Admins have all rights to stay insist on closing as many CVSS 10 score holes in JRE as possible ;)
Gintas 2017-05-22 21:24 GMT+02:00 Jan Matèrne (jhm) <apa...@materne.de>: > I changed the buildjobs for IvyDE + IvyDE-Github to use Java7(latest). > But I prefer to use the lowest Java version we have defined as minimum. ;) > > Jan > > > -----Ursprüngliche Nachricht----- > > Von: J Pai [mailto:jai.forums2...@gmail.com] > > Gesendet: Montag, 22. Mai 2017 15:09 > > An: Ant Developers List > > Betreff: Re: Buildjob: IvyDE > > > > Is there a chance you could trigger this build to run using Java 7? I > > read up a few JIRA posts for the INFRA project in issues.apache.org and > > they seem to indicate that this probably will work fine with builds > > that use Java 7. I’m not 100% sure though. > > > > -Jaikiran > > On 22-May-2017, at 6:30 PM, J Pai <jai.forums2...@gmail.com> wrote: > > > > That specific line in the build.xml[1] of the IvyDE project is trying > > to “get” the ivy.jar from a URL. In this case, it’s trying to fetch it > > from: > > > > > [get] Getting: > > > > > https://builds.apache.org/job/Ivy/lastSuccessfulBuild/artifact/build/a > > > rtifact/jars/ivy.jar > > > > Since it’s https backed, there’s a SSL handshake going on via this > > build process which is running on JRE 6 (upgrading to JRE 7 won’t solve > > the issue) and the builds.apache.org system while retrieving the file. > > It looks like as noted here [2] that builds.apache.org is presenting a > > certificate which JRE versions before JRE 8 don’t allow. The workaround > > presented in that FAQ is to switch the settings on the “server” which > > in this case would be builds.apache.org to use a different cipher list. > > > > I’m not sure, if we will be allowed to do that and I’m curious how > > other builds (not necessary Ivy project builds) that need to fetch > > something from builds.apache.org via https and JRE <=7 get past this > > currently. Either way, I think this is something that we will have to > > ask the Apache infra team for their inputs. > > > > > > [1] https://github.com/apache/ant-ivyde/blob/master/build.xml#L277 > > [2] http://httpd.apache.org/docs/current/ssl/ssl_faq.html#javadh > > > > > > -Jaikiran > > On 22-May-2017, at 2:04 PM, Jan Matèrne <j...@materne.de> wrote: > > > > I copied the IvyDE buildjob to have github support here. > > > > https://builds.apache.org/view/A/view/Ant/job/IvyDE-GithubPR/ > > > > > > > > I changed IvyDE and IvyDE to not use "Ant latest" instead "Ant 1.9.9", > > so it will work on Java<8. > > > > > > > > I started IvyDE and it gives me an error I could not interpret: > > > > https://builds.apache.org/view/A/view/Ant/job/IvyDE/lastBuild/console > > > > > > > > compute-ivy-bundle-version: > > [mkdir] Created dir: > > /home/jenkins/jenkins-slave/workspace/IvyDE/work/ivy/jar > > [get] Getting: > > <https://builds.apache.org/job/Ivy/lastSuccessfulBuild/artifact/build/a > > rtifa > > ct/jars/ivy.jar> > > https://builds.apache.org/job/Ivy/lastSuccessfulBuild/artifact/build/ar > > tifac > > t/jars/ivy.jar > > [get] To: /home/jenkins/jenkins- > > slave/workspace/IvyDE/work/ivy/ivy.jar > > [get] Error getting > > <https://builds.apache.org/job/Ivy/lastSuccessfulBuild/artifact/build/a > > rtifa > > ct/jars/ivy.jar> > > https://builds.apache.org/job/Ivy/lastSuccessfulBuild/artifact/build/ar > > tifac > > t/jars/ivy.jar to > > /home/jenkins/jenkins-slave/workspace/IvyDE/work/ivy/ivy.jar > > > > > > > > BUILD FAILED > > /home/jenkins/jenkins-slave/workspace/IvyDE/build.xml:561: The > > following error occurred while executing this line: > > /home/jenkins/jenkins-slave/workspace/IvyDE/build.xml:277: > > javax.net.ssl.SSLException: java.lang.RuntimeException: Could not > > generate DH keypair > > at > > com.sun.net.ssl.internal.ssl.Alerts.getSSLException(Alerts.java:190) > > at > > com.sun.net.ssl.internal.ssl.SSLSocketImpl.fatal(SSLSocketImpl.java:174 > > 7) > > at > > com.sun.net.ssl.internal.ssl.SSLSocketImpl.fatal(SSLSocketImpl.java:170 > > 8) > > at > > com.sun.net.ssl.internal.ssl.SSLSocketImpl.handleException(SSLSocketImp > > l.jav > > a:1691) > > at > > com.sun.net.ssl.internal.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl > > .java > > :1222) > > at > > com.sun.net.ssl.internal.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl > > .java > > :1199) > > at > > sun.net.www.protocol.https.HttpsClient.afterConnect(HttpsClient.java:43 > > 4) > > at > > sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.connect(A > > bstra > > ctDelegateHttpsURLConnection.java:166) > > at > > sun.net.www.protocol.https.HttpsURLConnectionImpl.connect(HttpsURLConne > > ction > > Impl.java:133) > > at > > org.apache.tools.ant.taskdefs.Get$GetThread.openConnection(Get.java:737 > > ) > > at org.apache.tools.ant.taskdefs.Get$GetThread.get(Get.java:650) > > at org.apache.tools.ant.taskdefs.Get$GetThread.run(Get.java:640) > > Caused by: java.lang.RuntimeException: Could not generate DH keypair > > at com.sun.net.ssl.internal.ssl.DHCrypt.<init>(DHCrypt.java:114) > > at > > com.sun.net.ssl.internal.ssl.ClientHandshaker.serverKeyExchange(ClientH > > andsh > > aker.java:559) > > at > > com.sun.net.ssl.internal.ssl.ClientHandshaker.processMessage(ClientHand > > shake > > r.java:186) > > at > > com.sun.net.ssl.internal.ssl.Handshaker.processLoop(Handshaker.java:593 > > ) > > at > > com.sun.net.ssl.internal.ssl.Handshaker.process_record(Handshaker.java: > > 529) > > at > > com.sun.net.ssl.internal.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.jav > > a:943 > > ) > > at > > com.sun.net.ssl.internal.ssl.SSLSocketImpl.performInitialHandshake(SSLS > > ocket > > Impl.java:1188) > > at > > com.sun.net.ssl.internal.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl > > .java > > :1215) > > ... 7 more > > Caused by: java.security.InvalidAlgorithmParameterException: Prime size > > must be multiple of 64, and can only range from 512 to 1024 (inclusive) > > at > > com.sun.crypto.provider.DHKeyPairGenerator.initialize(DashoA13*..) > > at > > java.security.KeyPairGenerator$Delegate.initialize(KeyPairGenerator.jav > > a:627 > > ) > > at com.sun.net.ssl.internal.ssl.DHCrypt.<init>(DHCrypt.java:107) > > ... 14 more > > > > > > > > > > > > Jan > > > > > > > > > > --------------------------------------------------------------------- > > To unsubscribe, e-mail: dev-unsubscr...@ant.apache.org For additional > > commands, e-mail: dev-h...@ant.apache.org > > > > --------------------------------------------------------------------- > To unsubscribe, e-mail: dev-unsubscr...@ant.apache.org > For additional commands, e-mail: dev-h...@ant.apache.org > >
