Opened 7 years ago

Closed 7 years ago

#2040 closed defect (fixed)

TestFile fails due to updated server certificate

Reported by: Nicklas Nordborg Owned by: everyone
Priority: minor Milestone: BASE 3.10
Component: test Version:
Keywords: Cc:

Description

net.sf.basedb.core.BaseException: Could not load metadata for URL:https://base.onk.lu.se/onk/images/baselogo.png
        at net.sf.basedb.core.File.updateURLMetadata(File.java:1067)
        at net.sf.basedb.core.File.setUrl(File.java:1035)
        at TestFile.test_create(TestFile.java:137)
        at TestFile.test_all(TestFile.java:84)
        at TestFile.main(TestFile.java:68)
Caused by: javax.net.ssl.SSLHandshakeException: 
  sun.security.validator.ValidatorException: PKIX path building failed: 
  sun.security.provider.certpath.SunCertPathBuilderException: 
  unable to find valid certification path to requested target
...

Change History (4)

comment:1 by Nicklas Nordborg, 7 years ago

Resolution: fixed
Status: newclosed

(In [7223]) Fixes #2040: TestFile fails due to updated server certificate

Updated the certificate for base.onk.lu.se.

comment:2 by Nicklas Nordborg, 7 years ago

Resolution: fixed
Status: closedreopened

Arrgh... after switching to Let's encrypt the certificate has a short lifetime. This test will most likely fail for almost every release. Don't know if we can automatically download the current certificate or use some other server. For now, I'll just make sure that a better error message is displayed instead of the unfriendly "PKIX path building failed".

comment:3 by Nicklas Nordborg, 7 years ago

(In [7280]) References #2040: TestFile fails due to updated server certificate

Added call to checkValidity() which will give a better error message in case the current certificate has expired. But there is still a problem since the server can be updated with a new certificate before the current one expires.

comment:4 by Nicklas Nordborg, 7 years ago

Resolution: fixed
Status: reopenedclosed

(In [7281]) Fixes #2040: TestFile fails due to updated server certificate

Updated to the current certificate to get rid of the immediate problem. The certificate expires April 1st so this problem will come back.

Note: See TracTickets for help on using tickets.