Skip to main content
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] [List Home]
Re: [m2e-users] How to enable strong cipher suites for m2e plug-in
One thing to check, Run As > Maven allows you to choose a different Maven and Java which could support a different cipher suite?

On 25 January 2017 at 13:22, Isaac Montoya Orozco <imontoya@xxxxxxxxxxx> wrote:
Can't access to maven repository using strong encryption in Eclipse Luna.
 
Connecting to a new https maven repository uisng Update Project with "Force Update
of Snaphots/Releases" result in error  "handhake_failure"
 
Output from java -version:
Java(TM) SE Runtime Environment (build pwa6480sr3fp10-20160720_02
(SR3fp10))
IBM J9 VM (build 2.8, JRE 1.8.0 Windows 7 amd64-64 Compressed
References 20160719_312156 (JIT enabled, AOT enabled)
J9VM - R28_Java8_SR3_20160719_1144_B312156
JIT  - tr.r14.java_20160629_120284.01
GC   - R28_Java8_SR3_20160719_1144_B312156_CMPRSS
J9CL - 20160719_312156)
JCL - 20160719_01 based on Oracle jdk8u101-b13
 
- The error occurs when running Maven - Update Project with "Force Update of Snaphots/Releases".
- Executing a maven build with Run As - maven build works fine.

Their repository allows the following cipher suites (openssl names):
tls1_2: ECDHE-RSA-AES256-GCM-SHA384
tls1_2: ECDHE-RSA-AES256-SHA384
tls1_2: ECDHE-RSA-AES128-GCM-SHA256
tls1_2: ECDHE-RSA-AES128-SHA256
 
m2e uses only the following cipher suite (from console output captured running with -Djavax.net.debug=ssl:handshake)
SSL_RSA_WITH_3DES_EDE_CBC_SHA
 
Their IT Security department does not allow the use of this weaker cipher suite in their organization, so downgrading on the
server side is not an easy option.
 
I  really appreciate your help.
 
Regards.
                           
 
to add unrestricted policy files, the instructions are described in this technote : http://www-01.ibm.com/support/docview.wss?uid=swg21245273
applied Unrestricted SDK JCE policy files for "Java 5.0 SR16, Java 6 SR13, Java 6 SR5 (J9 VM2.6), Java 7 SR4,
Java 8 GA, and all later releases" URL : https://www14.software.ibm.com/webapp/iwm/web/preLogin.do?source=jcesdk
              
                                                                      
The exact errors are:                                                 
                                                                      
Errors occured during the build :

Building workspace                                                    
                                                                      
Details: Errors occurred during the build. Errors running builder 'Maven Project Builder' on project 'test'.     
Could not calculate build plan: Plugin org.apache.maven.plugins:maven-resources-plugin:2.6 or one of its     
dependencies could not be resolved: Failed to read artifact descriptor
for org.apache.maven.plugins:maven-resources-plugin:jar:2.6           
Plugin org.apache.maven.plugins:maven-resources-plugin:2.6 or one of its
dependencies could not be resolved: Failed to read artifact descriptor
for org.apache.maven.plugins:maven-resources-plugin:jar:2.6           
Could not calculate build plan: Plugin                                
org.apache.maven.plugins:maven-resources-plugin:2.6 or one of its     
dependencies could not be resolved: Failed to read artifact descriptor
for org.apache.maven.plugins:maven-resources-plugin:jar:2.6           
Plugin org.apache.maven.plugins:maven-resources-plugin:2.6 or one of its
dependencies could not be resolved: Failed to read artifact descriptor
for org.apache.maven.plugins:maven-resources-plugin:jar:2.6           
                                                                      
Updating Maven Project                                                
Could not calculate build plan: Plugin                                
org.apache.maven.plugins:maven-resources-plugin:2.6 or one of its     
dependencies could not be resolved: Failed to read artifact descriptor
for org.apache.maven.plugins:maven-resources-plugin:jar:2.6           
Plugin org.apache.maven.plugins:maven-resources-plugin:2.6 or one of its
dependencies could not be resolved: Failed to read artifact descriptor
for org.apache.maven.plugins:maven-resources-plugin:jar:2.6           
 
Error Updating Maven Configuration                                    
                                                                      
Unable to update maven configuration for the following projects       
                                                                      
| Project Name | Error |                                              
| :--- | |                                                            
| test | Received fatal alert: handshake_failure |     


_______________________________________________
m2e-users mailing list
m2e-users@xxxxxxxxxxx
To change your delivery options, retrieve your password, or unsubscribe from this list, visit
https://dev.eclipse.org/mailman/listinfo/m2e-users

Back to the top