Forum: JRuby OpenSSL::SSL::SSLError: Certificates does not conform to algorithm constraints

0dae30569556c4f47a5277e8957f1960?d=identicon&s=25 Mark Mandel (Guest)
on 2012-07-09 23:07
(Received via mailing list)
Hey everyone,

This is an error I started running into when I upgraded my local setup
to
Ubuntu 12.04. I had thought I was on Java 7 before, but now I'm also
thinking I may have been on Java 6 before...

Either way, I'm getting the following error when trying to access a
webservice over HTTPS which using Net::HTTP. This is one of those "I
swear
it was working before I upgraded my OS" type things.

The error occurs in the code

require "net/http"

Net::HTTP.start(uri.host, :use_ssl => true, :ca_path =>
"/etc/ssl/certs")
do |http| # << this line here is where the error fires
  #...
end


And the stack trace is the following:

OpenSSL::SSL::SSLError: Certificates does not conform to algorithm
constraints
/opt/jruby/jruby-1.7.0.preview1/lib/ruby/1.9/net/http.rb:799:in
`connect'
    /opt/jruby/jruby-1.7.0.preview1/lib/ruby/1.9/net/http.rb:799:in
`connect'
    /opt/jruby/jruby-1.7.0.preview1/lib/ruby/1.9/net/http.rb:755:in
`do_start'
    /opt/jruby/jruby-1.7.0.preview1/lib/ruby/1.9/net/http.rb:744:in
`start'
    /opt/jruby/jruby-1.7.0.preview1/lib/ruby/1.9/net/http.rb:557:in
`start'


From my reading, it looks to be related to:
https://forums.oracle.com/forums/thread.jspa?threa...

But from that link, the bugs referenced have been fixed.

Any help on this would be appreciated, as I'm at my wits end on this.
 About to try downgrading to Java 6, just to see if that works.

Thanks!!!

Mark

--
E: mark.mandel@gmail.com
T: http://www.twitter.com/neurotic
W: www.compoundtheory.com

2 Devs from Down Under Podcast
http://www.2ddu.com/
0dae30569556c4f47a5277e8957f1960?d=identicon&s=25 Mark Mandel (Guest)
on 2012-07-09 23:16
(Received via mailing list)
My apologies.

I'm running:

Jruby jruby-1.7.0.preview1
JDK: Java(TM) SE Runtime Environment (build 1.7.0_05-b05)

I should have put that in my original email.

Mark

On Tue, Jul 10, 2012 at 7:04 AM, Mark Mandel <mark.mandel@gmail.com>
wrote:

> The error occurs in the code
>
>
> Mark
>
>
>


--
E: mark.mandel@gmail.com
T: http://www.twitter.com/neurotic
W: www.compoundtheory.com

2 Devs from Down Under Podcast
http://www.2ddu.com/
0dae30569556c4f47a5277e8957f1960?d=identicon&s=25 Mark Mandel (Guest)
on 2012-07-10 00:05
(Received via mailing list)
I worked it out.

Needed to re-enable MD2 hashes in the security settings. Not ideal, but
it
works.

I outlined my findings on my stack overflow question. I'm sure other
people
will run into the same issue at some point:
http://stackoverflow.com/questions/11389452/jruby-...

Much thanks to the people in #jruby on freenode. They rock.

Mark


On Tue, Jul 10, 2012 at 7:15 AM, Mark Mandel <mark.mandel@gmail.com>
wrote:

>
>> webservice over HTTPS which using Net::HTTP. This is one of those "I swear
>>
>>     /opt/jruby/jruby-1.7.0.preview1/lib/ruby/1.9/net/http.rb:744:in
>> Any help on this would be appreciated, as I'm at my wits end on this.
> --
> E: mark.mandel@gmail.com
> T: http://www.twitter.com/neurotic
> W: www.compoundtheory.com
>
> 2 Devs from Down Under Podcast
> http://www.2ddu.com/
>
>


--
E: mark.mandel@gmail.com
T: http://www.twitter.com/neurotic
W: www.compoundtheory.com

2 Devs from Down Under Podcast
http://www.2ddu.com/
Please log in before posting. Registration is free and takes only a minute.
Existing account

NEW: Do you have a Google/GoogleMail, Yahoo or Facebook account? No registration required!
Log in with Google account | Log in with Yahoo account | Log in with Facebook account
No account? Register here.