It's all about the answers!

Ask a question

Does Git repositories on DevOps Services support SSLv3?


Cesar Ivan Orozco Cervantes (10910) | asked Oct 24 '14, 3:35 p.m.
edited Oct 24 '14, 3:36 p.m.
Hi all,

I'm having some problems to clone repositories using EGit client on RAD, but until a couple of weeks ago it was working fine, I tried with different EGit versions just to test, but unfortunately I got the same problem, I even tried in the same workspace in which I already had cloned JazzHub repositories before, but now its failing, this is the stack trace:

org.eclipse.jgit.api.errors.TransportException: https://hub.jazz.net/git/cesarivan/test1: cannot open git-upload-pack
    at org.eclipse.jgit.api.LsRemoteCommand.call(LsRemoteCommand.java:196)
    at org.eclipse.egit.core.op.ListRemoteOperation.run(ListRemoteOperation.java:99)
    at org.eclipse.egit.ui.internal.clone.SourceBranchPage$8.run(SourceBranchPage.java:324)
    at org.eclipse.jface.operation.ModalContext$ModalContextThread.run(ModalContext.java:121)
Caused by: org.eclipse.jgit.errors.TransportException: https://hub.jazz.net/git/cesarivan/test1: cannot open git-upload-pack
    at org.eclipse.jgit.transport.TransportHttp.connect(TransportHttp.java:521)
    at org.eclipse.jgit.transport.TransportHttp.openFetch(TransportHttp.java:309)
    at org.eclipse.jgit.api.LsRemoteCommand.call(LsRemoteCommand.java:175)
    ... 3 more
Caused by: javax.net.ssl.SSLHandshakeException: Received fatal alert: handshake_failure
    at com.ibm.jsse2.j.a(j.java:10)
    at com.ibm.jsse2.j.a(j.java:13)
    at com.ibm.jsse2.qc.b(qc.java:789)
    at com.ibm.jsse2.qc.a(qc.java:696)
    at com.ibm.jsse2.qc.h(qc.java:391)
    at com.ibm.jsse2.qc.a(qc.java:793)
    at com.ibm.jsse2.qc.startHandshake(qc.java:280)
    at com.ibm.net.ssl.www2.protocol.https.c.afterConnect(c.java:8)
    at com.ibm.net.ssl.www2.protocol.https.d.connect(d.java:56)
    at sun.net.www.protocol.http.HttpURLConnection.getInputStream(HttpURLConnection.java:1311)
    at java.net.HttpURLConnection.getResponseCode(HttpURLConnection.java:479)
    at com.ibm.net.ssl.www2.protocol.https.b.getResponseCode(b.java:76)
    at org.eclipse.jgit.transport.http.JDKHttpConnection.getResponseCode(JDKHttpConnection.java:98)
    at org.eclipse.jgit.util.HttpSupport.response(HttpSupport.java:168)
    at org.eclipse.jgit.transport.TransportHttp.connect(TransportHttp.java:475)
    ... 5 more


And on the repositories I cloned before, I can't commit changes.

I ran this command and seems that JazzHub does not support SSLv3 anymore:

wget  --secure-protocol=SSLv3 https://hub.jazz.net/git/cesarivan/test1
--2014-10-24 13:47:56--  https://hub.jazz.net/git/cesarivan/test1
Resolving hub.jazz.net... 184.173.83.37
Connecting to hub.jazz.net|184.173.83.37|:443... connected.
OpenSSL: error:14094410:SSL routines:SSL3_READ_BYTES:sslv3 alert handshake failure
Unable to establish SSL connection.

So, the question is, does DevOps services repositories support SSLv3?

Thanks.

One answer



permanent link
Vincent Phan (6) | answered Oct 27 '14, 7:46 p.m.
JAZZ DEVELOPER
You may need to upgrade your Java runtime in RAD to comply with the latest security requirements.  We no longer support SSLv3.  Please refer to this post for more information.

https://developer.ibm.com/answers/questions/29235/known-problem-with-using-rtc-eclipse-client-on-oracle-java-16/

Your answer


Register or to post your answer.


Dashboards and work items are no longer publicly available, so some links may be invalid. We now provide similar information through other means. Learn more here.