-
Bug
-
Resolution: Unresolved
-
Major
-
None
-
This is running on Mac OS X 10.8.4
-
Powered by SuggestiMate
Campfire recently changed their SSL configuration to a new set of preferred ciphers and this plugin randomly fails with the following exception:
ERROR: Publisher hudson.plugins.campfire.CampfireNotifier aborted due to exception
java.lang.RuntimeException: javax.net.ssl.SSLProtocolException: Server returned wrong cipher suite for session
at hudson.plugins.campfire.Campfire.post(Campfire.java:77)
at hudson.plugins.campfire.Room.speak(Room.java:29)
at hudson.plugins.campfire.CampfireNotifier.publish(CampfireNotifier.java:121)
at hudson.plugins.campfire.CampfireNotifier.perform(CampfireNotifier.java:184)
at hudson.tasks.BuildStepMonitor$3.perform(BuildStepMonitor.java:45)
at hudson.model.AbstractBuild$AbstractBuildExecution.perform(AbstractBuild.java:782)
at hudson.model.AbstractBuild$AbstractBuildExecution.performAllBuildSteps(AbstractBuild.java:754)
at hudson.model.Build$BuildExecution.post2(Build.java:183)
at hudson.model.AbstractBuild$AbstractBuildExecution.post(AbstractBuild.java:707)
at hudson.model.Run.execute(Run.java:1628)
at hudson.model.FreeStyleBuild.run(FreeStyleBuild.java:46)
at hudson.model.ResourceController.execute(ResourceController.java:88)
at hudson.model.Executor.run(Executor.java:246)
Caused by: javax.net.ssl.SSLProtocolException: Server returned wrong cipher suite for session
at com.sun.net.ssl.internal.ssl.ClientHandshaker.serverHello(ClientHandshaker.java:438)
at com.sun.net.ssl.internal.ssl.ClientHandshaker.processMessage(ClientHandshaker.java:125)
at com.sun.net.ssl.internal.ssl.Handshaker.processLoop(Handshaker.java:593)
at com.sun.net.ssl.internal.ssl.Handshaker.process_record(Handshaker.java:529)
at com.sun.net.ssl.internal.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:943)
at com.sun.net.ssl.internal.ssl.SSLSocketImpl.performInitialHandshake(SSLSocketImpl.java:1188)
at com.sun.net.ssl.internal.ssl.SSLSocketImpl.writeRecord(SSLSocketImpl.java:654)
at com.sun.net.ssl.internal.ssl.AppOutputStream.write(AppOutputStream.java:100)
at java.io.BufferedOutputStream.flushBuffer(BufferedOutputStream.java:65)
at java.io.BufferedOutputStream.flush(BufferedOutputStream.java:123)
at org.apache.commons.httpclient.methods.StringRequestEntity.writeRequest(StringRequestEntity.java:146)
at org.apache.commons.httpclient.methods.EntityEnclosingMethod.writeRequestBody(EntityEnclosingMethod.java:499)
at org.apache.commons.httpclient.HttpMethodBase.writeRequest(HttpMethodBase.java:2114)
at org.apache.commons.httpclient.HttpMethodBase.execute(HttpMethodBase.java:1096)
at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(HttpMethodDirector.java:398)
at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(HttpMethodDirector.java:171)
at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397)
at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:323)
at hudson.plugins.campfire.Campfire.post(Campfire.java:75)
... 12 more
[JENKINS-19590] Campfire Plugin failing SSL check after upgrading Jenkins to latest 1.530
Nevermind. That didn't fix it. Also tried adding to Java's cacert keystore and that didnt work either.
Seems unrelated to Mac OS X. We are running into this issue as well on Linux since upgrading Jenkins to 1.530+.
We are now unable to use the campfire plugin as non-SSL does not work for us (separate issue it seems).
I also tried adding the campfire cert to the global keystore but that did not fix the issue.
keytool -list | grep campfire
*.campfire.com, Sep 19, 2013, trustedCertEntry,
This offer is registered on FreedomSponsors (http://www.freedomsponsors.org/core/issue/352/campfire-plugin-failing-ssl-check-after-upgrading-jenkins-to-latest-1530).
If you solve it (according to the acceptance criteria described there), please register on FreedomSponsors and mark it as resolved there
I'll then check it out and gladly pay up!
Oh, and if anyone else also wants throw in a few bucks on this, you should check out FreedomSponsors!
I'm not sure if this matters, but we've tried reverting back to jenkins 1.519 as well as trying jenkins-lts (1.509.3), but the campfire plugin still gave the same error.
It appears we are mirroring each other.
I just tried the same thing (reverting to 1.509.3) and got the same error with the campfire plugin.
I got a response from 37Signals / Campfire when I inquired if there was any SSL configuration changes:
--------------------
Hi there!
Thanks for getting in touch and happy Friday!
Sorry to hear that you're having some trouble with the API. We recently changed our preferred ciphers to prefer a variant that's more secure.
If you try updating the jdk version, that should then work fine for you.
I hope this helps, but please feel free to give me a shout if you need any more help!
Have a great Friday and an awesome weekend!
Chris Joyce
37signals Customer Support
Manchester, UK (2am - 11am CST)
--------------------
I updated the JRE version from 1.6 to 1.7 (1.7.0_25-mockbuild_2013_07_01_09_31-b00) and now get this error
ERROR: Publisher hudson.plugins.campfire.CampfireNotifier aborted due to exception java.lang.RuntimeException: javax.net.ssl.SSLHandshakeException: Remote host closed connection during handshake at hudson.plugins.campfire.Campfire.post(Campfire.java:77) at hudson.plugins.campfire.Room.speak(Room.java:29) at hudson.plugins.campfire.CampfireNotifier.publish(CampfireNotifier.java:121) at hudson.plugins.campfire.CampfireNotifier.perform(CampfireNotifier.java:184) at hudson.tasks.BuildStepMonitor$3.perform(BuildStepMonitor.java:45) at hudson.model.AbstractBuild$AbstractBuildExecution.perform(AbstractBuild.java:782) at hudson.model.AbstractBuild$AbstractBuildExecution.performAllBuildSteps(AbstractBuild.java:754) at hudson.model.Build$BuildExecution.post2(Build.java:183) at hudson.model.AbstractBuild$AbstractBuildExecution.post(AbstractBuild.java:707) at hudson.model.Run.execute(Run.java:1629) at hudson.model.FreeStyleBuild.run(FreeStyleBuild.java:46) at hudson.model.ResourceController.execute(ResourceController.java:88) at hudson.model.Executor.run(Executor.java:246) Caused by: javax.net.ssl.SSLHandshakeException: Remote host closed connection during handshake at sun.security.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:946) at sun.security.ssl.SSLSocketImpl.performInitialHandshake(SSLSocketImpl.java:1312) at sun.security.ssl.SSLSocketImpl.writeRecord(SSLSocketImpl.java:702) at sun.security.ssl.AppOutputStream.write(AppOutputStream.java:122) at java.io.BufferedOutputStream.flushBuffer(BufferedOutputStream.java:82) at java.io.BufferedOutputStream.flush(BufferedOutputStream.java:140) at org.apache.commons.httpclient.methods.StringRequestEntity.writeRequest(StringRequestEntity.java:146) at org.apache.commons.httpclient.methods.EntityEnclosingMethod.writeRequestBody(EntityEnclosingMethod.java:499) at org.apache.commons.httpclient.HttpMethodBase.writeRequest(HttpMethodBase.java:2114) at org.apache.commons.httpclient.HttpMethodBase.execute(HttpMethodBase.java:1096) at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(HttpMethodDirector.java:398) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(HttpMethodDirector.java:171) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:323) at hudson.plugins.campfire.Campfire.post(Campfire.java:75) ... 12 more Caused by: java.io.EOFException: SSL peer shut down incorrectly at sun.security.ssl.InputRecord.read(InputRecord.java:482) at sun.security.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:927) ... 26 more
I haven't had a chance to update to test with the latest JDK, but feel free to let them know of what you're seeing. I had submitted my help ticket via: http://help.37signals.com/campfire/tickets/new and they were pretty responsive.
I submitted a ticket to 37 signals w/ the latest info and error using the most recent JRE/JDK. Will report back when I get a response.
Got this as a response:
I should've been more clear - the plugin itself needs to be updated. I thought you meant you were the one that created it. The plugin's authors need to update their code to take into account those new preferred ciphers.
I've little to no experience w/ Java but will look over the code to see if there is anything that I can do to fix this.
I updated from openjdk 1.6 to 1.7 (on Centos6.4). After a restart that seems to have fixed the issue, for me, but we'll see.
I think they may have set a shorter timeout for the ssl handshake. If that is possible? I did some debugging with openssl:
openssl s_client -connect compendiumsoftarellc.campfirenow.com:443
Sometimes if my network was slow enough I would see a similar message to the StackTrace above. And now that I'm testing with a different VM its also off hours so I don't have 100% confidence that this is fixed.
A shorter timeout would certainly explain why I'm seeing it sometimes randomly working.
^ Reiterating what both Stephen and Toland said, a message will very infrequently slip thru to campfire as I've been testing today.
Not sure if this helps but I turned on debugging. Here are the relevant messages that get spit out when campfire access is attempted.
Ignoring unsupported cipher suite: TLS_DHE_DSS_WITH_AES_128_CBC_SHA256 Ignoring unsupported cipher suite: TLS_DHE_DSS_WITH_AES_256_CBC_SHA256 Ignoring unsupported cipher suite: TLS_DHE_RSA_WITH_AES_128_CBC_SHA256 Ignoring unsupported cipher suite: TLS_ECDH_RSA_WITH_AES_128_CBC_SHA256 Ignoring unsupported cipher suite: TLS_DHE_RSA_WITH_AES_256_CBC_SHA256 Ignoring unsupported cipher suite: TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 Ignoring unsupported cipher suite: TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA384 Ignoring unsupported cipher suite: TLS_RSA_WITH_AES_256_CBC_SHA256 Ignoring unsupported cipher suite: TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 Ignoring unsupported cipher suite: TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384 Ignoring unsupported cipher suite: TLS_ECDH_RSA_WITH_AES_256_CBC_SHA384 Ignoring unsupported cipher suite: TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256 Ignoring unsupported cipher suite: TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA256 Ignoring unsupported cipher suite: TLS_RSA_WITH_AES_128_CBC_SHA256 Allow unsafe renegotiation: true Allow legacy hello messages: true Is initial handshake: true Is secure renegotiation: false Handling POST /configSubmit : RequestHandlerThread[#13], setSoTimeout(0) called Handling POST /configSubmit : RequestHandlerThread[#13], setSoTimeout(0) called %% No cached client session *** ClientHello, TLSv1 RandomCookie: GMT: 1379661947 bytes = { 184, 192, 47, 254, 65, 179, 153, 244, 222, 107, 46, 190, 201, 2, 183, 140, 121, 70, 73, 116, 128, 67, 142, 209, 8, 184, 227, 173 } Session ID: {} Cipher Suites: [TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA, TLS_RSA_WITH_AES_256_CBC_SHA, TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA, TLS_ECDH_RSA_WITH_AES_256_CBC_SHA, TLS_DHE_RSA_WITH_AES_256_CBC_SHA, TLS_DHE_DSS_WITH_AES_256_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_AES_128_CBC_SHA, TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA, TLS_ECDH_RSA_WITH_AES_128_CBC_SHA, TLS_DHE_RSA_WITH_AES_128_CBC_SHA, TLS_DHE_DSS_WITH_AES_128_CBC_SHA, TLS_ECDHE_ECDSA_WITH_RC4_128_SHA, TLS_ECDHE_RSA_WITH_RC4_128_SHA, SSL_RSA_WITH_RC4_128_SHA, TLS_ECDH_ECDSA_WITH_RC4_128_SHA, TLS_ECDH_RSA_WITH_RC4_128_SHA, TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA, TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA, SSL_RSA_WITH_3DES_EDE_CBC_SHA, TLS_ECDH_ECDSA_WITH_3DES_EDE_CBC_SHA, TLS_ECDH_RSA_WITH_3DES_EDE_CBC_SHA, SSL_DHE_RSA_WITH_3DES_EDE_CBC_SHA, SSL_DHE_DSS_WITH_3DES_EDE_CBC_SHA, SSL_RSA_WITH_RC4_128_MD5, TLS_EMPTY_RENEGOTIATION_INFO_SCSV] Compression Methods: { 0 } Extension elliptic_curves, curve names: {secp256r1, sect163k1, sect163r2, secp192r1, secp224r1, sect233k1, sect233r1, sect283k1, sect283r1, secp384r1, sect409k1, sect409r1, secp521r1, sect571k1, sect571r1, secp160k1, secp160r1, secp160r2, sect163r1, secp192k1, sect193r1, sect193r2, secp224k1, sect239k1, secp256k1} Extension ec_point_formats, formats: [uncompressed] Extension server_name, server_name: [host_name: bytethebits.campfirenow.com] *** [write] MD5 and SHA1 hashes: len = 199 0000: 01 00 00 C3 03 01 52 3C F8 7B B8 C0 2F FE 41 B3 ......R<..../.A. 0010: 99 F4 DE 6B 2E BE C9 02 B7 8C 79 46 49 74 80 43 ...k......yFIt.C 0020: 8E D1 08 B8 E3 AD 00 00 38 C0 0A C0 14 00 35 C0 ........8.....5. 0030: 05 C0 0F 00 39 00 38 C0 09 C0 13 00 2F C0 04 C0 ....9.8...../... 0040: 0E 00 33 00 32 C0 07 C0 11 00 05 C0 02 C0 0C C0 ..3.2........... 0050: 08 C0 12 00 0A C0 03 C0 0D 00 16 00 13 00 04 00 ................ 0060: FF 01 00 00 62 00 0A 00 34 00 32 00 17 00 01 00 ....b...4.2..... 0070: 03 00 13 00 15 00 06 00 07 00 09 00 0A 00 18 00 ................ 0080: 0B 00 0C 00 19 00 0D 00 0E 00 0F 00 10 00 11 00 ................ 0090: 02 00 12 00 04 00 05 00 14 00 08 00 16 00 0B 00 ................ 00A0: 02 01 00 00 00 00 20 00 1E 00 00 1B 62 79 74 65 ...... .....byte 00B0: 74 68 65 62 69 74 73 2E 63 61 6D 70 66 69 72 65 thebits.campfire 00C0: 6E 6F 77 2E 63 6F 6D now.com Handling POST /configSubmit : RequestHandlerThread[#13], WRITE: TLSv1 Handshake, length = 199 [Raw write]: length = 204 0000: 16 03 01 00 C7 01 00 00 C3 03 01 52 3C F8 7B B8 ...........R<... 0010: C0 2F FE 41 B3 99 F4 DE 6B 2E BE C9 02 B7 8C 79 ./.A....k......y 0020: 46 49 74 80 43 8E D1 08 B8 E3 AD 00 00 38 C0 0A FIt.C........8.. 0030: C0 14 00 35 C0 05 C0 0F 00 39 00 38 C0 09 C0 13 ...5.....9.8.... 0040: 00 2F C0 04 C0 0E 00 33 00 32 C0 07 C0 11 00 05 ./.....3.2...... 0050: C0 02 C0 0C C0 08 C0 12 00 0A C0 03 C0 0D 00 16 ................ 0060: 00 13 00 04 00 FF 01 00 00 62 00 0A 00 34 00 32 .........b...4.2 0070: 00 17 00 01 00 03 00 13 00 15 00 06 00 07 00 09 ................ 0080: 00 0A 00 18 00 0B 00 0C 00 19 00 0D 00 0E 00 0F ................ 0090: 00 10 00 11 00 02 00 12 00 04 00 05 00 14 00 08 ................ 00A0: 00 16 00 0B 00 02 01 00 00 00 00 20 00 1E 00 00 ........... .... 00B0: 1B 62 79 74 65 74 68 65 62 69 74 73 2E 63 61 6D .bytethebits.cam 00C0: 70 66 69 72 65 6E 6F 77 2E 63 6F 6D pfirenow.com Handling POST /configSubmit : RequestHandlerThread[#13], received EOFException: error Handling POST /configSubmit : RequestHandlerThread[#13], handling exception: javax.net.ssl.SSLHandshakeException: Remote host closed connection during handshake Handling POST /configSubmit : RequestHandlerThread[#13], SEND TLSv1 ALERT: fatal, description = handshake_failure Handling POST /configSubmit : RequestHandlerThread[#13], WRITE: TLSv1 Alert, length = 2 [Raw write]: length = 7 0000: 15 03 01 00 02 02 28 ......( Handling POST /configSubmit : RequestHandlerThread[#13], called closeSocket() Handling POST /configSubmit : RequestHandlerThread[#13], called close() Handling POST /configSubmit : RequestHandlerThread[#13], called closeInternal(true) Handling POST /configSubmit : RequestHandlerThread[#13], called close() Handling POST /configSubmit : RequestHandlerThread[#13], called closeInternal(true) Handling POST /configSubmit : RequestHandlerThread[#13], called close() Handling POST /configSubmit : RequestHandlerThread[#13], called closeInternal(true) Sep 20, 2013 9:38:03 PM hudson.plugins.campfire.DescriptorImpl configure WARNING: Failed to initialize campfire notifier - check your global campfire notifier configuration settings: javax.net.ssl.SSLHandshakeException: Remote host closed connection during handshake java.lang.RuntimeException: javax.net.ssl.SSLHandshakeException: Remote host closed connection during handshake at hudson.plugins.campfire.Campfire.get(Campfire.java:92) at hudson.plugins.campfire.Campfire.getRooms(Campfire.java:106) at hudson.plugins.campfire.Campfire.findRoomByName(Campfire.java:143) at hudson.plugins.campfire.CampfireNotifier.initialize(CampfireNotifier.java:159) at hudson.plugins.campfire.CampfireNotifier.<init>(CampfireNotifier.java:66) at hudson.plugins.campfire.DescriptorImpl.configure(DescriptorImpl.java:103) at jenkins.model.Jenkins.configureDescriptor(Jenkins.java:2776) at jenkins.model.Jenkins.doConfigSubmit(Jenkins.java:2739) at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57) at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) at java.lang.reflect.Method.invoke(Method.java:606) at org.kohsuke.stapler.Function$InstanceFunction.invoke(Function.java:297) at org.kohsuke.stapler.Function.bindAndInvoke(Function.java:160) at org.kohsuke.stapler.Function.bindAndInvokeAndServeResponse(Function.java:95) at org.kohsuke.stapler.MetaClass$1.doDispatch(MetaClass.java:111) at org.kohsuke.stapler.NameBasedDispatcher.dispatch(NameBasedDispatcher.java:53) at org.kohsuke.stapler.Stapler.tryInvoke(Stapler.java:685) at org.kohsuke.stapler.Stapler.invoke(Stapler.java:799) at org.kohsuke.stapler.Stapler.invoke(Stapler.java:587) at org.kohsuke.stapler.Stapler.service(Stapler.java:218) at javax.servlet.http.HttpServlet.service(HttpServlet.java:45) at winstone.ServletConfiguration.execute(ServletConfiguration.java:248) at winstone.RequestDispatcher.forward(RequestDispatcher.java:333) at winstone.RequestDispatcher.doFilter(RequestDispatcher.java:376) at hudson.util.PluginServletFilter$1.doFilter(PluginServletFilter.java:96) at hudson.util.PluginServletFilter.doFilter(PluginServletFilter.java:88) at winstone.FilterConfiguration.execute(FilterConfiguration.java:194) at winstone.RequestDispatcher.doFilter(RequestDispatcher.java:366) at hudson.security.csrf.CrumbFilter.doFilter(CrumbFilter.java:48) at winstone.FilterConfiguration.execute(FilterConfiguration.java:194) at winstone.RequestDispatcher.doFilter(RequestDispatcher.java:366) at hudson.security.ChainedServletFilter$1.doFilter(ChainedServletFilter.java:84) at hudson.security.UnwrapSecurityExceptionFilter.doFilter(UnwrapSecurityExceptionFilter.java:51) at hudson.security.ChainedServletFilter$1.doFilter(ChainedServletFilter.java:87) at jenkins.security.ExceptionTranslationFilter.doFilter(ExceptionTranslationFilter.java:117) at hudson.security.ChainedServletFilter$1.doFilter(ChainedServletFilter.java:87) at org.acegisecurity.providers.anonymous.AnonymousProcessingFilter.doFilter(AnonymousProcessingFilter.java:125) at hudson.security.ChainedServletFilter$1.doFilter(ChainedServletFilter.java:87) at org.acegisecurity.ui.rememberme.RememberMeProcessingFilter.doFilter(RememberMeProcessingFilter.java:142) at hudson.security.ChainedServletFilter$1.doFilter(ChainedServletFilter.java:87) at org.acegisecurity.ui.AbstractProcessingFilter.doFilter(AbstractProcessingFilter.java:271) at hudson.security.ChainedServletFilter$1.doFilter(ChainedServletFilter.java:87) at org.acegisecurity.ui.basicauth.BasicProcessingFilter.doFilter(BasicProcessingFilter.java:174) at hudson.security.ChainedServletFilter$1.doFilter(ChainedServletFilter.java:87) at jenkins.security.ApiTokenFilter.doFilter(ApiTokenFilter.java:64) at hudson.security.ChainedServletFilter$1.doFilter(ChainedServletFilter.java:87) at org.acegisecurity.context.HttpSessionContextIntegrationFilter.doFilter(HttpSessionContextIntegrationFilter.java:249) at hudson.security.HttpSessionContextIntegrationFilter2.doFilter(HttpSessionContextIntegrationFilter2.java:67) at hudson.security.ChainedServletFilter$1.doFilter(ChainedServletFilter.java:87) at hudson.security.ChainedServletFilter.doFilter(ChainedServletFilter.java:76) at hudson.security.HudsonFilter.doFilter(HudsonFilter.java:164) at winstone.FilterConfiguration.execute(FilterConfiguration.java:194) at winstone.RequestDispatcher.doFilter(RequestDispatcher.java:366) at org.kohsuke.stapler.compression.CompressionFilter.doFilter(CompressionFilter.java:46) at winstone.FilterConfiguration.execute(FilterConfiguration.java:194) at winstone.RequestDispatcher.doFilter(RequestDispatcher.java:366) at hudson.util.CharacterEncodingFilter.doFilter(CharacterEncodingFilter.java:81) at winstone.FilterConfiguration.execute(FilterConfiguration.java:194) at winstone.RequestDispatcher.doFilter(RequestDispatcher.java:366) at winstone.RequestDispatcher.forward(RequestDispatcher.java:331) at winstone.RequestHandlerThread.processRequest(RequestHandlerThread.java:227) at winstone.RequestHandlerThread.run(RequestHandlerThread.java:150) at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:471) at java.util.concurrent.FutureTask$Sync.innerRun(FutureTask.java:334) at java.util.concurrent.FutureTask.run(FutureTask.java:166) at winstone.BoundedExecutorService$1.run(BoundedExecutorService.java:77) at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1145) at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615) at java.lang.Thread.run(Thread.java:724) Caused by: javax.net.ssl.SSLHandshakeException: Remote host closed connection during handshake at sun.security.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:946) at sun.security.ssl.SSLSocketImpl.performInitialHandshake(SSLSocketImpl.java:1312) at sun.security.ssl.SSLSocketImpl.writeRecord(SSLSocketImpl.java:702) at sun.security.ssl.AppOutputStream.write(AppOutputStream.java:122) at java.io.BufferedOutputStream.flushBuffer(BufferedOutputStream.java:82) at java.io.BufferedOutputStream.flush(BufferedOutputStream.java:140) at org.apache.commons.httpclient.HttpConnection.flushRequestOutputStream(HttpConnection.java:828) at org.apache.commons.httpclient.HttpMethodBase.writeRequest(HttpMethodBase.java:2116) at org.apache.commons.httpclient.HttpMethodBase.execute(HttpMethodBase.java:1096) at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(HttpMethodDirector.java:398) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(HttpMethodDirector.java:171) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:323) at hudson.plugins.campfire.Campfire.get(Campfire.java:88) ... 69 more Caused by: java.io.EOFException: SSL peer shut down incorrectly at sun.security.ssl.InputRecord.read(InputRecord.java:482) at sun.security.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:927) ... 82 more
When the openssl client connects successfully relevant session info is:
SSL handshake has read 3314 bytes and written 438 bytes
—
New, TLSv1/SSLv3, Cipher is AES128-SHA
Server public key is 2048 bit
Secure Renegotiation IS supported
Compression: NONE
Expansion: NONE
I'm not sure if/what AES128-SHA matches up to in the above java cipher suites
openssl s_client -connect compendiumsoftarellc.campfirenow.com:443 -debug
CONNECTED(00000003) write to 0x8a8b40 [0x8aa800] (112 bytes => 112 (0x70)) 0000 - 16 03 01 00 6b 01 00 00-67 03 01 52 3c fb 71 e1 ....k...g..R<.q. 0010 - 14 bc 95 61 be 5d 33 3e-ea c5 4e 43 49 96 d1 7a ...a.]3>..NCI..z 0020 - 37 10 7c 37 83 2b 43 ab-5f 01 f5 00 00 3a 00 39 7.|7.+C._....:.9 0030 - 00 38 00 88 00 87 00 35-00 84 00 16 00 13 00 0a .8.....5........ 0040 - 00 33 00 32 00 9a 00 99-00 45 00 44 00 2f 00 96 .3.2.....E.D./.. 0050 - 00 41 00 05 00 04 00 15-00 12 00 09 00 14 00 11 .A.............. 0060 - 00 08 00 06 00 03 00 ff-01 00 00 04 00 23 .............# 0070 - <SPACES/NULS> read from 0x8a8b40 [0x8afd60] (7 bytes => 7 (0x7)) 0000 - 16 03 01 00 51 02 ....Q. 0007 - <SPACES/NULS> read from 0x8a8b40 [0x8afd6a] (79 bytes => 79 (0x4F)) 0000 - 00 4d 03 01 6e a2 f7 f3-e1 3d 90 b4 4c c5 c0 12 .M..n....=..L... 0010 - 57 d3 64 53 7d d1 89 31-78 cb 13 03 7c a1 e0 8b W.dS}..1x...|... 0020 - c3 dd e1 c2 20 83 80 f0-fd 7f 64 64 05 69 45 85 .... .....dd.iE. 0030 - d3 a5 ec af 25 f3 28 7b-8f 50 f3 76 86 c6 84 83 ....%.({.P.v.... 0040 - 2c 88 8f 38 bf 00 2f 00-00 05 ff 01 00 01 ,..8../....... 004f - <SPACES/NULS> read from 0x8a8b40 [0x8afd63] (5 bytes => 5 (0x5)) 0000 - 16 03 01 0c 53 ....S read from 0x8a8b40 [0x8afd68] (3155 bytes => 3155 (0xC53)) 0000 - 0b 00 0c 4f 00 0c 4c 00-04 e9 30 82 04 e5 30 82 ...O..L...0...0. 0010 - 03 cd a0 03 02 01 02 02-03 04 84 41 30 0d 06 09 ...........A0... 0020 - 2a 86 48 86 f7 0d 01 01-05 05 00 30 3c 31 0b 30 *.H........0<1.0 0030 - 09 06 03 55 04 06 13 02-55 53 31 17 30 15 06 03 ...U....US1.0... 0040 - 55 04 0a 13 0e 47 65 6f-54 72 75 73 74 2c 20 49 U....GeoTrust, I 0050 - 6e 63 2e 31 14 30 12 06-03 55 04 03 13 0b 52 61 nc.1.0...U....Ra 0060 - 70 69 64 53 53 4c 20 43-41 30 1e 17 0d 31 31 31 pidSSL CA0...111 0070 - 32 32 34 31 35 34 30 31-33 5a 17 0d 31 34 30 31 224154013Z..1401 0080 - 32 35 31 39 35 32 34 34-5a 30 81 e9 31 29 30 27 25195244Z0..1)0' 0090 - 06 03 55 04 05 13 20 4a-6f 47 6f 7a 49 4a 6d 5a ..U... JoGozIJmZ 00a0 - 77 68 74 76 48 52 51 43-75 59 45 4d 76 77 62 65 whtvHRQCuYEMvwbe 00b0 - 36 41 59 71 63 6a 52 31-0b 30 09 06 03 55 04 06 6AYqcjR1.0...U.. 00c0 - 13 02 55 53 31 1a 30 18-06 03 55 04 0a 0c 11 2a ..US1.0...U....* 00d0 - 2e 63 61 6d 70 66 69 72-65 6e 6f 77 2e 63 6f 6d .campfirenow.com 00e0 - 31 13 30 11 06 03 55 04-0b 13 0a 47 54 32 33 30 1.0...U....GT230 00f0 - 33 36 37 38 35 31 31 30-2f 06 03 55 04 0b 13 28 36785110/..U...( 0100 - 53 65 65 20 77 77 77 2e-72 61 70 69 64 73 73 6c See www.rapidssl 0110 - 2e 63 6f 6d 2f 72 65 73-6f 75 72 63 65 73 2f 63 .com/resources/c 0120 - 70 73 20 28 63 29 31 31-31 2f 30 2d 06 03 55 04 ps (c)111/0-..U. 0130 - 0b 13 26 44 6f 6d 61 69-6e 20 43 6f 6e 74 72 6f ..&Domain Contro 0140 - 6c 20 56 61 6c 69 64 61-74 65 64 20 2d 20 52 61 l Validated - Ra 0150 - 70 69 64 53 53 4c 28 52-29 31 1a 30 18 06 03 55 pidSSL(R)1.0...U 0160 - 04 03 0c 11 2a 2e 63 61-6d 70 66 69 72 65 6e 6f ....*.campfireno 0170 - 77 2e 63 6f 6d 30 82 01-22 30 0d 06 09 2a 86 48 w.com0.."0...*.H 0180 - 86 f7 0d 01 01 01 05 00-03 82 01 0f 00 30 82 01 .............0.. 0190 - 0a 02 82 01 01 00 bd 1e-a9 86 c6 70 6a 56 de 25 ...........pjV.% 01a0 - 51 64 f1 77 26 ef 6e 06-ac ab d7 25 8b d2 70 ad Qd.w&.n....%..p. 01b0 - f7 bf d9 6e 58 19 3c 4d-0e b0 3c 2f e1 2f ed c2 ...nX.<M..</./.. 01c0 - b4 54 be 44 f6 75 35 64-57 5b 50 d3 15 aa 6c a8 .T.D.u5dW[P...l. 01d0 - 6b ef 17 d1 84 b9 d3 46-e3 30 89 6a 9f 2a 37 99 k......F.0.j.*7. 01e0 - 4d 2c 34 5a 63 21 ef cd-31 4f ba fb 79 71 50 b1 M,4Zc!..1O..yqP. 01f0 - 5f 1c 97 50 a2 7c 79 9f-9a 29 0e 78 ac ff da 99 _..P.|y..).x.... 0200 - e0 bf 51 0c ff d6 9f 31-c3 61 f9 c9 5d 20 e4 13 ..Q....1.a..] .. 0210 - 2e 02 64 2f 55 f1 bb 9e-e8 d1 7f e4 9c b6 4a 03 ..d/U.........J. 0220 - 99 cf 84 d2 00 90 d9 0e-df 37 57 03 c2 66 a6 48 .........7W..f.H 0230 - 5f 6f 26 92 c2 94 b1 7a-e5 3c d0 42 35 61 62 8c _o&....z.<.B5ab. 0240 - 31 b7 56 d9 b2 e6 f9 35-de ef 68 52 d8 c6 2f e6 1.V....5..hR../. 0250 - 27 a0 1e 27 4d 61 7f 01-bd a1 e2 c8 be 6a 7d b2 '..'Ma.......j}. 0260 - 44 54 bb a2 5e 28 d3 1d-c1 31 89 c6 e9 a9 f6 0a DT..^(...1...... 0270 - 01 4b 0b 11 e2 c5 a2 04-e5 b9 b0 22 c6 e6 b7 37 .K........."...7 0280 - db 9c 36 52 e7 0a 9d fd-23 c4 83 f5 f5 a3 5d ab ..6R....#.....]. 0290 - 15 a7 a5 90 0d 23 02 03-01 00 01 a3 82 01 40 30 .....#........@0 02a0 - 82 01 3c 30 1f 06 03 55-1d 23 04 18 30 16 80 14 ..<0...U.#..0... 02b0 - 6b 69 3d 6a 18 42 4a dd-8f 02 65 39 fd 35 24 86 ki=j.BJ...e9.5$. 02c0 - 78 91 16 30 30 0e 06 03-55 1d 0f 01 01 ff 04 04 x..00...U....... 02d0 - 03 02 05 a0 30 1d 06 03-55 1d 25 04 16 30 14 06 ....0...U.%..0.. 02e0 - 08 2b 06 01 05 05 07 03-01 06 08 2b 06 01 05 05 .+.........+.... 02f0 - 07 03 02 30 2d 06 03 55-1d 11 04 26 30 24 82 11 ...0-..U...&0$.. 0300 - 2a 2e 63 61 6d 70 66 69-72 65 6e 6f 77 2e 63 6f *.campfirenow.co 0310 - 6d 82 0f 63 61 6d 70 66-69 72 65 6e 6f 77 2e 63 m..campfirenow.c 0320 - 6f 6d 30 43 06 03 55 1d-1f 04 3c 30 3a 30 38 a0 om0C..U...<0:08. 0330 - 36 a0 34 86 32 68 74 74-70 3a 2f 2f 72 61 70 69 6.4.2http://rapi 0340 - 64 73 73 6c 2d 63 72 6c-2e 67 65 6f 74 72 75 73 dssl-crl.geotrus 0350 - 74 2e 63 6f 6d 2f 63 72-6c 73 2f 72 61 70 69 64 t.com/crls/rapid 0360 - 73 73 6c 2e 63 72 6c 30-1d 06 03 55 1d 0e 04 16 ssl.crl0...U.... 0370 - 04 14 c7 02 d8 44 ab 8a-42 67 e6 52 76 aa 3d d2 .....D..Bg.Rv.=. 0380 - fd bb f7 ad 2b 91 30 0c-06 03 55 1d 13 01 01 ff ....+.0...U..... 0390 - 04 02 30 00 30 49 06 08-2b 06 01 05 05 07 01 01 ..0.0I..+....... 03a0 - 04 3d 30 3b 30 39 06 08-2b 06 01 05 05 07 30 02 .=0;09..+.....0. 03b0 - 86 2d 68 74 74 70 3a 2f-2f 72 61 70 69 64 73 73 .-http://rapidss 03c0 - 6c 2d 61 69 61 2e 67 65-6f 74 72 75 73 74 2e 63 l-aia.geotrust.c 03d0 - 6f 6d 2f 72 61 70 69 64-73 73 6c 2e 63 72 74 30 om/rapidssl.crt0 03e0 - 0d 06 09 2a 86 48 86 f7-0d 01 01 05 05 00 03 82 ...*.H.......... 03f0 - 01 01 00 2e 5f 86 3d ad-2a 60 f6 43 e6 95 9b f0 ...._.=.*`.C.... 0400 - ca 25 29 04 35 87 b8 d3-98 45 02 49 a7 d8 f7 61 .%).5....E.I...a 0410 - 55 da 2f d0 e6 08 01 04-37 a4 2f 87 cc 52 36 6f U./.....7./..R6o 0420 - 3b 38 ec 08 ba 3f 80 09-2f e4 77 b4 ba e0 93 a0 ;8...?../.w..... 0430 - 27 4f e6 b1 10 70 25 e1-07 41 7b f9 e1 43 31 e8 'O...p%..A{..C1. 0440 - e4 a2 85 61 61 5b 75 36-93 e2 8c 8f fa 37 02 3f ...aa[u6.....7.? 0450 - 3b 24 19 6c c4 ba 85 0e-1e 73 6e f7 8f 04 e0 28 ;$.l.....sn....( 0460 - 50 f4 19 aa 79 65 b6 6e-ac 9a ac d6 03 16 be 69 P...ye.n.......i 0470 - 21 a4 4b 3e f2 f5 c3 8c-2b 78 bd fe b0 47 cd 9a !.K>....+x...G.. 0480 - 4e d8 49 93 4f 83 9b 26-5c 68 9c b7 59 24 a0 c7 N.I.O..&\h..Y$.. 0490 - 3d 7e d9 a1 da 1c 77 af-40 71 39 bd 19 16 c5 3b =~....w.@q9....; 04a0 - 38 92 0f b3 ab 47 17 f6-92 7e 8d ba e3 33 fc cc 8....G...~...3.. 04b0 - 9a 19 1a 90 5b 12 55 c4-dd a7 b7 2c d3 81 f5 cf ....[.U....,.... 04c0 - b5 e5 df 22 7e 65 23 90-a2 3b 62 87 b6 cf 4f 95 ..."~e#..;b...O. 04d0 - 93 d4 a8 14 9d 2a 59 73-7f 94 49 6c af 51 e0 76 .....*Ys..Il.Q.v 04e0 - 10 8c a8 92 be dc 7e 15-59 6f 88 e7 38 10 99 1d ......~.Yo..8... 04f0 - b7 89 ee 00 03 d9 30 82-03 d5 30 82 02 bd a0 03 ......0...0..... 0500 - 02 01 02 02 03 02 36 d1-30 0d 06 09 2a 86 48 86 ......6.0...*.H. 0510 - f7 0d 01 01 05 05 00 30-42 31 0b 30 09 06 03 55 .......0B1.0...U 0520 - 04 06 13 02 55 53 31 16-30 14 06 03 55 04 0a 13 ....US1.0...U... 0530 - 0d 47 65 6f 54 72 75 73-74 20 49 6e 63 2e 31 1b .GeoTrust Inc.1. 0540 - 30 19 06 03 55 04 03 13-12 47 65 6f 54 72 75 73 0...U....GeoTrus 0550 - 74 20 47 6c 6f 62 61 6c-20 43 41 30 1e 17 0d 31 t Global CA0...1 0560 - 30 30 32 31 39 32 32 34-35 30 35 5a 17 0d 32 30 00219224505Z..20 0570 - 30 32 31 38 32 32 34 35-30 35 5a 30 3c 31 0b 30 0218224505Z0<1.0 0580 - 09 06 03 55 04 06 13 02-55 53 31 17 30 15 06 03 ...U....US1.0... 0590 - 55 04 0a 13 0e 47 65 6f-54 72 75 73 74 2c 20 49 U....GeoTrust, I 05a0 - 6e 63 2e 31 14 30 12 06-03 55 04 03 13 0b 52 61 nc.1.0...U....Ra 05b0 - 70 69 64 53 53 4c 20 43-41 30 82 01 22 30 0d 06 pidSSL CA0.."0.. 05c0 - 09 2a 86 48 86 f7 0d 01-01 01 05 00 03 82 01 0f .*.H............ 05d0 - 00 30 82 01 0a 02 82 01-01 00 c7 71 f8 56 c7 1e .0.........q.V.. 05e0 - d9 cc b5 ad f6 b4 97 a3-fb a1 e6 0b 50 5f 50 aa ............P_P. 05f0 - 3a da 0f fc 3d 29 24 43-c6 10 29 c1 fc 55 40 72 :...=)$C..)..U@r 0600 - ee bd ea df 9f b6 41 f4-48 4b c8 6e fe 4f 57 12 ......A.HK.n.OW. 0610 - 8b 5b fa 92 dd 5e e8 ad-f3 f0 1b b1 7b 4d fb cf .[...^......{M.. 0620 - fd d1 e5 f8 e3 dc e7 f5-73 7f df 01 49 cf 8c 56 ........s...I..V 0630 - c1 bd 37 e3 5b be b5 4f-8b 8b f0 da 4f c7 e3 dd ..7.[..O....O... 0640 - 55 47 69 df f2 5b 7b 07-4f 3d e5 ac 21 c1 c8 1d UGi..[{.O=..!... 0650 - 7a e8 e7 f6 0f a1 aa f5-6f de a8 65 4f 10 89 9c z.......o..eO... 0660 - 03 f3 89 7a a5 5e 01 72-33 ed a9 e9 5a 1e 79 f3 ...z.^.r3...Z.y. 0670 - 87 c8 df c8 c5 fc 37 c8-9a 9a d7 b8 76 cc b0 3e ......7.....v..> 0680 - e7 fd e6 54 ea df 5f 52-41 78 59 57 ad f1 12 d6 ...T.._RAxYW.... 0690 - 7f bc d5 9f 70 d3 05 6c-fa a3 7d 67 58 dd 26 62 ....p..l..}gX.&b 06a0 - 1d 31 92 0c 79 79 1c 8e-cf ca 7b c1 66 af a8 74 .1..yy....{.f..t 06b0 - 48 fb 8e 82 c2 9e 2c 99-5c 7b 2d 5d 9b bc 5b 57 H.....,.\{-]..[W 06c0 - 9e 7c 3a 7a 13 ad f2 a3-18 5b 2b 59 0f cd 5c 3a .|:z.....[+Y..\: 06d0 - eb 68 33 c6 28 1d 82 d1-50 8b 02 03 01 00 01 a3 .h3.(...P....... 06e0 - 81 d9 30 81 d6 30 0e 06-03 55 1d 0f 01 01 ff 04 ..0..0...U...... 06f0 - 04 03 02 01 06 30 1d 06-03 55 1d 0e 04 16 04 14 .....0...U...... 0700 - 6b 69 3d 6a 18 42 4a dd-8f 02 65 39 fd 35 24 86 ki=j.BJ...e9.5$. 0710 - 78 91 16 30 30 1f 06 03-55 1d 23 04 18 30 16 80 x..00...U.#..0.. 0720 - 14 c0 7a 98 68 8d 89 fb-ab 05 64 0c 11 7d aa 7d ..z.h.....d..}.} 0730 - 65 b8 ca cc 4e 30 12 06-03 55 1d 13 01 01 ff 04 e...N0...U...... 0740 - 08 30 06 01 01 ff 02 01-00 30 3a 06 03 55 1d 1f .0.......0:..U.. 0750 - 04 33 30 31 30 2f a0 2d-a0 2b 86 29 68 74 74 70 .3010/.-.+.)http 0760 - 3a 2f 2f 63 72 6c 2e 67-65 6f 74 72 75 73 74 2e ://crl.geotrust. 0770 - 63 6f 6d 2f 63 72 6c 73-2f 67 74 67 6c 6f 62 61 com/crls/gtgloba 0780 - 6c 2e 63 72 6c 30 34 06-08 2b 06 01 05 05 07 01 l.crl04..+...... 0790 - 01 04 28 30 26 30 24 06-08 2b 06 01 05 05 07 30 ..(0&0$..+.....0 07a0 - 01 86 18 68 74 74 70 3a-2f 2f 6f 63 73 70 2e 67 ...http://ocsp.g 07b0 - 65 6f 74 72 75 73 74 2e-63 6f 6d 30 0d 06 09 2a eotrust.com0...* 07c0 - 86 48 86 f7 0d 01 01 05-05 00 03 82 01 01 00 ab .H.............. 07d0 - bc bc 0a 5d 18 94 e3 c1-b1 c3 a8 4c 55 d6 be b4 ...].......LU... 07e0 - 98 f1 ee 3c 1c cd cf f3-24 24 5c 96 03 27 58 fc ...<....$$\..'X. 07f0 - 36 ae a2 2f 8f f1 fe da-2b 02 c3 33 bd c8 dd 48 6../....+..3...H 0800 - 22 2b 60 0f a5 03 10 fd-77 f8 d0 ed 96 67 4f fd "+`.....w....gO. 0810 - ea 47 20 70 54 dc a9 0c-55 7e e1 96 25 8a d9 b5 .G pT...U~..%... 0820 - da 57 4a be 8d 8e 49 43-63 a5 6c 4e 27 87 25 eb .WJ...ICc.lN'.%. 0830 - 5b 6d fe a2 7f 38 28 e0-36 ab ad 39 a5 a5 62 c4 [m...8(.6..9..b. 0840 - b7 5c 58 2c aa 5d 01 60-a6 62 67 a3 c0 c7 62 23 .\X,.].`.bg...b# 0850 - f4 e7 6c 46 ee b5 d3 80-6a 22 13 d2 2d 3f 74 4f ..lF....j"..-?tO 0860 - ea af 8c 5f b4 38 9c db-ae ce af 84 1e a6 f6 34 ..._.8.........4 0870 - 51 59 79 d3 e3 75 dc bc-d7 f3 73 df 92 ec d2 20 QYy..u....s.... 0880 - 59 6f 9c fb 95 f8 92 76-18 0a 7c 0f 2c a6 ca de Yo.....v..|.,... 0890 - 8a 62 7b d8 f3 ce 5f 68-bd 8f 3e c1 74 bb 15 72 .b{..._h..>.t..r 08a0 - 3a 16 83 a9 0b e6 4d 99-9c d8 57 ec a8 01 51 c7 :.....M...W...Q. 08b0 - 6f 57 34 5e ab 4a 2c 42-f6 4f 1c 89 78 de 26 4e oW4^.J,B.O..x.&N 08c0 - f5 6f 93 4c 15 6b 27 56-4d 00 54 6c 7a b7 b7 00 .o.L.k'VM.Tlz... 08d0 - 03 81 30 82 03 7d 30 82-02 e6 a0 03 02 01 02 02 ..0..}0......... 08e0 - 03 12 bb e6 30 0d 06 09-2a 86 48 86 f7 0d 01 01 ....0...*.H..... 08f0 - 05 05 00 30 4e 31 0b 30-09 06 03 55 04 06 13 02 ...0N1.0...U.... 0900 - 55 53 31 10 30 0e 06 03-55 04 0a 13 07 45 71 75 US1.0...U....Equ 0910 - 69 66 61 78 31 2d 30 2b-06 03 55 04 0b 13 24 45 ifax1-0+..U...$E 0920 - 71 75 69 66 61 78 20 53-65 63 75 72 65 20 43 65 quifax Secure Ce 0930 - 72 74 69 66 69 63 61 74-65 20 41 75 74 68 6f 72 rtificate Author 0940 - 69 74 79 30 1e 17 0d 30-32 30 35 32 31 30 34 30 ity0...020521040 0950 - 30 30 30 5a 17 0d 31 38-30 38 32 31 30 34 30 30 000Z..1808210400 0960 - 30 30 5a 30 42 31 0b 30-09 06 03 55 04 06 13 02 00Z0B1.0...U.... 0970 - 55 53 31 16 30 14 06 03-55 04 0a 13 0d 47 65 6f US1.0...U....Geo 0980 - 54 72 75 73 74 20 49 6e-63 2e 31 1b 30 19 06 03 Trust Inc.1.0... 0990 - 55 04 03 13 12 47 65 6f-54 72 75 73 74 20 47 6c U....GeoTrust Gl 09a0 - 6f 62 61 6c 20 43 41 30-82 01 22 30 0d 06 09 2a obal CA0.."0...* 09b0 - 86 48 86 f7 0d 01 01 01-05 00 03 82 01 0f 00 30 .H.............0 09c0 - 82 01 0a 02 82 01 01 00-da cc 18 63 30 fd f4 17 ...........c0... 09d0 - 23 1a 56 7e 5b df 3c 6c-38 e4 71 b7 78 91 d4 bc #.V~[.<l8.q.x... 09e0 - a1 d8 4c f8 a8 43 b6 03-e9 4d 21 07 08 88 da 58 ..L..C...M!....X 09f0 - 2f 66 39 29 bd 05 78 8b-9d 38 e8 05 b7 6a 7e 71 /f9)..x..8...j~q 0a00 - a4 e6 c4 60 a6 b0 ef 80-e4 89 28 0f 9e 25 d6 ed ...`......(..%.. 0a10 - 83 f3 ad a6 91 c7 98 c9-42 18 35 14 9d ad 98 46 ........B.5....F 0a20 - 92 2e 4f ca f1 87 43 c1-16 95 57 2d 50 ef 89 2d ..O...C...W-P..- 0a30 - 80 7a 57 ad f2 ee 5f 6b-d2 00 8d b9 14 f8 14 15 .zW..._k........ 0a40 - 35 d9 c0 46 a3 7b 72 c8-91 bf c9 55 2b cd d0 97 5..F.{r....U+... 0a50 - 3e 9c 26 64 cc df ce 83-19 71 ca 4e e6 d4 d5 7b >.&d.....q.N...{ 0a60 - a9 19 cd 55 de c8 ec d2-5e 38 53 e5 5c 4f 8c 2d ...U....^8S.\O.- 0a70 - fe 50 23 36 fc 66 e6 cb-8e a4 39 19 00 b7 95 02 .P#6.f....9..... 0a80 - 39 91 0b 0e fe 38 2e d1-1d 05 9a f6 4d 3e 6f 0f 9....8......M>o. 0a90 - 07 1d af 2c 1e 8f 60 39-e2 fa 36 53 13 39 d4 5e ...,..`9..6S.9.^ 0aa0 - 26 2b db 3d a8 14 bd 32-eb 18 03 28 52 04 71 e5 &+.=...2...(R.q. 0ab0 - ab 33 3d e1 38 bb 07 36-84 62 9c 79 ea 16 30 f4 .3=.8..6.b.y..0. 0ac0 - 5f c0 2b e8 71 6b e4 f9-02 03 01 00 01 a3 81 f0 _.+.qk.......... 0ad0 - 30 81 ed 30 1f 06 03 55-1d 23 04 18 30 16 80 14 0..0...U.#..0... 0ae0 - 48 e6 68 f9 2b d2 b2 95-d7 47 d8 23 20 10 4f 33 H.h.+....G.# .O3 0af0 - 98 90 9f d4 30 1d 06 03-55 1d 0e 04 16 04 14 c0 ....0...U....... 0b00 - 7a 98 68 8d 89 fb ab 05-64 0c 11 7d aa 7d 65 b8 z.h.....d..}.}e. 0b10 - ca cc 4e 30 0f 06 03 55-1d 13 01 01 ff 04 05 30 ..N0...U.......0 0b20 - 03 01 01 ff 30 0e 06 03-55 1d 0f 01 01 ff 04 04 ....0...U....... 0b30 - 03 02 01 06 30 3a 06 03-55 1d 1f 04 33 30 31 30 ....0:..U...3010 0b40 - 2f a0 2d a0 2b 86 29 68-74 74 70 3a 2f 2f 63 72 /.-.+.)http://cr 0b50 - 6c 2e 67 65 6f 74 72 75-73 74 2e 63 6f 6d 2f 63 l.geotrust.com/c 0b60 - 72 6c 73 2f 73 65 63 75-72 65 63 61 2e 63 72 6c rls/secureca.crl 0b70 - 30 4e 06 03 55 1d 20 04-47 30 45 30 43 06 04 55 0N..U. .G0E0C..U 0b80 - 1d 20 00 30 3b 30 39 06-08 2b 06 01 05 05 07 02 . .0;09..+...... 0b90 - 01 16 2d 68 74 74 70 73-3a 2f 2f 77 77 77 2e 67 ..-https://www.g 0ba0 - 65 6f 74 72 75 73 74 2e-63 6f 6d 2f 72 65 73 6f eotrust.com/reso 0bb0 - 75 72 63 65 73 2f 72 65-70 6f 73 69 74 6f 72 79 urces/repository 0bc0 - 30 0d 06 09 2a 86 48 86-f7 0d 01 01 05 05 00 03 0...*.H......... 0bd0 - 81 81 00 76 e1 12 6e 4e-4b 16 12 86 30 06 b2 81 ...v..nNK...0... 0be0 - 08 cf f0 08 c7 c7 71 7e-66 ee c2 ed d4 3b 1f ff ......q~f....;.. 0bf0 - f0 f0 c8 4e d6 43 38 b0-b9 30 7d 18 d0 55 83 a2 ...N.C8..0}..U.. 0c00 - 6a cb 36 11 9c e8 48 66-a3 6d 7f b8 13 d4 47 fe j.6...Hf.m....G. 0c10 - 8b 5a 5c 73 fc ae d9 1b-32 19 38 ab 97 34 14 aa .Z\s....2.8..4.. 0c20 - 96 d2 eb a3 1c 14 08 49-b6 bb e5 91 ef 83 36 eb .......I......6. 0c30 - 1d 56 6f ca da bc 73 63-90 e4 7f 7b 3e 22 cb 3d .Vo...sc...{>".= 0c40 - 07 ed 5f 38 74 9c e3 03-50 4e a1 af 98 ee 61 f2 .._8t...PN....a. 0c50 - 84 3f 12 .?. depth=3 C = US, O = Equifax, OU = Equifax Secure Certificate Authority verify return:1 depth=2 C = US, O = GeoTrust Inc., CN = GeoTrust Global CA verify return:1 depth=1 C = US, O = "GeoTrust, Inc.", CN = RapidSSL CA verify return:1 depth=0 serialNumber = JoGozIJmZwhtvHRQCuYEMvwbe6AYqcjR, C = US, O = *.campfirenow.com, OU = GT23036785, OU = See www.rapidssl.com/resources/cps (c)11, OU = Domain Control Validated - RapidSSL(R), CN = *.campfirenow.com verify return:1 read from 0x8a8b40 [0x8afd63] (5 bytes => 5 (0x5)) 0000 - 16 03 01 00 04 ..... read from 0x8a8b40 [0x8afd68] (4 bytes => 4 (0x4)) 0000 - 0e . 0004 - <SPACES/NULS> write to 0x8a8b40 [0x8ba1b0] (267 bytes => 267 (0x10B)) 0000 - 16 03 01 01 06 10 00 01-02 01 00 b4 74 91 33 8c ............t.3. 0010 - 1f ed 4a a1 87 d0 34 55-42 27 f7 18 77 fd 33 cf ..J...4UB'..w.3. 0020 - 51 aa 7e eb 69 b6 59 e4-61 d2 9f f2 b3 1f 9b 30 Q.~.i.Y.a......0 0030 - ae 74 10 db 45 f7 2b 8e-db 60 dc 11 25 b1 58 46 .t..E.+..`..%.XF 0040 - 25 a8 75 54 fa 48 9b fe-62 cb 13 52 15 e5 2e 3e %.uT.H..b..R...> 0050 - 36 2d 99 80 84 fe 8b 2a-21 ed ac 66 bb 3f 80 a1 6-.....*!..f.?.. 0060 - 6a b9 e3 2c 43 af 7e 01-5e 59 e2 2b d5 00 01 b1 j..,C.~.^Y.+.... 0070 - be 6d 55 d9 49 c8 c2 12-dc 59 0b 4a 30 7e 25 42 .mU.I....Y.J0~%B 0080 - 5e 3b fc a8 7e e6 f9 38-7f 73 90 6a 79 59 b4 7a ^;..~..8.s.jyY.z 0090 - fd b5 27 b1 42 23 58 6f-07 e5 4c 75 55 b0 ed 47 ..'.B#Xo..LuU..G 00a0 - 33 fd 9c 1e 4f 4b 64 fd-19 f2 57 f2 8b 1d ed 7a 3...OKd...W....z 00b0 - 00 f9 ba 05 73 fd 70 21-d5 c6 4a b1 de c4 94 77 ....s.p!..J....w 00c0 - 23 33 70 c9 76 78 5f 8d-85 08 ff f6 25 c6 e9 01 #3p.vx_.....%... 00d0 - 46 b3 85 21 ba 94 ff 1a-6c 2e 3f 08 73 4f 70 4f F..!....l.?.sOpO 00e0 - b1 3e 6a be 63 d2 8d b4-e0 b9 ed f0 3b fb 4b 89 .>j.c.......;.K. 00f0 - 4f ac 0c 0a 2c 11 02 95-54 1c 6a 1f 6a fc 04 91 O...,...T.j.j... 0100 - ef 67 a1 06 e4 5a d9 62-b4 42 4d .g...Z.b.BM write to 0x8a8b40 [0x8ba1b0] (6 bytes => 6 (0x6)) 0000 - 14 03 01 00 01 01 ...... write to 0x8a8b40 [0x8ba1b0] (53 bytes => 53 (0x35)) 0000 - 16 03 01 00 30 e4 b5 25-28 d4 d5 f0 df f8 15 94 ....0..%(....... 0010 - b7 47 d3 73 69 91 81 27-81 f6 07 f3 73 66 83 24 .G.si..'....sf.$ 0020 - 08 a6 3c 7c 08 7c df 10-28 28 e7 81 02 f0 e7 f7 ..<|.|..((...... 0030 - 2d 85 a3 2b b4 -..+. read from 0x8a8b40 [0x8afd63] (5 bytes => 5 (0x5)) 0000 - 14 03 01 00 01 ..... read from 0x8a8b40 [0x8afd68] (1 bytes => 1 (0x1)) 0000 - 01 . read from 0x8a8b40 [0x8afd63] (5 bytes => 5 (0x5)) 0000 - 16 03 01 00 30 ....0 read from 0x8a8b40 [0x8afd68] (48 bytes => 48 (0x30)) 0000 - c1 99 8c 66 45 4b 2b eb-96 e6 11 93 ba 10 37 07 ...fEK+.......7. 0010 - 82 12 16 67 4d 1e fc 62-56 8d 16 1b 1f d1 b1 e3 ...gM..bV....... 0020 - 06 e6 62 91 1a 30 2c ba-5b a2 e8 6b 32 0d 56 c2 ..b..0,.[..k2.V. --- Certificate chain 0 s:/serialNumber=JoGozIJmZwhtvHRQCuYEMvwbe6AYqcjR/C=US/O=*.campfirenow.com/OU=GT23036785/OU=See www.rapidssl.com/resources/cps (c)11/OU=Domain Control Validated - RapidSSL(R)/CN=*.campfirenow.com i:/C=US/O=GeoTrust, Inc./CN=RapidSSL CA 1 s:/C=US/O=GeoTrust, Inc./CN=RapidSSL CA i:/C=US/O=GeoTrust Inc./CN=GeoTrust Global CA 2 s:/C=US/O=GeoTrust Inc./CN=GeoTrust Global CA i:/C=US/O=Equifax/OU=Equifax Secure Certificate Authority --- Server certificate -----BEGIN CERTIFICATE----- MIIE5TCCA82gAwIBAgIDBIRBMA0GCSqGSIb3DQEBBQUAMDwxCzAJBgNVBAYTAlVT MRcwFQYDVQQKEw5HZW9UcnVzdCwgSW5jLjEUMBIGA1UEAxMLUmFwaWRTU0wgQ0Ew HhcNMTExMjI0MTU0MDEzWhcNMTQwMTI1MTk1MjQ0WjCB6TEpMCcGA1UEBRMgSm9H b3pJSm1ad2h0dkhSUUN1WUVNdndiZTZBWXFjalIxCzAJBgNVBAYTAlVTMRowGAYD VQQKDBEqLmNhbXBmaXJlbm93LmNvbTETMBEGA1UECxMKR1QyMzAzNjc4NTExMC8G A1UECxMoU2VlIHd3dy5yYXBpZHNzbC5jb20vcmVzb3VyY2VzL2NwcyAoYykxMTEv MC0GA1UECxMmRG9tYWluIENvbnRyb2wgVmFsaWRhdGVkIC0gUmFwaWRTU0woUikx GjAYBgNVBAMMESouY2FtcGZpcmVub3cuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAvR6phsZwalbeJVFk8Xcm724GrKvXJYvScK33v9luWBk8TQ6w PC/hL+3CtFS+RPZ1NWRXW1DTFapsqGvvF9GEudNG4zCJap8qN5lNLDRaYyHvzTFP uvt5cVCxXxyXUKJ8eZ+aKQ54rP/ameC/UQz/1p8xw2H5yV0g5BMuAmQvVfG7nujR f+SctkoDmc+E0gCQ2Q7fN1cDwmamSF9vJpLClLF65TzQQjVhYowxt1bZsub5Nd7v aFLYxi/mJ6AeJ01hfwG9oeLIvmp9skRUu6JeKNMdwTGJxump9goBSwsR4sWiBOW5 sCLG5rc325w2UucKnf0jxIP19aNdqxWnpZANIwIDAQABo4IBQDCCATwwHwYDVR0j BBgwFoAUa2k9ahhCSt2PAmU5/TUkhniRFjAwDgYDVR0PAQH/BAQDAgWgMB0GA1Ud JQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAtBgNVHREEJjAkghEqLmNhbXBmaXJl bm93LmNvbYIPY2FtcGZpcmVub3cuY29tMEMGA1UdHwQ8MDowOKA2oDSGMmh0dHA6 Ly9yYXBpZHNzbC1jcmwuZ2VvdHJ1c3QuY29tL2NybHMvcmFwaWRzc2wuY3JsMB0G A1UdDgQWBBTHAthEq4pCZ+ZSdqo90v27960rkTAMBgNVHRMBAf8EAjAAMEkGCCsG AQUFBwEBBD0wOzA5BggrBgEFBQcwAoYtaHR0cDovL3JhcGlkc3NsLWFpYS5nZW90 cnVzdC5jb20vcmFwaWRzc2wuY3J0MA0GCSqGSIb3DQEBBQUAA4IBAQAuX4Y9rSpg 9kPmlZvwyiUpBDWHuNOYRQJJp9j3YVXaL9DmCAEEN6Qvh8xSNm87OOwIuj+ACS/k d7S64JOgJ0/msRBwJeEHQXv54UMx6OSihWFhW3U2k+KMj/o3Aj87JBlsxLqFDh5z bvePBOAoUPQZqnlltm6smqzWAxa+aSGkSz7y9cOMK3i9/rBHzZpO2EmTT4ObJlxo nLdZJKDHPX7Zodocd69AcTm9GRbFOziSD7OrRxf2kn6NuuMz/MyaGRqQWxJVxN2n tyzTgfXPteXfIn5lI5CiO2KHts9PlZPUqBSdKllzf5RJbK9R4HYQjKiSvtx+FVlv iOc4EJkdt4nu -----END CERTIFICATE----- subject=/serialNumber=JoGozIJmZwhtvHRQCuYEMvwbe6AYqcjR/C=US/O=*.campfirenow.com/OU=GT23036785/OU=See www.rapidssl.com/resources/cps (c)11/OU=Domain Control Validated - RapidSSL(R)/CN=*.campfirenow.com issuer=/C=US/O=GeoTrust, Inc./CN=RapidSSL CA --- No client certificate CA names sent --- SSL handshake has read 3314 bytes and written 438 bytes --- New, TLSv1/SSLv3, Cipher is AES128-SHA Server public key is 2048 bit Secure Renegotiation IS supported Compression: NONE Expansion: NONE SSL-Session: Protocol : TLSv1 Cipher : AES128-SHA Session-ID: 8380F0FD7F646405694585D3A5ECAF25F3287B8F50F37686C684832C888F38BF Session-ID-ctx: Master-Key: 30FFA900C40D0A9D2C019983BBA0D6FAF33A9A998040FBFACAA7E65FF4744AB7D28C78D69907DB034066AB111747FE39 Key-Arg : None Krb5 Principal: None PSK identity: None PSK identity hint: None Start Time: 1379728241 Timeout : 300 (sec) Verify return code: 0 (ok)
I'd like to upvote this. I'd also like to sponsor, but my concern is that the requirement for the sponsor that a release be made limits who can fix because only committers would be able to release things? Or am I mistaken.
Also another idea, is that this possibly might be able to be fixed via configuration? I haven't done java dev in forever, so take with a grain of salt, but maybe someone more current on their java can look into it.
Maybe something via a system property or editing the java.security can enable the cipher suite?
Alex, I think you can set your own terms for sponsoring an issue. If not, I'm up for changing my original sponsoring criteria.
I've never used Freedom Sponsor, I assumed it would be best to add to the original sponsor? Whats the best practice?
Someone on the freedomsponser link suggested trying running jenkins with this option set:
-Dhttps.protocols=TLSv1
I tried it but it didn't appear to make a difference. Can anyone else confirm?
Greetings,
I resolved it by replacing the old and deprecated HttpClient implementation in the Campfire notifier with the newer Apache HTTPComponents client library. After rebuilding the Campfire notifier, it now saves just fine and reports failures successfully.
My fork is over here: https://github.com/cyberfox/campfire-plugin
Give it a try and let me know if it fixes it for other folks.
– Morgan
p.s. If it matters, my JVM is:
java version "1.6.0_24"
OpenJDK Runtime Environment (IcedTea6 1.11.5) (6b24-1.11.5-0ubuntu1~12.04.1)
OpenJDK 64-Bit Server VM (build 20.0-b12, mixed mode)
@coleman - after thinking about it I think no fork and release are probably the right thing.
I've also registered a sponsor:
@Morgan
Seems to be a plugin build issue on my end going on. Builds no longer fail when attempting to do a campfire notification but they don't post. When going to "Manage Jenkins" and saving this error is fired:
javax.servlet.ServletException: java.lang.NoClassDefFoundError: Could not initialize class org.apache.http.impl.conn.ManagedHttpClientConnectionFactory at org.kohsuke.stapler.Stapler.tryInvoke(Stapler.java:735) at org.kohsuke.stapler.Stapler.invoke(Stapler.java:799) at org.kohsuke.stapler.Stapler.invoke(Stapler.java:587) at org.kohsuke.stapler.Stapler.service(Stapler.java:218) at javax.servlet.http.HttpServlet.service(HttpServlet.java:45) at winstone.ServletConfiguration.execute(ServletConfiguration.java:248) at winstone.RequestDispatcher.forward(RequestDispatcher.java:333) at winstone.RequestDispatcher.doFilter(RequestDispatcher.java:376) at hudson.util.PluginServletFilter$1.doFilter(PluginServletFilter.java:96) at hudson.util.PluginServletFilter.doFilter(PluginServletFilter.java:88) at winstone.FilterConfiguration.execute(FilterConfiguration.java:194) at winstone.RequestDispatcher.doFilter(RequestDispatcher.java:366) at hudson.security.csrf.CrumbFilter.doFilter(CrumbFilter.java:48) at winstone.FilterConfiguration.execute(FilterConfiguration.java:194) at winstone.RequestDispatcher.doFilter(RequestDispatcher.java:366) at hudson.security.ChainedServletFilter$1.doFilter(ChainedServletFilter.java:84) at hudson.security.UnwrapSecurityExceptionFilter.doFilter(UnwrapSecurityExceptionFilter.java:51) at hudson.security.ChainedServletFilter$1.doFilter(ChainedServletFilter.java:87) at jenkins.security.ExceptionTranslationFilter.doFilter(ExceptionTranslationFilter.java:117) at hudson.security.ChainedServletFilter$1.doFilter(ChainedServletFilter.java:87) at org.acegisecurity.providers.anonymous.AnonymousProcessingFilter.doFilter(AnonymousProcessingFilter.java:125) at hudson.security.ChainedServletFilter$1.doFilter(ChainedServletFilter.java:87) at org.acegisecurity.ui.rememberme.RememberMeProcessingFilter.doFilter(RememberMeProcessingFilter.java:142) at hudson.security.ChainedServletFilter$1.doFilter(ChainedServletFilter.java:87) at org.acegisecurity.ui.AbstractProcessingFilter.doFilter(AbstractProcessingFilter.java:271) at hudson.security.ChainedServletFilter$1.doFilter(ChainedServletFilter.java:87) at org.acegisecurity.ui.basicauth.BasicProcessingFilter.doFilter(BasicProcessingFilter.java:174) at hudson.security.ChainedServletFilter$1.doFilter(ChainedServletFilter.java:87) at jenkins.security.ApiTokenFilter.doFilter(ApiTokenFilter.java:64) at hudson.security.ChainedServletFilter$1.doFilter(ChainedServletFilter.java:87) at org.acegisecurity.context.HttpSessionContextIntegrationFilter.doFilter(HttpSessionContextIntegrationFilter.java:249) at hudson.security.HttpSessionContextIntegrationFilter2.doFilter(HttpSessionContextIntegrationFilter2.java:67) at hudson.security.ChainedServletFilter$1.doFilter(ChainedServletFilter.java:87) at hudson.security.ChainedServletFilter.doFilter(ChainedServletFilter.java:76) at hudson.security.HudsonFilter.doFilter(HudsonFilter.java:164) at winstone.FilterConfiguration.execute(FilterConfiguration.java:194) at winstone.RequestDispatcher.doFilter(RequestDispatcher.java:366) at org.kohsuke.stapler.compression.CompressionFilter.doFilter(CompressionFilter.java:46) at winstone.FilterConfiguration.execute(FilterConfiguration.java:194) at winstone.RequestDispatcher.doFilter(RequestDispatcher.java:366) at hudson.util.CharacterEncodingFilter.doFilter(CharacterEncodingFilter.java:81) at winstone.FilterConfiguration.execute(FilterConfiguration.java:194) at winstone.RequestDispatcher.doFilter(RequestDispatcher.java:366) at winstone.RequestDispatcher.forward(RequestDispatcher.java:331) at winstone.RequestHandlerThread.processRequest(RequestHandlerThread.java:227) at winstone.RequestHandlerThread.run(RequestHandlerThread.java:150) at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:471) at java.util.concurrent.FutureTask$Sync.innerRun(FutureTask.java:334) at java.util.concurrent.FutureTask.run(FutureTask.java:166) at winstone.BoundedExecutorService$1.run(BoundedExecutorService.java:77) at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1145) at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615) at java.lang.Thread.run(Thread.java:724) Caused by: java.lang.NoClassDefFoundError: Could not initialize class org.apache.http.impl.conn.ManagedHttpClientConnectionFactory at org.apache.http.impl.conn.PoolingHttpClientConnectionManager$InternalConnectionFactory.<init>(PoolingHttpClientConnectionManager.java:487) at org.apache.http.impl.conn.PoolingHttpClientConnectionManager.<init>(PoolingHttpClientConnectionManager.java:147) at org.apache.http.impl.conn.PoolingHttpClientConnectionManager.<init>(PoolingHttpClientConnectionManager.java:136) at org.apache.http.impl.conn.PoolingHttpClientConnectionManager.<init>(PoolingHttpClientConnectionManager.java:112) at org.apache.http.impl.client.HttpClientBuilder.build(HttpClientBuilder.java:710) at hudson.plugins.campfire.Campfire.getClient(Campfire.java:61) at hudson.plugins.campfire.Campfire.get(Campfire.java:101) at hudson.plugins.campfire.Campfire.getRooms(Campfire.java:119) at hudson.plugins.campfire.Campfire.findRoomByName(Campfire.java:156) at hudson.plugins.campfire.CampfireNotifier.initialize(CampfireNotifier.java:248) at hudson.plugins.campfire.CampfireNotifier.<init>(CampfireNotifier.java:81) at hudson.plugins.campfire.DescriptorImpl.configure(DescriptorImpl.java:123) at jenkins.model.Jenkins.configureDescriptor(Jenkins.java:2776) at jenkins.model.Jenkins.doConfigSubmit(Jenkins.java:2739) at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57) at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) at java.lang.reflect.Method.invoke(Method.java:606) at org.kohsuke.stapler.Function$InstanceFunction.invoke(Function.java:297) at org.kohsuke.stapler.Function.bindAndInvoke(Function.java:160) at org.kohsuke.stapler.Function.bindAndInvokeAndServeResponse(Function.java:95) at org.kohsuke.stapler.MetaClass$1.doDispatch(MetaClass.java:111) at org.kohsuke.stapler.NameBasedDispatcher.dispatch(NameBasedDispatcher.java:53) at org.kohsuke.stapler.Stapler.tryInvoke(Stapler.java:685) ... 52 more
Any thoughts?
Some possibly helpful information from a coworker:
Looks like this may be due to the JRE shipping with only wimpy ciphers enabled by default, due to import/export restrictions.
See http://developer.klocwork.com/documentation/cahoots/current/p4errorduringsslhandshake for a similar issue.
The fix—hopefully—is to install http://www.oracle.com/technetwork/java/javase/downloads/jce-7-download-432124.html to enable the stronger cipher suites.
-Javan Makhmali
37signals
@Javan
Some possibly helpful information from a coworker: ...
Unfortunately, this didn't fix the issue for me — there are still random SSLProtocolException errors even after installing Java Cryptography Extension (for Java SE 6).
@Sam - Try it in combination with building from my repo and see if that works any better. I believe my JVM also already had the JCE extensions necessary, but they were being incorrectly referenced by the very old version of HttpClient the Campfire adapter was using. It's just a theory, but the .hpi from my repo is working for my team.
Hmm, still running into the earlier issue with both the updated hpi and JCE installed. I could be missing something along the way, can anyone else test with @Morgan's changes and JCE installed?
I can confirm that for me after the upgrade from openjdk-1.6 to openjdk-1.7 (on Centos6.4) , we have not seen the issue anymore.
I've downloaded the official JDK 7 from Oracle (jdk-7u40-macosx-x64.dmg) http://www.oracle.com/technetwork/java/javase/downloads/jdk7-downloads-1880260.html and the issue still persists after launching Jenkins with the new java binary on Mac OSX 10.8.5
Hmmm. After updating to Jenkins 1.532 (looks like 1.533 is also out), my Campfire SSL errors went away using the same version of Java when I filed this bug.
Last-week, we were on Jenkins 1.503 with campfire plugin 2.1 and we were seeing this error intermittently:
ERROR: Publisher hudson.plugins.campfire.CampfireNotifier aborted due to exception
java.io.IOException: Cannot join room: Server returned wrong cipher suite for session
at hudson.plugins.campfire.CampfireNotifier.initialize(CampfireNotifier.java:66)
We updated the campfire plugin from 2.1 to 2.6 but we continued to see this same error intermittently whenever we edit or create a job with campfire notification.
We decided to upgrade to Jenkins 1.532 last Saturday, Sep 28th. Today, Monday Sep 30th, we are seeing this error which fails our builds:
Failed to initialize campfire notifier - check your campfire notifier configuration settings: javax.net.ssl.SSLProtocolException: Server returned wrong cipher suite for session
We are running Jenkins 1.532 on Tomcat in a Windows 2008 datacenter server. Our campfire plugin is at 2.6 and Maven project plugin is 1.532
Interestingly, testing via curl on command line to send a message to a campfire room using api key via https seems to work (not sure if this one will intermittently fail too).
C:\Users\Administrator> curl -u 123replacewithyourapikey456:X -H "Content-Type: application/xml" -d "<message>gem test from jenkins windows cmd line</message>"
https://yourcompany.campfirenow.com/room/345671/speak.xml
<?xml version="1.0" encoding="UTF-8"?>
<message>
<created-at type="datetime">2013-09-30T23:39:33Z</created-at>
<id type="integer">1068538523</id>
<room-id type="integer">345671</room-id>
<user-id type="integer">1234548</user-id>
<body>gem test from jenkins windows cmd line</body>
<type>TextMessage</type>
<starred type="boolean">false</starred>
</message>
To those running Ubuntu 12.04, after we installed the newer JRE (7 vs 6):
sudo aptitude install openjdk-7-jre
sudo update-alternatives --set java /usr/lib/jvm/java-7-openjdk-amd64/jre/bin/java
sudo service jenkins stop
sudo service jenkins start
The error is gone and we're now seeing notifications in Campfire
I believe this was caused by a recent Java update that Apple pushed down.
The error above happens when Java tries to prompt the user to accept some new security changes or trust the certificate, but since Jenkins has no UI, it just crashes with the above exception.
To fix it, download the SSL certificate and import it into System > Certificates on your machine's keychain.