You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@fineract.apache.org by "Michael Vorburger.ch (Jira)" <ji...@apache.org> on 2019/08/22 07:42:00 UTC

[jira] [Commented] (FINERACT-788) Fineract Travis CI broken due https://services.gradle.org java.security.cert.CertPathValidatorException: timestamp check failed

    [ https://issues.apache.org/jira/browse/FINERACT-788?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16913080#comment-16913080 ] 

Michael Vorburger.ch commented on FINERACT-788:
-----------------------------------------------

It looks like this is because of this:

{noformat}$ sudo date --set="23 February 2019 01:02:03"{noformat}

VS  this (from the SSL cert on https://services.gradle.org) :

{noformat}Caused by: java.security.cert.CertificateNotYetValidException: NotBefore: Thu Mar 14 05:30:00 IST 2019{noformat}

Not sure why we change the system time, that just seems weird and wrong... according to [https://github.com/apache/fineract/commit/ab09ba8718ce6f5b40f45a37e9df75b601717eb2|http://example.com], [~vishwasbabu] had to do related to FINERACT-707 ... let me try to remove it in https://github.com/apache/fineract/pull/627, and we'll see what happens.

> Fineract Travis CI broken due https://services.gradle.org java.security.cert.CertPathValidatorException: timestamp check failed
> -------------------------------------------------------------------------------------------------------------------------------
>
>                 Key: FINERACT-788
>                 URL: https://issues.apache.org/jira/browse/FINERACT-788
>             Project: Apache Fineract
>          Issue Type: Bug
>    Affects Versions: 1.4.0
>            Reporter: Michael Vorburger.ch
>            Assignee: Michael Vorburger.ch
>            Priority: Blocker
>             Fix For: 1.4.0
>
>          Time Spent: 10m
>  Remaining Estimate: 0h
>
> https://travis-ci.org/apache/fineract/builds/575211816
> {noformat}$ java -Xmx32m -version
> openjdk version "1.8.0_141"
> OpenJDK Runtime Environment (build 1.8.0_141-8u141-b15-3~14.04-b15)
> OpenJDK 64-Bit Server VM (build 25.141-b15, mixed mode)
> $ javac -J-Xmx32m -version
> javac 9.0.1
> before_install.1
> 0.01s$ echo "USE mysql;\nUPDATE user SET password=PASSWORD('mysql') WHERE user='root';\nFLUSH PRIVILEGES;\n" | mysql -u root
> before_install.2
> 0.01s$ mysql -u root -pmysql -e 'CREATE DATABASE IF NOT EXISTS `mifosplatform-tenants`;'
> before_install.3
> 0.01s$ mysql -u root -pmysql -e 'CREATE DATABASE IF NOT EXISTS `mifostenant-default`;'
> before_install.4
> 0.01s$ export TZ=Asia/Kolkata
> before_install.5
> 0.02s$ sudo service ntp stop
> before_install.6
> -15594867.18s$ sudo date --set="23 February 2019 01:02:03"
> 6.64s$ ./gradlew assemble
> Listening for transport dt_socket at address: 8005
> Downloading https://services.gradle.org/distributions/gradle-5.2.1-bin.zip
> Exception in thread "main" javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path validation failed: java.security.cert.CertPathValidatorException: timestamp check failed
> 	at sun.security.ssl.Alerts.getSSLException(Alerts.java:192)
> 	at sun.security.ssl.SSLSocketImpl.fatal(SSLSocketImpl.java:1959)
> 	at sun.security.ssl.Handshaker.fatalSE(Handshaker.java:302)
> 	at sun.security.ssl.Handshaker.fatalSE(Handshaker.java:296)
> 	at sun.security.ssl.ClientHandshaker.serverCertificate(ClientHandshaker.java:1514)
> 	at sun.security.ssl.ClientHandshaker.processMessage(ClientHandshaker.java:216)
> 	at sun.security.ssl.Handshaker.processLoop(Handshaker.java:1026)
> 	at sun.security.ssl.Handshaker.process_record(Handshaker.java:961)
> 	at sun.security.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:1072)
> 	at sun.security.ssl.SSLSocketImpl.performInitialHandshake(SSLSocketImpl.java:1385)
> 	at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1413)
> 	at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1397)
> 	at sun.net.www.protocol.https.HttpsClient.afterConnect(HttpsClient.java:559)
> 	at sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.connect(AbstractDelegateHttpsURLConnection.java:185)
> 	at sun.net.www.protocol.http.HttpURLConnection.followRedirect0(HttpURLConnection.java:2701)
> 	at sun.net.www.protocol.http.HttpURLConnection.followRedirect(HttpURLConnection.java:2623)
> 	at sun.net.www.protocol.http.HttpURLConnection.getInputStream0(HttpURLConnection.java:1806)
> 	at sun.net.www.protocol.http.HttpURLConnection.getInputStream(HttpURLConnection.java:1474)
> 	at sun.net.www.protocol.https.HttpsURLConnectionImpl.getInputStream(HttpsURLConnectionImpl.java:254)
> 	at org.gradle.wrapper.Download.downloadInternal(Download.java:58)
> 	at org.gradle.wrapper.Download.download(Download.java:44)
> 	at org.gradle.wrapper.Install$1.call(Install.java:61)
> 	at org.gradle.wrapper.Install$1.call(Install.java:48)
> 	at org.gradle.wrapper.ExclusiveFileAccessManager.access(ExclusiveFileAccessManager.java:65)
> 	at org.gradle.wrapper.Install.createDist(Install.java:48)
> 	at org.gradle.wrapper.WrapperExecutor.execute(WrapperExecutor.java:128)
> 	at org.gradle.wrapper.GradleWrapperMain.main(GradleWrapperMain.java:61)
> Caused by: sun.security.validator.ValidatorException: PKIX path validation failed: java.security.cert.CertPathValidatorException: timestamp check failed
> 	at sun.security.validator.PKIXValidator.doValidate(PKIXValidator.java:362)
> 	at sun.security.validator.PKIXValidator.engineValidate(PKIXValidator.java:270)
> 	at sun.security.validator.Validator.validate(Validator.java:260)
> 	at sun.security.ssl.X509TrustManagerImpl.validate(X509TrustManagerImpl.java:324)
> 	at sun.security.ssl.X509TrustManagerImpl.checkTrusted(X509TrustManagerImpl.java:229)
> 	at sun.security.ssl.X509TrustManagerImpl.checkServerTrusted(X509TrustManagerImpl.java:124)
> 	at sun.security.ssl.ClientHandshaker.serverCertificate(ClientHandshaker.java:1496)
> 	... 22 more
> Caused by: java.security.cert.CertPathValidatorException: timestamp check failed
> 	at sun.security.provider.certpath.PKIXMasterCertPathValidator.validate(PKIXMasterCertPathValidator.java:135)
> 	at sun.security.provider.certpath.PKIXCertPathValidator.validate(PKIXCertPathValidator.java:223)
> 	at sun.security.provider.certpath.PKIXCertPathValidator.validate(PKIXCertPathValidator.java:140)
> 	at sun.security.provider.certpath.PKIXCertPathValidator.engineValidate(PKIXCertPathValidator.java:79)
> 	at java.security.cert.CertPathValidator.validate(CertPathValidator.java:292)
> 	at sun.security.validator.PKIXValidator.doValidate(PKIXValidator.java:357)
> 	... 28 more
> Caused by: java.security.cert.CertificateNotYetValidException: NotBefore: Thu Mar 14 05:30:00 IST 2019
> 	at sun.security.x509.CertificateValidity.valid(CertificateValidity.java:270)
> 	at sun.security.x509.X509CertImpl.checkValidity(X509CertImpl.java:629)
> 	at sun.security.provider.certpath.BasicChecker.verifyTimestamp(BasicChecker.java:190)
> 	at sun.security.provider.certpath.BasicChecker.check(BasicChecker.java:144)
> 	at sun.security.provider.certpath.PKIXMasterCertPathValidator.validate(PKIXMasterCertPathValidator.java:125)
> 	... 33 more
> The command "eval ./gradlew assemble " failed. Retrying, 2 of 3.
> Listening for transport dt_socket at address: 8005
> Downloading https://services.gradle.org/distributions/gradle-5.2.1-bin.zip
> Exception in thread "main" javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path validation failed: java.security.cert.CertPathValidatorException: timestamp check failed
> 	at sun.security.ssl.Alerts.getSSLException(Alerts.java:192)
> 	at sun.security.ssl.SSLSocketImpl.fatal(SSLSocketImpl.java:1959)
> 	at sun.security.ssl.Handshaker.fatalSE(Handshaker.java:302)
> 	at sun.security.ssl.Handshaker.fatalSE(Handshaker.java:296)
> 	at sun.security.ssl.ClientHandshaker.serverCertificate(ClientHandshaker.java:1514)
> 	at sun.security.ssl.ClientHandshaker.processMessage(ClientHandshaker.java:216)
> 	at sun.security.ssl.Handshaker.processLoop(Handshaker.java:1026)
> 	at sun.security.ssl.Handshaker.process_record(Handshaker.java:961)
> 	at sun.security.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:1072)
> 	at sun.security.ssl.SSLSocketImpl.performInitialHandshake(SSLSocketImpl.java:1385)
> 	at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1413)
> 	at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1397)
> 	at sun.net.www.protocol.https.HttpsClient.afterConnect(HttpsClient.java:559)
> 	at sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.connect(AbstractDelegateHttpsURLConnection.java:185)
> 	at sun.net.www.protocol.http.HttpURLConnection.followRedirect0(HttpURLConnection.java:2701)
> 	at sun.net.www.protocol.http.HttpURLConnection.followRedirect(HttpURLConnection.java:2623)
> 	at sun.net.www.protocol.http.HttpURLConnection.getInputStream0(HttpURLConnection.java:1806)
> 	at sun.net.www.protocol.http.HttpURLConnection.getInputStream(HttpURLConnection.java:1474)
> 	at sun.net.www.protocol.https.HttpsURLConnectionImpl.getInputStream(HttpsURLConnectionImpl.java:254)
> 	at org.gradle.wrapper.Download.downloadInternal(Download.java:58)
> 	at org.gradle.wrapper.Download.download(Download.java:44)
> 	at org.gradle.wrapper.Install$1.call(Install.java:61)
> 	at org.gradle.wrapper.Install$1.call(Install.java:48)
> 	at org.gradle.wrapper.ExclusiveFileAccessManager.access(ExclusiveFileAccessManager.java:65)
> 	at org.gradle.wrapper.Install.createDist(Install.java:48)
> 	at org.gradle.wrapper.WrapperExecutor.execute(WrapperExecutor.java:128)
> 	at org.gradle.wrapper.GradleWrapperMain.main(GradleWrapperMain.java:61)
> Caused by: sun.security.validator.ValidatorException: PKIX path validation failed: java.security.cert.CertPathValidatorException: timestamp check failed
> 	at sun.security.validator.PKIXValidator.doValidate(PKIXValidator.java:362)
> 	at sun.security.validator.PKIXValidator.engineValidate(PKIXValidator.java:270)
> 	at sun.security.validator.Validator.validate(Validator.java:260)
> 	at sun.security.ssl.X509TrustManagerImpl.validate(X509TrustManagerImpl.java:324)
> 	at sun.security.ssl.X509TrustManagerImpl.checkTrusted(X509TrustManagerImpl.java:229)
> 	at sun.security.ssl.X509TrustManagerImpl.checkServerTrusted(X509TrustManagerImpl.java:124)
> 	at sun.security.ssl.ClientHandshaker.serverCertificate(ClientHandshaker.java:1496)
> 	... 22 more
> Caused by: java.security.cert.CertPathValidatorException: timestamp check failed
> 	at sun.security.provider.certpath.PKIXMasterCertPathValidator.validate(PKIXMasterCertPathValidator.java:135)
> 	at sun.security.provider.certpath.PKIXCertPathValidator.validate(PKIXCertPathValidator.java:223)
> 	at sun.security.provider.certpath.PKIXCertPathValidator.validate(PKIXCertPathValidator.java:140)
> 	at sun.security.provider.certpath.PKIXCertPathValidator.engineValidate(PKIXCertPathValidator.java:79)
> 	at java.security.cert.CertPathValidator.validate(CertPathValidator.java:292)
> 	at sun.security.validator.PKIXValidator.doValidate(PKIXValidator.java:357)
> 	... 28 more
> Caused by: java.security.cert.CertificateNotYetValidException: NotBefore: Thu Mar 14 05:30:00 IST 2019
> 	at sun.security.x509.CertificateValidity.valid(CertificateValidity.java:270)
> 	at sun.security.x509.X509CertImpl.checkValidity(X509CertImpl.java:629)
> 	at sun.security.provider.certpath.BasicChecker.verifyTimestamp(BasicChecker.java:190)
> 	at sun.security.provider.certpath.BasicChecker.check(BasicChecker.java:144)
> 	at sun.security.provider.certpath.PKIXMasterCertPathValidator.validate(PKIXMasterCertPathValidator.java:125)
> 	... 33 more
> The command "eval ./gradlew assemble " failed. Retrying, 3 of 3.
> Listening for transport dt_socket at address: 8005
> Downloading https://services.gradle.org/distributions/gradle-5.2.1-bin.zip
> Exception in thread "main" javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path validation failed: java.security.cert.CertPathValidatorException: timestamp check failed
> 	at sun.security.ssl.Alerts.getSSLException(Alerts.java:192)
> 	at sun.security.ssl.SSLSocketImpl.fatal(SSLSocketImpl.java:1959)
> 	at sun.security.ssl.Handshaker.fatalSE(Handshaker.java:302)
> 	at sun.security.ssl.Handshaker.fatalSE(Handshaker.java:296)
> 	at sun.security.ssl.ClientHandshaker.serverCertificate(ClientHandshaker.java:1514)
> 	at sun.security.ssl.ClientHandshaker.processMessage(ClientHandshaker.java:216)
> 	at sun.security.ssl.Handshaker.processLoop(Handshaker.java:1026)
> 	at sun.security.ssl.Handshaker.process_record(Handshaker.java:961)
> 	at sun.security.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:1072)
> 	at sun.security.ssl.SSLSocketImpl.performInitialHandshake(SSLSocketImpl.java:1385)
> 	at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1413)
> 	at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1397)
> 	at sun.net.www.protocol.https.HttpsClient.afterConnect(HttpsClient.java:559)
> 	at sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.connect(AbstractDelegateHttpsURLConnection.java:185)
> 	at sun.net.www.protocol.http.HttpURLConnection.followRedirect0(HttpURLConnection.java:2701)
> 	at sun.net.www.protocol.http.HttpURLConnection.followRedirect(HttpURLConnection.java:2623)
> 	at sun.net.www.protocol.http.HttpURLConnection.getInputStream0(HttpURLConnection.java:1806)
> 	at sun.net.www.protocol.http.HttpURLConnection.getInputStream(HttpURLConnection.java:1474)
> 	at sun.net.www.protocol.https.HttpsURLConnectionImpl.getInputStream(HttpsURLConnectionImpl.java:254)
> 	at org.gradle.wrapper.Download.downloadInternal(Download.java:58)
> 	at org.gradle.wrapper.Download.download(Download.java:44)
> 	at org.gradle.wrapper.Install$1.call(Install.java:61)
> 	at org.gradle.wrapper.Install$1.call(Install.java:48)
> 	at org.gradle.wrapper.ExclusiveFileAccessManager.access(ExclusiveFileAccessManager.java:65)
> 	at org.gradle.wrapper.Install.createDist(Install.java:48)
> 	at org.gradle.wrapper.WrapperExecutor.execute(WrapperExecutor.java:128)
> 	at org.gradle.wrapper.GradleWrapperMain.main(GradleWrapperMain.java:61)
> Caused by: sun.security.validator.ValidatorException: PKIX path validation failed: java.security.cert.CertPathValidatorException: timestamp check failed
> 	at sun.security.validator.PKIXValidator.doValidate(PKIXValidator.java:362)
> 	at sun.security.validator.PKIXValidator.engineValidate(PKIXValidator.java:270)
> 	at sun.security.validator.Validator.validate(Validator.java:260)
> 	at sun.security.ssl.X509TrustManagerImpl.validate(X509TrustManagerImpl.java:324)
> 	at sun.security.ssl.X509TrustManagerImpl.checkTrusted(X509TrustManagerImpl.java:229)
> 	at sun.security.ssl.X509TrustManagerImpl.checkServerTrusted(X509TrustManagerImpl.java:124)
> 	at sun.security.ssl.ClientHandshaker.serverCertificate(ClientHandshaker.java:1496)
> 	... 22 more
> Caused by: java.security.cert.CertPathValidatorException: timestamp check failed
> 	at sun.security.provider.certpath.PKIXMasterCertPathValidator.validate(PKIXMasterCertPathValidator.java:135)
> 	at sun.security.provider.certpath.PKIXCertPathValidator.validate(PKIXCertPathValidator.java:223)
> 	at sun.security.provider.certpath.PKIXCertPathValidator.validate(PKIXCertPathValidator.java:140)
> 	at sun.security.provider.certpath.PKIXCertPathValidator.engineValidate(PKIXCertPathValidator.java:79)
> 	at java.security.cert.CertPathValidator.validate(CertPathValidator.java:292)
> 	at sun.security.validator.PKIXValidator.doValidate(PKIXValidator.java:357)
> 	... 28 more
> Caused by: java.security.cert.CertificateNotYetValidException: NotBefore: Thu Mar 14 05:30:00 IST 2019
> 	at sun.security.x509.CertificateValidity.valid(CertificateValidity.java:270)
> 	at sun.security.x509.X509CertImpl.checkValidity(X509CertImpl.java:629)
> 	at sun.security.provider.certpath.BasicChecker.verifyTimestamp(BasicChecker.java:190)
> 	at sun.security.provider.certpath.BasicChecker.check(BasicChecker.java:144)
> 	at sun.security.provider.certpath.PKIXMasterCertPathValidator.validate(PKIXMasterCertPathValidator.java:125)
> 	... 33 more
> The command "eval ./gradlew assemble " failed 3 times.
> The command "./gradlew assemble" failed and exited with 1 during .
> Your build has been stopped.{noformat}



--
This message was sent by Atlassian Jira
(v8.3.2#803003)