NetBSD Problem Report #55051

From www@netbsd.org  Thu Mar  5 22:07:52 2020
Return-Path: <www@netbsd.org>
Received: from mail.netbsd.org (mail.netbsd.org [199.233.217.200])
	(using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
	(Client CN "mail.NetBSD.org", Issuer "mail.NetBSD.org CA" (not verified))
	by mollari.NetBSD.org (Postfix) with ESMTPS id 4F4A41A9217
	for <gnats-bugs@gnats.NetBSD.org>; Thu,  5 Mar 2020 22:07:52 +0000 (UTC)
Message-Id: <20200305220751.797F41A9246@mollari.NetBSD.org>
Date: Thu,  5 Mar 2020 22:07:51 +0000 (UTC)
From: elchaconco@gmail.com
Reply-To: elchaconco@gmail.com
To: gnats-bugs@NetBSD.org
Subject: Error SSL auth
X-Send-Pr-Version: www-1.0

>Number:         55051
>Category:       bin
>Synopsis:       Error SSL auth
>Confidential:   no
>Severity:       serious
>Priority:       high
>Responsible:    bin-bug-people
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Thu Mar 05 22:10:02 +0000 2020
>Last-Modified:  Fri Mar 06 23:10:01 +0000 2020
>Originator:     Luis Fernando Chacon
>Release:        9.0
>Organization:
SIMPLE S.A.
>Environment:
NetBSD localhost 9.0 NetBSD 9.0 (GENERIC) #0: Fri Feb 14 00:06:28 UTC 2020  mkrepro@mkrepro.NetBSD.org:/usr/src/sys/arch/amd64/compile/GENERIC amd64
>Description:
Error auth ssl connection on https sites:

-bash-5.0$ export PKG_PATH=https://cdn.netbsd.org/pub/pkgsrc/packages/NetBSD/amd64/9.0/All
-bash-5.0$ pkg_add install bash
131859015354368:error:1416D108:SSL routines:tls_process_key_exchange:wrong signature length:/usr/src/crypto/external/bsd/openssl/dist/ssl/statem/statem_clnt.c:2369:
pkg_add: Can't process https://cdn.netbsd.org:443/pub/pkgsrc/packages/NetBSD/amd64/9.0/All/install*: Authentication error
pkg_add: no pkg found for 'install', sorry.
131859015354368:error:1416D108:SSL routines:tls_process_key_exchange:wrong signature length:/usr/src/crypto/external/bsd/openssl/dist/ssl/statem/statem_clnt.c:2369:
pkg_add: Can't process https://cdn.netbsd.org:443/pub/pkgsrc/packages/NetBSD/amd64/9.0/All/bash*: Authentication error
pkg_add: no pkg found for 'bash', sorry.
pkg_add: 2 package additions failed


>How-To-Repeat:
export PKG_PATH=https://cdn.netbsd.org/pub/pkgsrc/packages/NetBSD/amd64/9.0/All
-bash-5.0$ pkg_add install bash
>Fix:

>Release-Note:

>Audit-Trail:

Responsible-Changed-From-To: security-officer->bin-bug-people
Responsible-Changed-By: martin@NetBSD.org
Responsible-Changed-When: Fri, 06 Mar 2020 09:09:35 +0000
Responsible-Changed-Why:
Bug in pkgtools?


From: Luis Fernando Chacon <elchaconco@gmail.com>
To: gnats-bugs@netbsd.org
Cc: gnats-admin@netbsd.org, security-officer@netbsd.org, 
	netbsd-bugs@netbsd.org, martin@netbsd.org
Subject: Re: bin/55051 (Error SSL auth)
Date: Fri, 6 Mar 2020 18:07:42 -0500

 --0000000000001c08b005a037b935
 Content-Type: text/plain; charset="UTF-8"
 Content-Transfer-Encoding: quoted-printable

 Best regards, Yes, in other software too, like Java:

   java.security.InvalidAlgorithmParameterException: the trustAnchors
 parameter must be non-empty -> [Help 1]

 Detail output:

 -bash-5.0$ mvn clean install
 [INFO] Scanning for projects...
 [INFO]
 [INFO] ------------------------< com.simple:WSKonecta
 >------------------------
 [INFO] Building WSKonecta 1.0
 [INFO] --------------------------------[ war
 ]---------------------------------
 Downloading from central:
 https://repo.maven.apache.org/maven2/org/apache/maven/plugins/maven-clean-p=
 lugin/2.5/maven-clean-plugin-2.5.pom
 [INFO]
 ------------------------------------------------------------------------
 [INFO] BUILD FAILURE
 [INFO]
 ------------------------------------------------------------------------
 [INFO] Total time:  1.456 s
 [INFO] Finished at: 2020-03-06T18:06:06-05:00
 [INFO]
 ------------------------------------------------------------------------
 [ERROR] Plugin org.apache.maven.plugins:maven-clean-plugin:2.5 or one of
 its dependencies could not be resolved: Failed to read artifact descriptor
 for org.apache.maven.plugins:maven-clean-plugin:jar:2.5: Could not transfer
 artifact org.apache.maven.plugins:maven-clean-plugin:pom:2.5 from/to
 central (https://repo.maven.apache.org/maven2): Transfer failed for
 https://repo.maven.apache.org/maven2/org/apache/maven/plugins/maven-clean-p=
 lugin/2.5/maven-clean-plugin-2.5.pom:
 Unexpected error: java.security.InvalidAlgorithmParameterException: the
 trustAnchors parameter must be non-empty -> [Help 1]
 [ERROR]
 [ERROR] To see the full stack trace of the errors, re-run Maven with the -e
 switch.
 [ERROR] Re-run Maven using the -X switch to enable full debug logging.
 [ERROR]
 [ERROR] For more information about the errors and possible solutions,
 please read the following articles:
 [ERROR] [Help 1]
 http://cwiki.apache.org/confluence/display/MAVEN/PluginResolutionException
 -bash-5.0$ mvn clean install
 [INFO] Scanning for projects...
 [INFO]
 [INFO] ------------------------< com.simple:WSKonecta
 >------------------------
 [INFO] Building WSKonecta 1.0
 [INFO] --------------------------------[ war
 ]---------------------------------
 Downloading from central:
 https://repo.maven.apache.org/maven2/org/apache/maven/plugins/maven-clean-p=
 lugin/2.5/maven-clean-plugin-2.5.pom
 [INFO]
 ------------------------------------------------------------------------
 [INFO] BUILD FAILURE
 [INFO]
 ------------------------------------------------------------------------
 [INFO] Total time:  1.041 s
 [INFO] Finished at: 2020-03-06T18:06:14-05:00
 [INFO]
 ------------------------------------------------------------------------
 [ERROR] Plugin org.apache.maven.plugins:maven-clean-plugin:2.5 or one of
 its dependencies could not be resolved: Failed to read artifact descriptor
 for org.apache.maven.plugins:maven-clean-plugin:jar:2.5: Could not transfer
 artifact org.apache.maven.plugins:maven-clean-plugin:pom:2.5 from/to
 central (https://repo.maven.apache.org/maven2): Transfer failed for
 https://repo.maven.apache.org/maven2/org/apache/maven/plugins/maven-clean-p=
 lugin/2.5/maven-clean-plugin-2.5.pom:
 Unexpected error: java.security.InvalidAlgorithmParameterException: the
 trustAnchors parameter must be non-empty -> [Help 1]
 [ERROR]
 [ERROR] To see the full stack trace of the errors, re-run Maven with the -e
 switch.
 [ERROR] Re-run Maven using the -X switch to enable full debug logging.
 [ERROR]
 [ERROR] For more information about the errors and possible solutions,
 please read the following articles:
 [ERROR] [Help 1]
 http://cwiki.apache.org/confluence/display/MAVEN/PluginResolutionException
 -bash-5.0$

 Thanks!

 El vie., 6 mar. 2020, 4:09 a. m., <martin@netbsd.org> escribi=C3=B3:

 > Synopsis: Error SSL auth
 >
 > Responsible-Changed-From-To: security-officer->bin-bug-people
 > Responsible-Changed-By: martin@NetBSD.org
 > Responsible-Changed-When: Fri, 06 Mar 2020 09:09:35 +0000
 > Responsible-Changed-Why:
 > Bug in pkgtools?
 >
 >
 >
 >

 --0000000000001c08b005a037b935
 Content-Type: text/html; charset="UTF-8"
 Content-Transfer-Encoding: quoted-printable

 <div dir=3D"ltr">Best=C2=A0regards, Yes, in other software too, like Java:<=
 div><br></div><div>=C2=A0 java.security.InvalidAlgorithmParameterException:=
  the trustAnchors parameter must be non-empty -&gt; [Help 1]=C2=A0</div><di=
 v><br></div><div>Detail output:=C2=A0<br><div><br></div><div>-bash-5.0$ mvn=
  clean install<br>[INFO] Scanning for projects...<br>[INFO]<br>[INFO] -----=
 -------------------&lt; com.simple:WSKonecta &gt;------------------------<b=
 r>[INFO] Building WSKonecta 1.0<br>[INFO] --------------------------------[=
  war ]---------------------------------<br>Downloading from central: <a hre=
 f=3D"https://repo.maven.apache.org/maven2/org/apache/maven/plugins/maven-cl=
 ean-plugin/2.5/maven-clean-plugin-2.5.pom">https://repo.maven.apache.org/ma=
 ven2/org/apache/maven/plugins/maven-clean-plugin/2.5/maven-clean-plugin-2.5=
 .pom</a><br>[INFO] --------------------------------------------------------=
 ----------------<br>[INFO] BUILD FAILURE<br>[INFO] ------------------------=
 ------------------------------------------------<br>[INFO] Total time: =C2=
 =A01.456 s<br>[INFO] Finished at: 2020-03-06T18:06:06-05:00<br>[INFO] -----=
 -------------------------------------------------------------------<br>[ERR=
 OR] Plugin org.apache.maven.plugins:maven-clean-plugin:2.5 or one of its de=
 pendencies could not be resolved: Failed to read artifact descriptor for or=
 g.apache.maven.plugins:maven-clean-plugin:jar:2.5: Could not transfer artif=
 act org.apache.maven.plugins:maven-clean-plugin:pom:2.5 from/to central (<a=
  href=3D"https://repo.maven.apache.org/maven2">https://repo.maven.apache.or=
 g/maven2</a>): Transfer failed for <a href=3D"https://repo.maven.apache.org=
 /maven2/org/apache/maven/plugins/maven-clean-plugin/2.5/maven-clean-plugin-=
 2.5.pom">https://repo.maven.apache.org/maven2/org/apache/maven/plugins/mave=
 n-clean-plugin/2.5/maven-clean-plugin-2.5.pom</a>: Unexpected error: java.s=
 ecurity.InvalidAlgorithmParameterException: the trustAnchors parameter must=
  be non-empty -&gt; [Help 1]<br>[ERROR]<br>[ERROR] To see the full stack tr=
 ace of the errors, re-run Maven with the -e switch.<br>[ERROR] Re-run Maven=
  using the -X switch to enable full debug logging.<br>[ERROR]<br>[ERROR] Fo=
 r more information about the errors and possible solutions, please read the=
  following articles:<br>[ERROR] [Help 1] <a href=3D"http://cwiki.apache.org=
 /confluence/display/MAVEN/PluginResolutionException">http://cwiki.apache.or=
 g/confluence/display/MAVEN/PluginResolutionException</a><br>-bash-5.0$ mvn =
 clean install<br>[INFO] Scanning for projects...<br>[INFO]<br>[INFO] ------=
 ------------------&lt; com.simple:WSKonecta &gt;------------------------<br=
 >[INFO] Building WSKonecta 1.0<br>[INFO] --------------------------------[ =
 war ]---------------------------------<br>Downloading from central: <a href=
 =3D"https://repo.maven.apache.org/maven2/org/apache/maven/plugins/maven-cle=
 an-plugin/2.5/maven-clean-plugin-2.5.pom">https://repo.maven.apache.org/mav=
 en2/org/apache/maven/plugins/maven-clean-plugin/2.5/maven-clean-plugin-2.5.=
 pom</a><br>[INFO] ---------------------------------------------------------=
 ---------------<br>[INFO] BUILD FAILURE<br>[INFO] -------------------------=
 -----------------------------------------------<br>[INFO] Total time: =C2=
 =A01.041 s<br>[INFO] Finished at: 2020-03-06T18:06:14-05:00<br>[INFO] -----=
 -------------------------------------------------------------------<br>[ERR=
 OR] Plugin org.apache.maven.plugins:maven-clean-plugin:2.5 or one of its de=
 pendencies could not be resolved: Failed to read artifact descriptor for or=
 g.apache.maven.plugins:maven-clean-plugin:jar:2.5: Could not transfer artif=
 act org.apache.maven.plugins:maven-clean-plugin:pom:2.5 from/to central (<a=
  href=3D"https://repo.maven.apache.org/maven2">https://repo.maven.apache.or=
 g/maven2</a>): Transfer failed for <a href=3D"https://repo.maven.apache.org=
 /maven2/org/apache/maven/plugins/maven-clean-plugin/2.5/maven-clean-plugin-=
 2.5.pom">https://repo.maven.apache.org/maven2/org/apache/maven/plugins/mave=
 n-clean-plugin/2.5/maven-clean-plugin-2.5.pom</a>: Unexpected error: java.s=
 ecurity.InvalidAlgorithmParameterException: the trustAnchors parameter must=
  be non-empty -&gt; [Help 1]<br>[ERROR]<br>[ERROR] To see the full stack tr=
 ace of the errors, re-run Maven with the -e switch.<br>[ERROR] Re-run Maven=
  using the -X switch to enable full debug logging.<br>[ERROR]<br>[ERROR] Fo=
 r more information about the errors and possible solutions, please read the=
  following articles:<br>[ERROR] [Help 1] <a href=3D"http://cwiki.apache.org=
 /confluence/display/MAVEN/PluginResolutionException">http://cwiki.apache.or=
 g/confluence/display/MAVEN/PluginResolutionException</a><br>-bash-5.0$<br><=
 /div></div><div><br></div><div>Thanks!</div></div><div dir=3D"auto"></div><=
 br><div class=3D"gmail_quote"><div dir=3D"ltr" class=3D"gmail_attr">El vie.=
 , 6 mar. 2020, 4:09 a. m.,  &lt;<a href=3D"mailto:martin@netbsd.org" target=
 =3D"_blank">martin@netbsd.org</a>&gt; escribi=C3=B3:<br></div><blockquote c=
 lass=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8ex;border-left:1px soli=
 d rgb(204,204,204);padding-left:1ex">Synopsis: Error SSL auth<br>
 <br>
 Responsible-Changed-From-To: security-officer-&gt;bin-bug-people<br>
 Responsible-Changed-By: martin@NetBSD.org<br>
 Responsible-Changed-When: Fri, 06 Mar 2020 09:09:35 +0000<br>
 Responsible-Changed-Why:<br>
 Bug in pkgtools?<br>
 <br>
 <br>
 <br>
 </blockquote></div>

 --0000000000001c08b005a037b935--

>Unformatted:

Home	PR Database Search