That specific line in the build.xml[1] of the IvyDE project is trying to “get” the ivy.jar from a URL. In this case, it’s trying to fetch it from:
> [get] Getting: > https://builds.apache.org/job/Ivy/lastSuccessfulBuild/artifact/build/artifact/jars/ivy.jar Since it’s https backed, there’s a SSL handshake going on via this build process which is running on JRE 6 (upgrading to JRE 7 won’t solve the issue) and the builds.apache.org system while retrieving the file. It looks like as noted here [2] that builds.apache.org is presenting a certificate which JRE versions before JRE 8 don’t allow. The workaround presented in that FAQ is to switch the settings on the “server” which in this case would be builds.apache.org to use a different cipher list. I’m not sure, if we will be allowed to do that and I’m curious how other builds (not necessary Ivy project builds) that need to fetch something from builds.apache.org via https and JRE <=7 get past this currently. Either way, I think this is something that we will have to ask the Apache infra team for their inputs. [1] https://github.com/apache/ant-ivyde/blob/master/build.xml#L277 [2] http://httpd.apache.org/docs/current/ssl/ssl_faq.html#javadh -Jaikiran On 22-May-2017, at 2:04 PM, Jan Matèrne <j...@materne.de> wrote: I copied the IvyDE buildjob to have github support here. https://builds.apache.org/view/A/view/Ant/job/IvyDE-GithubPR/ I changed IvyDE and IvyDE to not use "Ant latest" instead "Ant 1.9.9", so it will work on Java<8. I started IvyDE and it gives me an error I could not interpret: https://builds.apache.org/view/A/view/Ant/job/IvyDE/lastBuild/console compute-ivy-bundle-version: [mkdir] Created dir: /home/jenkins/jenkins-slave/workspace/IvyDE/work/ivy/jar [get] Getting: <https://builds.apache.org/job/Ivy/lastSuccessfulBuild/artifact/build/artifa ct/jars/ivy.jar> https://builds.apache.org/job/Ivy/lastSuccessfulBuild/artifact/build/artifac t/jars/ivy.jar [get] To: /home/jenkins/jenkins-slave/workspace/IvyDE/work/ivy/ivy.jar [get] Error getting <https://builds.apache.org/job/Ivy/lastSuccessfulBuild/artifact/build/artifa ct/jars/ivy.jar> https://builds.apache.org/job/Ivy/lastSuccessfulBuild/artifact/build/artifac t/jars/ivy.jar to /home/jenkins/jenkins-slave/workspace/IvyDE/work/ivy/ivy.jar BUILD FAILED /home/jenkins/jenkins-slave/workspace/IvyDE/build.xml:561: The following error occurred while executing this line: /home/jenkins/jenkins-slave/workspace/IvyDE/build.xml:277: javax.net.ssl.SSLException: java.lang.RuntimeException: Could not generate DH keypair at com.sun.net.ssl.internal.ssl.Alerts.getSSLException(Alerts.java:190) at com.sun.net.ssl.internal.ssl.SSLSocketImpl.fatal(SSLSocketImpl.java:1747) at com.sun.net.ssl.internal.ssl.SSLSocketImpl.fatal(SSLSocketImpl.java:1708) at com.sun.net.ssl.internal.ssl.SSLSocketImpl.handleException(SSLSocketImpl.jav a:1691) at com.sun.net.ssl.internal.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java :1222) at com.sun.net.ssl.internal.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java :1199) at sun.net.www.protocol.https.HttpsClient.afterConnect(HttpsClient.java:434) at sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.connect(Abstra ctDelegateHttpsURLConnection.java:166) at sun.net.www.protocol.https.HttpsURLConnectionImpl.connect(HttpsURLConnection Impl.java:133) at org.apache.tools.ant.taskdefs.Get$GetThread.openConnection(Get.java:737) at org.apache.tools.ant.taskdefs.Get$GetThread.get(Get.java:650) at org.apache.tools.ant.taskdefs.Get$GetThread.run(Get.java:640) Caused by: java.lang.RuntimeException: Could not generate DH keypair at com.sun.net.ssl.internal.ssl.DHCrypt.<init>(DHCrypt.java:114) at com.sun.net.ssl.internal.ssl.ClientHandshaker.serverKeyExchange(ClientHandsh aker.java:559) at com.sun.net.ssl.internal.ssl.ClientHandshaker.processMessage(ClientHandshake r.java:186) at com.sun.net.ssl.internal.ssl.Handshaker.processLoop(Handshaker.java:593) at com.sun.net.ssl.internal.ssl.Handshaker.process_record(Handshaker.java:529) at com.sun.net.ssl.internal.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:943 ) at com.sun.net.ssl.internal.ssl.SSLSocketImpl.performInitialHandshake(SSLSocket Impl.java:1188) at com.sun.net.ssl.internal.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java :1215) ... 7 more Caused by: java.security.InvalidAlgorithmParameterException: Prime size must be multiple of 64, and can only range from 512 to 1024 (inclusive) at com.sun.crypto.provider.DHKeyPairGenerator.initialize(DashoA13*..) at java.security.KeyPairGenerator$Delegate.initialize(KeyPairGenerator.java:627 ) at com.sun.net.ssl.internal.ssl.DHCrypt.<init>(DHCrypt.java:107) ... 14 more Jan --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@ant.apache.org For additional commands, e-mail: dev-h...@ant.apache.org
