Fork me on GitHub
#off-topic
<
2016-03-22
>
urbanslug05:03:46

Good morning from Nairobi.

jumar07:03:03

@swizzard: I tried to test the connection to https://www.blubrry.com/programs/ both in java and clojure (clj-http, clj-http-lite) and the error is same for me. All I can say that the problem really is somewhere deep in java implementation. I checked the site via https://www.ssllabs.com/ssltest/analyze.html?d=www.blubrry.com and it seems that any version of java is not able to connect to this website 😞

jumar07:03:06

Even If I disable hostname verification it doesn’t help

jumar08:03:06

@swizzard: although hard to find, the solution was actually quite simple - just install Unlimited Strength Jurisdiction Policy Files: http://www.oracle.com/technetwork/java/javase/downloads/jce8-download-2133166.html

jumar08:03:53

When you enable ssl debug output you will see “Ignoring unavailable cipher suite” in output if you don’t have them already installed, check http://stackoverflow.com/questions/28380420/ignoring-unsupported-cipher-suite-message-when-djavax-net-debug-sslhandshak

jumar08:03:04

I was mistaken because I already have them in my java home - but apparently they were wrong / obsolete. Once I installed the ciphers I am able to connect to https://www.blubrry.com/programs/ - both from java and clj-http

jumar08:03:29

This looks like that server only supports ciphers that are not available by default