Fork me on GitHub
#aws
<
2019-01-29
>
kaffein12:01:53

has anyone ever experienced an SSL issue using the aws-api please ?

kaffein12:01:07

when trying to create an AMI group on AWS, here is my stacktrace

ghadi12:01:30

Which jdk and platform and can you provide any code snippets?

kaffein12:01:01

i'm on jdk 10 with clj 1.10 on mac os x

kaffein12:01:26

yes I can provide a snippet, just give me a second so that I can find it please 😉

kaffein13:01:59

I forgot to push my code so the only thing I'm not sure of is the syntax for the api call on the last line ... but it kinda looks like this @ghadi

ghadi14:01:09

Hmmm I can't reproduce that @kaffein Are you in osx or on a container?

kaffein14:01:59

i'm not on a container

kaffein14:01:12

that's weird

kaffein14:01:26

I should check one more time on my side perhaps

kaffein14:01:31

maybe I made a mistake somewhere

ghadi14:01:53

any custom thing you're hitting, or a corporate proxy or something? (IAM is global service, so it's probably not something region specific)

kaffein14:01:36

no corporate or specific settings I think since I'm using it from home

kaffein14:01:01

I may have missed something then : I will check it one more time this evening

kaffein14:01:48

thanks a lot for your help @ghadiappreciate it

ghadi14:01:54

no problem

gws16:01:12

@kaffein https://github.com/aws/aws-sdk-java/issues/1778 it looks like others have had a similar issue with Java 10 and macOS, where it seems the Amazon certificates didn't get shipped with the JDK. are you able to try Java 11?

👍 2
ghadi16:01:11

that was my next thought!

ghadi16:01:31

I know they restored some certificates from JDK9->JDK10... didn't realize there was a secondary problem!

kaffein16:01:22

Thanks a lot @gws and @ghadi I can try to upgrade to java 11 to see if that solves the problem

kaffein16:01:34

Will let you guys know

ghadi17:01:00

cool brew cask install adoptopenjdk11

devn18:01:45

@ghadi oh, hello. looks like some new stuff has been added for credential refresh?

devn18:01:13

was getting an expired token exception, just bumped libs to see if the recent auto-refreshing-credentials stuff fixes my wagon

ghadi18:01:24

Yeah we fixed a nasty bug

❤️ 2
ghadi18:01:35

It wasn't refreshing properly before @devn

devn18:01:58

@ghadi sweet, thanks!

devn18:01:52

yep, that did the trick.

kaffein21:01:56

I've upgraded my java install to use jdk 11 and it indeed solved the SSL issue!!again thanks a lot @ghadi 👍

ghadi21:01:53

thank you for following up @kaffein

ghadi21:01:17

really appreciated! (grumble....I wish AWS services used a common trust chain)

👍 1