Forum: JRuby OpenSSL::SSL::SSLError: Certificates does not conform to algorithm constraints

Hey everyone,

This is an error I started running into when I upgraded my local setup 
to
Ubuntu 12.04. I had thought I was on Java 7 before, but now I'm also
thinking I may have been on Java 6 before...

Either way, I'm getting the following error when trying to access a
webservice over HTTPS which using Net::HTTP. This is one of those "I 
swear
it was working before I upgraded my OS" type things.

The error occurs in the code

require "net/http"

Net::HTTP.start(uri.host, :use_ssl => true, :ca_path => 
"/etc/ssl/certs")
do |http| # << this line here is where the error fires
  #...
end


And the stack trace is the following:

OpenSSL::SSL::SSLError: Certificates does not conform to algorithm
constraints
/opt/jruby/jruby-1.7.0.preview1/lib/ruby/1.9/net/http.rb:799:in 
`connect'
    /opt/jruby/jruby-1.7.0.preview1/lib/ruby/1.9/net/http.rb:799:in
`connect'
    /opt/jruby/jruby-1.7.0.preview1/lib/ruby/1.9/net/http.rb:755:in
`do_start'
    /opt/jruby/jruby-1.7.0.preview1/lib/ruby/1.9/net/http.rb:744:in 
`start'
    /opt/jruby/jruby-1.7.0.preview1/lib/ruby/1.9/net/http.rb:557:in 
`start'


From my reading, it looks to be related to:
https://forums.oracle.com/forums/thread.jspa?threa...

But from that link, the bugs referenced have been fixed.

Any help on this would be appreciated, as I'm at my wits end on this.
 About to try downgrading to Java 6, just to see if that works.

Thanks!!!

Mark

--
E: mark.mandel@gmail.com
T: http://www.twitter.com/neurotic
W: www.compoundtheory.com

2 Devs from Down Under Podcast
http://www.2ddu.com/

My apologies.

I'm running:

Jruby jruby-1.7.0.preview1
JDK: Java(TM) SE Runtime Environment (build 1.7.0_05-b05)

I should have put that in my original email.

Mark

On Tue, Jul 10, 2012 at 7:04 AM, Mark Mandel <mark.mandel@gmail.com> 
wrote:

> The error occurs in the code
>
>
> Mark
>
>
>


--
E: mark.mandel@gmail.com
T: http://www.twitter.com/neurotic
W: www.compoundtheory.com

2 Devs from Down Under Podcast
http://www.2ddu.com/

I worked it out.

Needed to re-enable MD2 hashes in the security settings. Not ideal, but 
it
works.

I outlined my findings on my stack overflow question. I'm sure other 
people
will run into the same issue at some point:
http://stackoverflow.com/questions/11389452/jruby-...

Much thanks to the people in #jruby on freenode. They rock.

Mark


On Tue, Jul 10, 2012 at 7:15 AM, Mark Mandel <mark.mandel@gmail.com> 
wrote:

>
>> webservice over HTTPS which using Net::HTTP. This is one of those "I swear
>>
>>     /opt/jruby/jruby-1.7.0.preview1/lib/ruby/1.9/net/http.rb:744:in
>> Any help on this would be appreciated, as I'm at my wits end on this.
> --
> E: mark.mandel@gmail.com
> T: http://www.twitter.com/neurotic
> W: www.compoundtheory.com
>
> 2 Devs from Down Under Podcast
> http://www.2ddu.com/
>
>


--
E: mark.mandel@gmail.com
T: http://www.twitter.com/neurotic
W: www.compoundtheory.com

2 Devs from Down Under Podcast
http://www.2ddu.com/