection().getInputStream()) {

            is.read();
        }
    }
}


-Jaikiran


On 16/06/18 12:51 AM, Andrey Turbanov wrote:

Thank you for response.
I submitted bug to bugtracker. Iinternal review ID : 9055666
Didn't find a way to attach files there, but program example is short 
and can be easily run by anyone.



Andrey Turbanov.

2018-06-15 16:58 GMT+03:00 Sean Mullan >:


The 2nd (good) logfile looks like it is from a completely
different program - are you sure you are using the same code?

If it is, please rerun again and also add -Djavax.net.debug=all to
the command-line which should give a bit more debug info as to
where the issue is occurring in the TLS handshake.

I would also recommend filing a bug and attaching the logfiles so
that this is tracked and evaluated more formally:
https://bugreport.java.com/bugreport/


If this is indeed a regression, it's important that we get to the
bottom of it.

Thanks,
Sean


On 6/12/18 11:10 AM, Андрей Турбанов wrote:

2 log files attached.

Андрей Турбанов

2018-06-12 15:40 GMT+03:00 Sean Mullan mailto:sean.mul...@oracle.com> >>:


    Please add -Djava.security.debug=certpath to the java
command line
    and attach the log file. Preferably, attach 2 log files,
one for a
    good run and one for a bad run. This should help show what the
    problem is.

    --Sean

    On 6/11/18 7:59 PM, Андрей Турбанов wrote:

        Hello.
        I tried to use early jdk11 build
(http://jdk.java.net/11/) -
        Oracle JDK build for Windows.
        I got exception when my program tries to connect (via
        HttpURLConnection) to https://api.vk.com/

       
sun.security.provider.certpath.SunCertPathBuilderException:
        unable to find valid certification path to requested
target
          at
       

sun.security.provider.certpath.SunCertPathBuilder.build(SunCertPathBuilder.java:141)
        ~[?:?]
          at
       

sun.security.provider.certpath.SunCertPathBuilder.engineBuild(SunCertPathBuilder.java:126)
        ~[?:?]
          at
       
java.security.cert.CertPathBuilder.build(CertPathBuilder.java:297)
        ~[?:?]
          at
       
sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:380)
        ~[?:?]
          at
       

sun.security.validator.PKIXValidator.engineValidate(PKIXValidator.java:290)
        ~[?:?]
          at
       
sun.security.validator.Validator.validate(Validator.java:264)
~[?:?]
          at
       

sun.security.ssl.X509TrustManagerImpl.validate(X509TrustManagerImpl.java:343)
        ~[?:?]

        Same code works well with JDK 10.
        Does JDK11 have different set of SSL certificates? Is
there any
        way to allow connection to vk.com 
 ?

        Andrey Turbanov

Re: HttpURLConnection throws SunCertPathBuilderException in jdk11

2018-06-15 Thread Andrey Turbanov 
Thank you for response.
I submitted bug to bugtracker. Iinternal review ID : 9055666
Didn't find a way to attach files there, but program example is short and
can be easily run by anyone.


Andrey Turbanov.

2018-06-15 16:58 GMT+03:00 Sean Mullan :

> The 2nd (good) logfile looks like it is from a completely different
> program - are you sure you are using the same code?
>
> If it is, please rerun again and also add -Djavax.net.debug=all to the
> command-line which should give a bit more debug info as to where the issue
> is occurring in the TLS handshake.
>
> I would also recommend filing a bug and attaching the logfiles so that
> this is tracked and evaluated more formally:
> https://bugreport.java.com/bugreport/
>
> If this is indeed a regression, it's important that we get to the bottom
> of it.
>
> Thanks,
> Sean
>
>
> On 6/12/18 11:10 AM, Андрей Турбанов wrote:
>
>> 2 log files attached.
>>
>> Андрей Турбанов
>>
>> 2018-06-12 15:40 GMT+03:00 Sean Mullan > sean.mul...@oracle.com>>:
>>
>>
>> Please add -Djava.security.debug=certpath to the java command line
>> and attach the log file. Preferably, attach 2 log files, one for a
>> good run and one for a bad run. This should help show what the
>> problem is.
>>
>> --Sean
>>
>> On 6/11/18 7:59 PM, Андрей Турбанов wrote:
>>
>> Hello.
>> I tried to use early jdk11 build (http://jdk.java.net/11/) -
>> Oracle JDK build for Windows.
>> I got exception when my program tries to connect (via
>> HttpURLConnection) to https://api.vk.com/
>>
>> sun.security.provider.certpath.SunCertPathBuilderException:
>> unable to find valid certification path to requested target
>>   at
>> sun.security.provider.certpath.SunCertPathBuilder.build(
>> SunCertPathBuilder.java:141)
>> ~[?:?]
>>   at
>> sun.security.provider.certpath.SunCertPathBuilder.engineBuil
>> d(SunCertPathBuilder.java:126)
>> ~[?:?]
>>   at
>> java.security.cert.CertPathBuilder.build(CertPathBuilder.
>> java:297)
>> ~[?:?]
>>   at
>> sun.security.validator.PKIXValidator.doBuild(PKIXValidator.
>> java:380)
>> ~[?:?]
>>   at
>> sun.security.validator.PKIXValidator.engineValidate(PKIXVali
>> dator.java:290)
>> ~[?:?]
>>   at
>> sun.security.validator.Validator.validate(Validator.java:264)
>> ~[?:?]
>>   at
>> sun.security.ssl.X509TrustManagerImpl.validate(X509TrustMana
>> gerImpl.java:343)
>> ~[?:?]
>>
>> Same code works well with JDK 10.
>> Does JDK11 have different set of SSL certificates? Is there any
>> way to allow connection to vk.com  > >?
>>
>> Andrey Turbanov
>>
>>
>>

Re: HttpURLConnection throws SunCertPathBuilderException in jdk11

2018-06-15 Thread Sean Mullan 
The 2nd (good) logfile looks like it is from a completely different 
program - are you sure you are using the same code?


If it is, please rerun again and also add -Djavax.net.debug=all to the 
command-line which should give a bit more debug info as to where the 
issue is occurring in the TLS handshake.


I would also recommend filing a bug and attaching the logfiles so that 
this is tracked and evaluated more formally: 
https://bugreport.java.com/bugreport/


If this is indeed a regression, it's important that we get to the bottom 
of it.


Thanks,
Sean


On 6/12/18 11:10 AM, Андрей Турбанов wrote:

2 log files attached.

Андрей Турбанов

2018-06-12 15:40 GMT+03:00 Sean Mullan >:


Please add -Djava.security.debug=certpath to the java command line
and attach the log file. Preferably, attach 2 log files, one for a
good run and one for a bad run. This should help show what the
problem is.

--Sean

On 6/11/18 7:59 PM, Андрей Турбанов wrote:

Hello.
I tried to use early jdk11 build (http://jdk.java.net/11/) -
Oracle JDK build for Windows.
I got exception when my program tries to connect (via
HttpURLConnection) to https://api.vk.com/

sun.security.provider.certpath.SunCertPathBuilderException:
unable to find valid certification path to requested target
      at

sun.security.provider.certpath.SunCertPathBuilder.build(SunCertPathBuilder.java:141)
~[?:?]
      at

sun.security.provider.certpath.SunCertPathBuilder.engineBuild(SunCertPathBuilder.java:126)
~[?:?]
      at
java.security.cert.CertPathBuilder.build(CertPathBuilder.java:297)
~[?:?]
      at
sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:380)
~[?:?]
      at

sun.security.validator.PKIXValidator.engineValidate(PKIXValidator.java:290)
~[?:?]
      at
sun.security.validator.Validator.validate(Validator.java:264) ~[?:?]
      at

sun.security.ssl.X509TrustManagerImpl.validate(X509TrustManagerImpl.java:343)
~[?:?]

Same code works well with JDK 10.
Does JDK11 have different set of SSL certificates? Is there any
way to allow connection to vk.com  ?

Andrey Turbanov

Re: HttpURLConnection throws SunCertPathBuilderException in jdk11

2018-06-12 Thread Sean Mullan 
Please add -Djava.security.debug=certpath to the java command line and 
attach the log file. Preferably, attach 2 log files, one for a good run 
and one for a bad run. This should help show what the problem is.


--Sean

On 6/11/18 7:59 PM, Андрей Турбанов wrote:

Hello.
I tried to use early jdk11 build (http://jdk.java.net/11/) - Oracle JDK 
build for Windows.
I got exception when my program tries to connect (via HttpURLConnection) 
to https://api.vk.com/


sun.security.provider.certpath.SunCertPathBuilderException: unable to 
find valid certification path to requested target
     at 
sun.security.provider.certpath.SunCertPathBuilder.build(SunCertPathBuilder.java:141) 
~[?:?]
     at 
sun.security.provider.certpath.SunCertPathBuilder.engineBuild(SunCertPathBuilder.java:126) 
~[?:?]
     at 
java.security.cert.CertPathBuilder.build(CertPathBuilder.java:297) ~[?:?]
     at 
sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:380) ~[?:?]
     at 
sun.security.validator.PKIXValidator.engineValidate(PKIXValidator.java:290) 
~[?:?]

     at sun.security.validator.Validator.validate(Validator.java:264) ~[?:?]
     at 
sun.security.ssl.X509TrustManagerImpl.validate(X509TrustManagerImpl.java:343) 
~[?:?]


Same code works well with JDK 10.
Does JDK11 have different set of SSL certificates? Is there any way to 
allow connection to vk.com ?


Andrey Turbanov

HttpURLConnection throws SunCertPathBuilderException in jdk11

2018-06-12 Thread Андрей Турбанов 
Hello.
I tried to use early jdk11 build (http://jdk.java.net/11/) - Oracle JDK
build for Windows.
I got exception when my program tries to connect (via HttpURLConnection) to
https://api.vk.com/

sun.security.provider.certpath.SunCertPathBuilderException: unable to find
valid certification path to requested target
at
sun.security.provider.certpath.SunCertPathBuilder.build(SunCertPathBuilder.java:141)
~[?:?]
at
sun.security.provider.certpath.SunCertPathBuilder.engineBuild(SunCertPathBuilder.java:126)
~[?:?]
at java.security.cert.CertPathBuilder.build(CertPathBuilder.java:297)
~[?:?]
at sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:380)
~[?:?]
at
sun.security.validator.PKIXValidator.engineValidate(PKIXValidator.java:290)
~[?:?]
at sun.security.validator.Validator.validate(Validator.java:264) ~[?:?]
at
sun.security.ssl.X509TrustManagerImpl.validate(X509TrustManagerImpl.java:343)
~[?:?]

Same code works well with JDK 10.
Does JDK11 have different set of SSL certificates? Is there any way to
allow connection to vk.com?

Andrey Turbanov