[GitHub] [fineract] ptuomola edited a comment on pull request #820: [WIP] FINERACT-846: Migrating to Java 11

[GitBox <gi...@apache.org>]

ptuomola edited a comment on pull request #820:
URL: https://github.com/apache/fineract/pull/820#issuecomment-625004656


   > @ptuomola I've run into this kind of thing before - it could be caused e.g. by Oracle Java vs. OpenJDK, which include different root certificates. Haven't investigated this particular problem, but thought I'd mention it here in case that is it.
   
   @vorburger Thanks! Found the issue: there is a bug in OpenJDK 11.0.2. They've implemented SSL connection reuse, but the reuse discards all the certificates shared during the earlier use of the connection, which results in this error. relaxedHTTPSValidation doesn't help as it still expects some certificate, and in this case there is none. 
   
   The issue is fixed in later OpenJDK 11 builds (e.g. 11.0.7) which is what I have on my own machine, and hence I did not see this. However Travis pulls in 11.0.2 and I was not able to find an easy way to get it to use a later minor version. 
   
   So I fixed the Travis build by getting it to use OpenJDK 12 which has this fix. I'm assuming that will still be OK, because in the Gradle file we specify JDK 11. Alternatively need to find some way to get Travis to download and install 11.0.7 instead...


----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
users@infra.apache.org