I did a tcpdump, but felt it was off topic to post it here. But since you brought it up, this is what command I used and the output when I ran the following command: java GetUrls https://repo.maven.apache.org/maven2/org/apache/maven/maven-archiver/2.5/maven-archiver-2.5.pom
sudo tcpdump -ni eno1 "tcp port 443 and (tcp[((tcp[12] & 0xf0) >> 2)] = 0x16)" -vv [sudo] password for millerc: tcpdump: listening on eno1, link-type EN10MB (Ethernet), capture size 262144 bytes 14:24:28.325528 IP (tos 0x0, ttl 64, id 2230, offset 0, flags [DF], proto TCP (6), length 297) 10.XX.XXX.XXX.52022 > 146.75.36.215.https: Flags [P.], cksum 0x8708 (incorrect -> 0xb913), seq 1440532052:1440532297, ack 2840419613, win 229, options [nop,nop,TS val 1152993612 ecr 2048890113], length I see incorrect entry. -----Original Message----- From: Bernd Eckenfels <e...@zusammenkunft.net> Sent: Monday, February 21, 2022 3:36 PM To: Maven Users List <users@maven.apache.org> Subject: Re: Possible protocol error, handshake_error when using Maven ---- External E-mail --- CAUTION: This email originated from outside GDMS. Do not click links or open attachments unless you recognize the sender and know the content is safe. The exception means that the other side closed the connection with an alert message. So it is a bit hard to say why it did that (without looking in the server logfile). However the normal reasons for that is only missing agreement on protocol or cipher (not certificates). There can now be 2 problems, one is that you are not connecting to the correct server but maybe a firewall or proxy appliance. The other option is that your client (your JSSE client in Java runtime) is not supporting the usual ciphers and protocols. There could be a number of reasons (maybe FIPS hardening or modified jcl or net.properties or security.properties). I would turn on the verbose JSSE debug messages or do a tcpdump. Both should show you what the client is suggesting for protocol and ciphers in the ClientHello message. (If those look fine you need to look at the other side). Try java -Djavax.net.debug=all GetUrl Gruss Bernd -- http://bernd.eckenfels.net ________________________________ Von: christopher.mil...@gd-ms.com <christopher.mil...@gd-ms.com> Gesendet: Monday, February 21, 2022 8:32:59 PM An: Maven Users List <users@maven.apache.org> Betreff: RE: Possible protocol error, handshake_error when using Maven Sorry for the late reply, I'm still troubleshooting this and went back and re-read what was written and now understand it. I'm still getting handshake_failure when running the following command: [cmiller@gungan java]$ java GetUrls https://repo.maven.apache.org/maven2/org/apache/maven/maven-archiver/2.5/maven-archiver-2.5.pom Exception in thread "main" javax.net.ssl.SSLHandshakeException: Received fatal alert: handshake_failure at sun.security.ssl.Alert.createSSLException(Alert.java:131) at sun.security.ssl.Alert.createSSLException(Alert.java:117) at sun.security.ssl.TransportContext.fatal(TransportContext.java:311) at sun.security.ssl.Alert$AlertConsumer.consume(Alert.java:293) at sun.security.ssl.TransportContext.dispatch(TransportContext.java:185) at sun.security.ssl.SSLTransport.decode(SSLTransport.java:152) at sun.security.ssl.SSLSocketImpl.decode(SSLSocketImpl.java:1392) at sun.security.ssl.SSLSocketImpl.readHandshakeRecord(SSLSocketImpl.java:1300) at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:435) at sun.net.www.protocol.https.HttpsClient.afterConnect(HttpsClient.java:559) at sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.connect(AbstractDelegateHttpsURLConnection.java:197) at sun.net.www.protocol.http.HttpURLConnection.getInputStream0(HttpURLConnection.java:1570) at sun.net.www.protocol.http.HttpURLConnection.getInputStream(HttpURLConnection.java:1498) at java.net.HttpURLConnection.getResponseCode(HttpURLConnection.java:480) at sun.net.www.protocol.https.HttpsURLConnectionImpl.getResponseCode(HttpsURLConnectionImpl.java:352) at GetUrls.main(GetUrls.java:10) For the sake of troubleshooting, I've also done the following. Upgraded the Red Hat package ca-certificates to 2021.2.50 and still have the same issue. For Java, there is a UI Control Panel, where I unchecked both TLS 1.0 and 1.1 and still having the same issue. Thanks again to everyone for helping with this. -----Original Message----- From: Bernd Eckenfels <e...@zusammenkunft.net> Sent: Friday, February 4, 2022 2:02 PM To: Maven Users List <users@maven.apache.org> Subject: Re: Possible protocol error, handshake_error when using Maven ---- External E-mail --- CAUTION: This email originated from outside GDMS. Do not click links or open attachments unless you recognize the sender and know the content is safe. Yes that's expected. What does the next command print. -- http://bernd.eckenfels.net ________________________________ Von: christopher.mil...@gd-ms.com <christopher.mil...@gd-ms.com> Gesendet: Friday, February 4, 2022 7:39:44 PM An: Maven Users List <users@maven.apache.org> Betreff: RE: Possible protocol error, handshake_error when using Maven No output when running the following command: javac GetURLS.java Just getting GetUrls.class file. Thanks -----Original Message----- From: Bernd Eckenfels <e...@zusammenkunft.net> Sent: Friday, February 4, 2022 12:54 PM To: Maven Users List <users@maven.apache.org> Subject: Re: Possible protocol error, handshake_error when using Maven ---- External E-mail --- CAUTION: This email originated from outside GDMS. Do not click links or open attachments unless you recognize the sender and know the content is safe. The javac command creates the .class file the java command executes it (modern java also can execute the .Java file). What is the output of the last java command in your case? (You also might ask internally a developer) -- http://bernd.eckenfels.net ________________________________ Von: christopher.mil...@gd-ms.com <christopher.mil...@gd-ms.com> Gesendet: Friday, February 4, 2022 6:32:49 PM An: Maven Users List <users@maven.apache.org> Betreff: RE: Possible protocol error, handshake_error when using Maven Sorry for the late reply, busy week. I ran this on my RHEL 8 workstation, and didn't get any output, other then a new file was created, called GetUrls.class. Didn't get the output you have below. Disclosure, I'm not a software developer by trade, so bear with me. Thanks -----Original Message----- From: Nils Breunese <n...@breun.nl> Sent: Tuesday, February 1, 2022 12:13 PM To: Maven Users List <users@maven.apache.org> Subject: Re: Possible protocol error, handshake_error when using Maven ---- External E-mail --- CAUTION: This email originated from outside GDMS. Do not click links or open attachments unless you recognize the sender and know the content is safe. christopher.mil...@gd-ms.com wrote: > I was able to curl that URL along with pulling that .pom file with the > following command: > > curl -o maven-archiver-2.5.pom > https://repo.maven.apache.org/maven2/org/apache/maven/maven-archiver/2.5/maven-archiver-2.5.pom > > So I'm still at a loss where I'm experiencing this issue currently. Have you tried fetching that URL from a simple Java program to check whether your Java stack can access that URL? -- ? cat GetUrls.java import java.net.HttpURLConnection; import java.net.URL; class GetUrls { public static void main(String[] args) throws Exception { for (String arg : args) { URL url = new URL(arg); HttpURLConnection con = (HttpURLConnection) url.openConnection(); con.setRequestMethod("GET"); int status = con.getResponseCode(); System.out.println("[" + status + "] " + url); } } } ? javac GetUrls.java ? java GetUrls https://repo.maven.apache.org/maven2/org/apache/maven/maven-archiver/2.5/maven-archiver-2.5.pom [200] https://repo.maven.apache.org/maven2/org/apache/maven/maven-archiver/2.5/maven-archiver-2.5.pom -- Nils. --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscr...@maven.apache.org For additional commands, e-mail: users-h...@maven.apache.org --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscr...@maven.apache.org For additional commands, e-mail: users-h...@maven.apache.org --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscr...@maven.apache.org For additional commands, e-mail: users-h...@maven.apache.org --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscr...@maven.apache.org For additional commands, e-mail: users-h...@maven.apache.org --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscr...@maven.apache.org For additional commands, e-mail: users-h...@maven.apache.org