Uploaded image for project: 'Jenkins'
  1. Jenkins
  2. JENKINS-11985

javax.net.ssl.SSLException: Received fatal alert: bad_record_mac with subversion-plugin 1.37

    Details

    • Type: Bug
    • Status: Open
    • Priority: Major
    • Resolution: Unresolved
    • Component/s: subversion-plugin
    • Labels:
      None
    • Environment:
      Centos 5.6
      java version "1.6.0_20"
      OpenJDK Runtime Environment (IcedTea6 1.9.8) (rhel-1.22.1.9.8.el5_6-i386)
      OpenJDK Server VM (build 19.0-b09, mixed mode)

      SVN repo is on beanstalkapp platform

      Description

      SVN stopped working with the following issue:

      Caused by: org.tmatesoft.svn.core.SVNException: svn: OPTIONS request failed on '/XXXXX/trunk/XXXXXXXXX'
      svn: Received fatal alert: bad_record_mac
      at org.tmatesoft.svn.core.internal.wc.SVNErrorManager.error(SVNErrorManager.java:64)
      at org.tmatesoft.svn.core.internal.wc.SVNErrorManager.error(SVNErrorManager.java:51)
      at org.tmatesoft.svn.core.internal.io.dav.http.HTTPConnection._request(HTTPConnection.java:662)
      at org.tmatesoft.svn.core.internal.io.dav.http.HTTPConnection.request(HTTPConnection.java:292)
      ... 67 more
      Caused by: org.tmatesoft.svn.core.SVNErrorMessage: svn: OPTIONS request failed on '/XXXX/trunk/XXXXXXX'
      at org.tmatesoft.svn.core.SVNErrorMessage.create(SVNErrorMessage.java:200)
      at org.tmatesoft.svn.core.internal.io.dav.http.HTTPConnection._request(HTTPConnection.java:660)
      ... 68 more
      Caused by: org.tmatesoft.svn.core.SVNErrorMessage: svn: Received fatal alert: bad_record_mac
      at org.tmatesoft.svn.core.SVNErrorMessage.create(SVNErrorMessage.java:101)
      at org.tmatesoft.svn.core.internal.io.dav.http.HTTPConnection._request(HTTPConnection.java:424)
      ... 68 more
      Caused by: javax.net.ssl.SSLException: Received fatal alert: bad_record_mac
      at sun.security.ssl.Alerts.getSSLException(Alerts.java:208)
      at sun.security.ssl.Alerts.getSSLException(Alerts.java:154)

      run back to version subversion 1.35 and it seen to work fine.

        Activity

        Hide
        peterjcarr Peter Carr added a comment -

        I have the same exact problem. Are there any workarounds?

        Show
        peterjcarr Peter Carr added a comment - I have the same exact problem. Are there any workarounds?
        Hide
        tqrst tq rst added a comment - - edited

        Same problem here. Adding -Dsvnkit.http.sslProtocols=SSLv3 didn't help. This is with Jenkins 1.443 + svn 1.40 and 1.42, and also with 1.483 + svn 1.43. This is a showstopper for us. Reverting back to 1.34 used to work for us, but the latest version only allows to downgrade to 1.42, so we're pretty much stuck.

        Update: -Dsvnkit.http.sslProtocols=SSLv3 does work after all. It has to be done on every node, though.

        Show
        tqrst tq rst added a comment - - edited Same problem here. Adding -Dsvnkit.http.sslProtocols=SSLv3 didn't help. This is with Jenkins 1.443 + svn 1.40 and 1.42, and also with 1.483 + svn 1.43. This is a showstopper for us. Reverting back to 1.34 used to work for us, but the latest version only allows to downgrade to 1.42, so we're pretty much stuck. Update: -Dsvnkit.http.sslProtocols=SSLv3 does work after all. It has to be done on every node, though.
        Hide
        umaprasathlru uma prasath added a comment -

        Hi,
        I resolved both bad_record_mac and No Crendential to try error by doing the below steps. I am writing mail so that it may be of help to some one.

        For bad_record_mack:
        1. Check your proxy setting in the Manage Jenkins --> Manage plugin --> advance
        2. Remove .subversion folder
        3. Enter the svn url you are trying to access

        ERROR: svn: authentication cancelled
        org.tmatesoft.svn.core.SVNCancelException: svn: authentication cancelled.

        1. Login to the server in which the jenkin is running through putty or any tool
        2. Execute svn checkout <<svn repo url>> --username <<username>> --password <<password>>
        3. When it attempts to store the password, save it.

        You can see the below four files getting created under .subversion/auth folder
        svn.simple
        svn.ssl.client-passphrase
        svn.ssl.server
        svn.username

        After which go to the job in jenkins. It will work fine.

        Thanks
        uma

        Show
        umaprasathlru uma prasath added a comment - Hi, I resolved both bad_record_mac and No Crendential to try error by doing the below steps. I am writing mail so that it may be of help to some one. For bad_record_mack: 1. Check your proxy setting in the Manage Jenkins --> Manage plugin --> advance 2. Remove .subversion folder 3. Enter the svn url you are trying to access ERROR: svn: authentication cancelled org.tmatesoft.svn.core.SVNCancelException: svn: authentication cancelled. 1. Login to the server in which the jenkin is running through putty or any tool 2. Execute svn checkout <<svn repo url>> --username <<username>> --password <<password>> 3. When it attempts to store the password, save it. You can see the below four files getting created under .subversion/auth folder svn.simple svn.ssl.client-passphrase svn.ssl.server svn.username After which go to the job in jenkins. It will work fine. Thanks uma
        Hide
        tejlgaard Jesper Tejlgaard added a comment -

        I made it work with JDK 7 on Tomcat. Only trouble were the Tomcat Windows Service configuration: http://jespertejlgaard.blogspot.dk/2013/01/solved-badrecordmac-error-for.html

        Show
        tejlgaard Jesper Tejlgaard added a comment - I made it work with JDK 7 on Tomcat. Only trouble were the Tomcat Windows Service configuration: http://jespertejlgaard.blogspot.dk/2013/01/solved-badrecordmac-error-for.html
        Hide
        kutzi kutzi added a comment -

        See http://issues.tmatesoft.com/issue/SVNKIT-176 for the underlying issue in the SVNKit project

        Show
        kutzi kutzi added a comment - See http://issues.tmatesoft.com/issue/SVNKIT-176 for the underlying issue in the SVNKit project

          People

          • Assignee:
            Unassigned
            Reporter:
            jpd4classiek2 John-Paul Drawneek
          • Votes:
            2 Vote for this issue
            Watchers:
            7 Start watching this issue

            Dates

            • Created:
              Updated: