Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

SSL connection fails due to no available cipher on IBM JRE #4679

ysohda opened this Issue Jun 20, 2017 · 4 comments


None yet
3 participants
Copy link

commented Jun 20, 2017


Due to no available cipher for TLSv1.2 on IBM JRE, SSL connection fails.

The reason of no available cipher is a difference of cipher suite names as I reported on jruby-openssl:
The pull request to solve this issue has been merged:

So, it would be nice if jruby-openssl bundled with jruby is updated on next jruby release.
@kares, could you please help us to update jruby-openssl in jruby?

Thank you,


>jruby -v
jruby (2.3.3) 2017-06-15 33c6439 IBM J9 VM 2.8 on pwa6480sr4fp5-20170421_01 (SR4 FP5) +jit [mswin32-x86_64]

OS: Windows 7 Professional (x64)

Current Behavior

>gem install bundler
ERROR:  Could not find a valid gem 'bundler' (>= 0), here is why:
   Unable to download data from - Received fatal alert: handshake_failure (

With debug option:

>jruby -S gem install bundler
IBMJSSE2 will not allow protocol SSLv3 per set to TRUE or default
IBMJSSEProvider2 Build-Level: -20170331
Installed Providers =
Is initial handshake: true
Ignoring unsupported cipher suite: SSL_RSA_WITH_DES_CBC_SHA for TLSv1.2
Ignoring unsupported cipher suite: SSL_DHE_RSA_WITH_DES_CBC_SHA for TLSv1.2
No available cipher suite for TLSv1.2

Expected Behavior

When I replaced "jruby-\lib\ruby\stdlib\jopenssl.jar" by one in, it works as expected:

>gem install bundler
Fetching: bundler-1.15.1.gem (100%)
Successfully installed bundler-1.15.1
1 gem installed

This comment has been minimized.

Copy link

commented Jun 21, 2017

next JRuby release (9.2) will for sure update. we have not forgoten about this, there's simply a lot on the plate (more long term issues that need adressing). also thought the pre release is useful for now. sorry for the wait, doing my best ...


This comment has been minimized.

Copy link

commented Aug 9, 2017

expected to be resolved with #4726

@kares kares closed this Aug 9, 2017

@kares kares removed the in progress label Aug 9, 2017


This comment has been minimized.

Copy link

commented Aug 21, 2017

Hi Kares,
Thank you for your work to update jruby-openssl in JRuby.
It looks that JRuby is scheduled, so it would be nice if your effort is also in
Thank you,


This comment has been minimized.

Copy link

commented Oct 29, 2017

So.... for the dummies out here, what's the work-around to get past this problem?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
You can’t perform that action at this time.