DefaultConnectionContext.builder().skipSslValidation(true) no longer appears to work?

[mchitwood]

I upgraded from 2.0.3 to 2.1.0 and receive a null exception when I try to create a ReactorCloudFoundryClient.

[cf-gitbot]

We have created an issue in Pivotal Tracker to manage this:

https://www.pivotaltracker.com/story/show/136976551

The labels on this github issue will be updated when the story is started.

[nebhale]

Can you please include the stack of the error? Our testing disables SSL validation in many of our environments, so we believe that it works as it always has.

[mchitwood]

2017-01-03 15:55:00.283  WARN 6924 --- [enerContainer-3] cloudfoundry-client.trust                : Trusting SSL Certificate for api.system.asv-pr.ice.predix.io:443

java.nio.channels.UnresolvedAddressException
	at sun.nio.ch.Net.checkAddress(Unknown Source)
	at sun.nio.ch.SocketChannelImpl.connect(Unknown Source)
	at io.netty.channel.socket.nio.NioSocketChannel.doConnect(NioSocketChannel.java:331)
	at io.netty.channel.nio.AbstractNioChannel$AbstractNioUnsafe.connect(AbstractNioChannel.java:254)
	at io.netty.channel.DefaultChannelPipeline$HeadContext.connect(DefaultChannelPipeline.java:1266)
	at io.netty.channel.AbstractChannelHandlerContext.invokeConnect(AbstractChannelHandlerContext.java:556)
	at io.netty.channel.AbstractChannelHandlerContext.connect(AbstractChannelHandlerContext.java:541)
	at io.netty.channel.AbstractChannelHandlerContext.connect(AbstractChannelHandlerContext.java:523)
	at io.netty.channel.DefaultChannelPipeline.connect(DefaultChannelPipeline.java:985)
	at io.netty.channel.AbstractChannel.connect(AbstractChannel.java:255)
	at io.netty.bootstrap.Bootstrap$3.run(Bootstrap.java:252)
	at io.netty.util.concurrent.AbstractEventExecutor.safeExecute(AbstractEventExecutor.java:163)
	at io.netty.util.concurrent.SingleThreadEventExecutor.runAllTasks(SingleThreadEventExecutor.java:418)
	at io.netty.channel.nio.NioEventLoop.run(NioEventLoop.java:454)
	at io.netty.util.concurrent.SingleThreadEventExecutor$5.run(SingleThreadEventExecutor.java:873)
	at java.lang.Thread.run(Unknown Source)

I am accessing cloudfoundry through a proxy server so I am using a ProxyConfiguration as well.

[nebhale]

I've just tried to connect to the address listed there and cannot connect to it:

$: telnet api.system.asv-pr.ice.predix.io 443
Trying 65.216.161.18...
telnet: connect to address 65.216.161.18: Operation timed out
telnet: Unable to connect to remote host

I'd believe that this is behaving as expected and that endpoint isn't actually listening.

[mchitwood]

This service is not accessible from the Internet - I verified that I can connect using the cf client.

[nebhale]

Can you please post over the output of https://api.system.asv-pr.ice.predix.io/v2/info?

[mchitwood]

Here is the version information from the above output. Let me know if there is a specific value you are looking for. Thanks!

"min_cli_version":null,"min_recommended_cli_version":null,"api_version":"2.62.0"

[mchitwood]

I appear to get an (unusable?) connection object when I do not explicitly disable ssl certificate validation but I receive the same stack trace as soon as I issue an operation. I have rolled back to 2.0.4 and the code works without any issues.

    DefaultConnectionContext connectionContext = DefaultConnectionContext.builder()
        .apiHost(uri.getHost())
        .port(443)
        .keepAlive(false)
        .proxyConfiguration(getProxyConfiguration())
        .build();

   ....

    try {
        ops1.spaces().get(GetSpaceRequest.builder().name(spaceName).build()).block().getId();
        addServiceMessage(service, "CF organization (" + ops1.getOrganization() + ") space (" + spaceName + ") already exists"); 
    }
    catch (Throwable t) {
        t.printStackTrace();
        ops1.spaces().create(CreateSpaceRequest.builder().name(spaceName).build()).block();
        addServiceMessage(service, "CF organization (" + ops1.getOrganization() + ") space (" + spaceName + ") created");        
    }

[nebhale]

RIght, I believe that the issue is around how DNS is resolved when using a proxy. It's going to take a bit of time for us to build an environment that can replicate this problem, but we'll take a look.

[nebhale]

@adrian-herscu The new re-occurance of #479, is being tracked here.

[adrian-herscu]

So... Is there any known working version?

[nebhale]

Anything in the 2.0.x line.

[adrian-herscu]

origin/2.0.x fails to build:

[ERROR] Failed to execute goal com.squareup.wire:wire-maven-plugin:2.2.0:generat
e-sources (default) on project cloudfoundry-client: Wire Plugin: Failure compili
ng proto sources. Failed to locate envelope.proto in [C:\Users\212600552\project
s\cf-java-client\cloudfoundry-client\..\vendor\dropsonde-protocol\events] -> [He
lp 1]