Certificate for <eclipse.sonarlint.org> doesn't match any of the subject alternative names: [*.sonarsource.com, sonarsource.com]

[b.pr...@tarent.de]

Hi,

there seems to be an issue with the SSL certificate of eclipse.sonarlint.org, since there is no matching subject alternative name.

Unable to read repository at http://eclipse.sonarlint.org/compositeContent.xml.

javax.net.ssl.SSLException: Certificate for <eclipse.sonarlint.org> doesn't match any of the subject alternative names: [*.sonarsource.com, sonarsource.com]
    at org.apache.http.conn.ssl.AbstractVerifier.verify(AbstractVerifier.java:165)
    at org.apache.http.conn.ssl.BrowserCompatHostnameVerifier.verify(BrowserCompatHostnameVerifier.java:61)
    at org.apache.http.conn.ssl.AbstractVerifier.verify(AbstractVerifier.java:141)
    at org.apache.http.conn.ssl.AbstractVerifier.verify(AbstractVerifier.java:114)
    at org.apache.http.conn.ssl.SSLSocketFactory.verifyHostname(SSLSocketFactory.java:580)
    at org.apache.http.conn.ssl.SSLSocketFactory.connectSocket(SSLSocketFactory.java:554)
    at org.eclipse.ecf.provider.filetransfer.httpclient4.SNIAwareHttpClient$1.connectSocket(SNIAwareHttpClient.java:64)
    at org.apache.http.conn.ssl.SSLSocketFactory.connectSocket(SSLSocketFactory.java:412)
    at org.apache.http.impl.conn.DefaultClientConnectionOperator.openConnection(DefaultClientConnectionOperator.java:179)
    at org.apache.http.impl.conn.ManagedClientConnectionImpl.open(ManagedClientConnectionImpl.java:328)
    at org.apache.http.impl.client.DefaultRequestDirector.tryConnect(DefaultRequestDirector.java:612)
    at org.apache.http.impl.client.DefaultRequestDirector.execute(DefaultRequestDirector.java:447)
    at org.apache.http.impl.client.AbstractHttpClient.doExecute(AbstractHttpClient.java:884)
    at org.apache.http.impl.client.CloseableHttpClient.execute(CloseableHttpClient.java:82)
    at org.eclipse.ecf.provider.filetransfer.httpclient4.HttpClientFileSystemBrowser.runRequest(HttpClientFileSystemBrowser.java:263)
    at org.eclipse.ecf.provider.filetransfer.browse.AbstractFileSystemBrowser$DirectoryJob.run(AbstractFileSystemBrowser.java:69)
    at org.eclipse.core.internal.jobs.Worker.run(Worker.java:56)

eclipse.buildId=4.7.1.M20171009-0410
java.version=1.8.0_131
java.vendor=Oracle Corporation
BootLoader constants: OS=linux, ARCH=x86_64, WS=gtk, NL=de_DE
Framework arguments:  -product org.eclipse.epp.package.jee.product
Command-line arguments:  -os linux -ws gtk -arch x86_64 -product org.eclipse.epp.package.jee.product

Regards,

Brian

[Julien HENRY]

Hi Brian,

This should be fixed now.

Thanks for the feedback!

Julien

[yosh...@gmail.com]

Hello, Mr. Julien,

We also can not read repository at http://eclipse.sonarlint.org/artifacts.xml .

Is this not related to this?

eclipse.buildId=4.4.2.M20150204-1700

java.version=1.8.0_121

java.vendor=Oracle Corporation

BootLoader constants: OS=linux, ARCH=x86_64, WS=gtk, NL=en_US

Framework arguments:  -product org.eclipse.epp.package.standard.product -application org.eclipse.equinox.p2.director -repository http://eclipse.sonarlint.org/ -installIU org.sonarlint.eclipse.feature.feature.group

Command-line arguments:  -os linux -ws gtk -arch x86_64 -product org.eclipse.epp.package.standard.product -application org.eclipse.equinox.p2.director -repository http://eclipse.sonarlint.org/ -installIU org.sonarlint.eclipse.feature.feature.group

  :

  :

!ENTRY org.eclipse.equinox.p2.transport.ecf 4 1002 2017-10-23 03:52:45.635

!MESSAGE Unable to read repository at http://eclipse.sonarlint.org/artifacts.xml.

!STACK 0

javax.net.ssl.SSLException: hostname in certificate didn't match: <eclipse.sonarlint.org> != <*.sonarsource.com> OR <*.sonarsource.com> OR <sonarsource.com>

        at org.apache.http.conn.ssl.AbstractVerifier.verify(AbstractVerifier.java:238)

        at org.apache.http.conn.ssl.BrowserCompatHostnameVerifier.verify(BrowserCompatHostnameVerifier.java:54)

        at org.apache.http.conn.ssl.AbstractVerifier.verify(AbstractVerifier.java:159)

        at org.apache.http.conn.ssl.AbstractVerifier.verify(AbstractVerifier.java:140)

        at org.apache.http.conn.ssl.SSLSocketFactory.verifyHostname(SSLSocketFactory.java:561)

        at org.apache.http.conn.ssl.SSLSocketFactory.connectSocket(SSLSocketFactory.java:536)

        at org.apache.http.conn.ssl.SSLSocketFactory.connectSocket(SSLSocketFactory.java:403)

        at org.apache.http.impl.conn.DefaultClientConnectionOperator.openConnection(DefaultClientConnectionOperator.java:177)

        at org.apache.http.impl.conn.ManagedClientConnectionImpl.open(ManagedClientConnectionImpl.java:304)

        at org.apache.http.impl.client.DefaultRequestDirector.tryConnect(DefaultRequestDirector.java:611)

        at org.apache.http.impl.client.DefaultRequestDirector.execute(DefaultRequestDirector.java:446)

        at org.apache.http.impl.client.AbstractHttpClient.doExecute(AbstractHttpClient.java:863)

        at org.apache.http.impl.client.CloseableHttpClient.execute(CloseableHttpClient.java:82)

        at org.eclipse.ecf.provider.filetransfer.httpclient4.HttpClientFileSystemBrowser.runRequest(HttpClientFileSystemBrowser.java:259)

        at org.eclipse.ecf.provider.filetransfer.browse.AbstractFileSystemBrowser$DirectoryJob.run(AbstractFileSystemBrowser.java:69)

        at org.eclipse.core.internal.jobs.Worker.run(Worker.java:54)

I'm sorry to bothering you.

Regards,

Yoshida

2017年10月20日金曜日 19時17分34秒 UTC+9 Julien HENRY:

[Julien HENRY]

Hi Yoshida,

This is a composite update site. The full URL of metadata is: http://eclipse.sonarlint.org/compositeArtifacts.xml 

I did a test with Eclipse Neon and it is working fine. Is there anything special in your configuration?

Regards,

Julien Henry | SonarSource

Developer

https://sonarsource.com

--
You received this message because you are subscribed to the Google Groups "SonarLint" group.
To unsubscribe from this group and stop receiving emails from it, send an email to sonarlint+unsubscribe@googlegroups.com.

To view this discussion on the web visit https://groups.google.com/d/msgid/sonarlint/1e4500a7-3cc9-413d-bcfa-817e70f88d4c%40googlegroups.com.

For more options, visit https://groups.google.com/d/optout.

[yosh...@gmail.com]

Hi Mr. Julien,

Thank you very much for your quick and kind response.

But I wonder that why this command try to access to artifacts.xml not compositeArtifacts.xml ...

  ./eclipse -product org.eclipse.epp.package.standard.product -application org.eclipse.equinox.p2.director -repository http://eclipse.sonarlint.org/ -installIU org.sonarlint.eclipse.feature.feature.group

I'll continue trial and error during a bit. Thank you!

Regards,

Yoshida

2017年10月25日水曜日 17時08分18秒 UTC+9 Julien HENRY:

To unsubscribe from this group and stop receiving emails from it, send an email to sonarlint+...@googlegroups.com.

[Julien HENRY]

Hi Yoshida,

I don't know very well p2 and p2 director. My understanding is that when you configure an update site like http://an.url/ P2 will try sequentially to read some files (http://an.url/compositeArtifacts.xml, http://an.url/artifacts.xml, + their gz versions). I don't know exactly in which order. It may depends on the Eclipse version. On my side I have tested in Eclipse Oxygen (but directly in the UI, not from command line) and it worked fine.

++

Julien Henry | SonarSource

Developer

https://sonarsource.com

To unsubscribe from this group and stop receiving emails from it, send an email to sonarlint+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/sonarlint/ea100ec5-12df-4813-9c84-cab0edf782f6%40googlegroups.com.