When I visit https://services.gradle.org/, I get an SSL error in Chrome. This also breaks command-line tools:
$ ./gradlew assemble
Downloading https://services.gradle.org/distributions/gradle-2.2.1-all.zip
Exception in thread "main" java.lang.RuntimeException: javax.net.ssl.SSLHandshakeException: java.security.cert.CertificateException: No subject alternative DNS name matching services.gradle.org found.I’ve raised this with our provider, it should be resolved very soon. Apologies for the inconvenience.
Hi – just curious if there is any sort of ETA on this? Trying to figure out whether I should wait it out, or try to open the hood and create workarounds.
Also waiting, my build servers are down now.
same for me. I’m trying to build spring and getting this error.
Hey all. Do a gradle clean (or ./gradlew clean, if gradlew is in your project directory), then try to rebuild.
It looks like the certs are fixed on the site, but I think our local environments had the bad ones cached, and the clean re-fetches it.
It will be fixed in the 30 minutes or so.
It’s all fixed now. Please let us know if you are still having problem.
I’m trying to build gradle from the source, and am encountering the following problem in IntelliJ. It seems to be related to accessign a gradle server, so I’m wondering if it’s somehow related to today’s issues:
The following repositories used in your gradle projects were not indexed yet: https://repo.gradle.org/gradle/libs
This error comes after downloading the latest source from your site, doing a ./gradlew idea, and importing the project into IntelliJ.
When I view my Maven repositories for the project, the line for https://repo.gradle.org/gradle/libs is highlighted in red, and the mouseover shows an error message:
java.lang.RuntimeException: org.codehaus.plexus.component.repository.exception.ComponentLookupException: java.util.NoSuchElementException role: org.apache.maven.execution.MavenExecutionRequestPopulator roleHint:
Any advice appreciated… if this seems unrelated I’ll make another thread.
James
My build server is back up, thanks for taking care of this.
so this still seems very much still broken…
$ openssl s_client -connect services.gradle.org:443 -state
CONNECTED(00000003)
SSL_connect:before/connect initialization
SSL_connect:unknown state
SSL_connect:SSLv3 read server hello A
depth=1 C = US, O = DigiCert Inc, CN = DigiCert SHA2 Secure Server CA
verify error:num=20:unable to get local issuer certificate
verify return:0
SSL_connect:SSLv3 read server certificate A
SSL_connect:SSLv3 read server key exchange A
SSL_connect:SSLv3 read server done A
SSL_connect:SSLv3 write client key exchange A
SSL_connect:SSLv3 write change cipher spec A
SSL_connect:SSLv3 write finished A
SSL_connect:SSLv3 flush data
SSL_connect:SSLv3 read finished A
---
Certificate chain
0 s:/C=US/ST=California/L=San Francisco/O=Gradleware, Inc./CN=code-review.gradle.org
i:/C=US/O=DigiCert Inc/CN=DigiCert SHA2 Secure Server CA
1 s:/C=US/O=DigiCert Inc/CN=DigiCert SHA2 Secure Server CA
i:/C=US/O=DigiCert Inc/OU=www.digicert.com/CN=DigiCert Global Root CA
---
Server certificate
-----BEGIN CERTIFICATE-----
MIIFIjCCBAqgAwIBAgIQCKSYzIHYw5VxYnPVYF4TiTANBgkqhkiG9w0BAQsFADBN
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMScwJQYDVQQDEx5E
aWdpQ2VydCBTSEEyIFNlY3VyZSBTZXJ2ZXIgQ0EwHhcNMTUwNDA4MDAwMDAwWhcN
MTYwNDExMTIwMDAwWjB2MQswCQYDVQQGEwJVUzETMBEGA1UECBMKQ2FsaWZvcm5p
YTEWMBQGA1UEBxMNU2FuIEZyYW5jaXNjbzEZMBcGA1UEChMQR3JhZGxld2FyZSwg
SW5jLjEfMB0GA1UEAxMWY29kZS1yZXZpZXcuZ3JhZGxlLm9yZzCCASIwDQYJKoZI
hvcNAQEBBQADggEPADCCAQoCggEBAO4SWHvGBsQTTgDjtwFp+gokqJxuA8O9odDs
X4TXBnJEI2NeBE0OTUTxtNfHYr7KIXdudKRnCBvjjaun9wdGEltQOQlyBG0WnuVI
fIFdD5MiYprdYzcngQv1enfG9G1crFVOgf18EUGOdK89RBfk4xl5T+34IX4pT2vK
j6O8BtncjLF3727kLRrRiRXKTIrbl5raLSMVcOZwPVORMwUakGLLsmOv7nADZesh
Of1or0xiqUJBK2J+sMOpE3SwyLKvgiLG8WwPOsFJ8n5vxU5Nj564GP1BGUKXTdDD
Ilohy1hJ+NU1zyFNgOs9nce3L2AR+Cu/0ZAAtZ0gTotjZ4qOLW8CAwEAAaOCAdMw
ggHPMB8GA1UdIwQYMBaAFA+AYRyCMWHVLyjnjUY4tCzhxtniMB0GA1UdDgQWBBSa
rCI/BJ7n6rXxZxSu2QqbuucGZDAhBgNVHREEGjAYghZjb2RlLXJldmlldy5ncmFk
bGUub3JnMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYB
BQUHAwIwawYDVR0fBGQwYjAvoC2gK4YpaHR0cDovL2NybDMuZGlnaWNlcnQuY29t
L3NzY2Etc2hhMi1nMy5jcmwwL6AtoCuGKWh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNv
bS9zc2NhLXNoYTItZzMuY3JsMEIGA1UdIAQ7MDkwNwYJYIZIAYb9bAEBMCowKAYI
KwYBBQUHAgEWHGh0dHBzOi8vd3d3LmRpZ2ljZXJ0LmNvbS9DUFMwfAYIKwYBBQUH
AQEEcDBuMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5kaWdpY2VydC5jb20wRgYI
KwYBBQUHMAKGOmh0dHA6Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydFNI
QTJTZWN1cmVTZXJ2ZXJDQS5jcnQwDAYDVR0TAQH/BAIwADANBgkqhkiG9w0BAQsF
AAOCAQEAH5EC0DiZpIuT0fEDYZnnvSihh6O/bCc+DBZF56WLTWE9qqvccZWig1zT
C8NIuNj8VctWb3YgO1nAsw92IuD+3INbmHDIyCCISIDaYwJj4Gdz0i3rntNVwNnT
u7w4DP7hs4N5X7yBD/gROfq8ak1l61PIXFa/5bzRJXJoAqSyfk7vEHh/301tiwPW
+BEINSRE3yzP67Au7TF+fykCsDsAVEhq04OYlt66kN+mUCBXuz685f/TAuR3gL+O
SEOM39S1mfK/I6dOEhjEhi2UhA8j6yl5ixSTx88ETSa8rry7p6cGR+SLsUssC7vd
eK0DC3Dcbsp2p8C0qA3SoXFAdW67pg==
-----END CERTIFICATE-----
subject=/C=US/ST=California/L=San Francisco/O=Gradleware, Inc./CN=code-review.gradle.org
issuer=/C=US/O=DigiCert Inc/CN=DigiCert SHA2 Secure Server CA
---
No client certificate CA names sent
---
SSL handshake has read 3196 bytes and written 503 bytes
---
New, TLSv1/SSLv3, Cipher is DHE-RSA-AES256-SHA
Server public key is 2048 bit
Secure Renegotiation IS supported
Compression: NONE
Expansion: NONE
SSL-Session:
Protocol : TLSv1
Cipher : DHE-RSA-AES256-SHA
Session-ID: A6FE19AED1608F464CBDF56A15E31689A79E9A439254B143CC061D3DCA6DE2BA
Session-ID-ctx:
Master-Key: 1AD71DAD1B649A5698F8F6C19001649A62664C257A0C8549360798D92DEAA73870743EC047F32EF1AAFB2FCC1104F1DF
Key-Arg : None
PSK identity: None
PSK identity hint: None
SRP username: None
Start Time: 1430027638
Timeout : 300 (sec)$ openssl s_client -connect services.gradle.org:443 -state
CONNECTED(00000003)
SSL_connect:before/connect initialization
SSL_connect:unknown state
SSL_connect:SSLv3 read server hello A
depth=1 C = US, O = DigiCert Inc, CN = DigiCert SHA2 Secure Server CA
verify error:num=20:unable to get local issuer certificate
verify return:0
SSL_connect:SSLv3 read server certificate A
SSL_connect:SSLv3 read server key exchange A
SSL_connect:SSLv3 read server done A
SSL_connect:SSLv3 write client key exchange A
SSL_connect:SSLv3 write change cipher spec A
SSL_connect:SSLv3 write finished A
SSL_connect:SSLv3 flush data
SSL_connect:SSLv3 read finished A
---
Certificate chain
0 s:/C=US/ST=California/L=San Francisco/O=Gradleware, Inc./CN=code-review.gradle.org
i:/C=US/O=DigiCert Inc/CN=DigiCert SHA2 Secure Server CA
1 s:/C=US/O=DigiCert Inc/CN=DigiCert SHA2 Secure Server CA
i:/C=US/O=DigiCert Inc/OU=www.digicert.com/CN=DigiCert Global Root CA
---
Server certificate
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
subject=/C=US/ST=California/L=San Francisco/O=Gradleware, Inc./CN=code-review.gradle.org
issuer=/C=US/O=DigiCert Inc/CN=DigiCert SHA2 Secure Server CA
---
No client certificate CA names sent
---
SSL handshake has read 3196 bytes and written 503 bytes
---
New, TLSv1/SSLv3, Cipher is DHE-RSA-AES256-SHA
Server public key is 2048 bit
Secure Renegotiation IS supported
Compression: NONE
Expansion: NONE
SSL-Session:
Protocol : TLSv1
Cipher : DHE-RSA-AES256-SHA
Session-ID: A6FE19AED1608F464CBDF56A15E31689A79E9A439254B143CC061D3DCA6DE2BA
Session-ID-ctx:
Master-Key: 1AD71DAD1B649A5698F8F6C19001649A62664C257A0C8549360798D92DEAA73870743EC047F32EF1AAFB2FCC1104F1DF
Key-Arg : None
PSK identity: None
PSK identity hint: None
SRP username: None
Start Time: 1430027638
Timeout : 300 (sec)
Verify return code: 20 (unable to get local issuer certificate)
---
Verify return code: 20 (unable to get local issuer certificate)
---
Additionally when you ignore the certificate issue - Crucible seems to not have any of the assets, as it responds with: The requested resource cannot be found.
Here’s what I (and presumably the rest of the world given the lack of reports) get:
openssl s_client -connect services.gradle.org:443 -state
CONNECTED(00000003)
---
Certificate chain
0 s:/C=US/ST=California/L=San Francisco/O=Gradleware, Inc./CN=services.gradle.org
i:/C=US/O=DigiCert Inc/CN=DigiCert SHA2 Secure Server CA
1 s:/C=US/O=DigiCert Inc/CN=DigiCert SHA2 Secure Server CA
i:/C=US/O=DigiCert Inc/OU=www.digicert.com/CN=DigiCert Global Root CA
---
Server certificate
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
subject=/C=US/ST=California/L=San Francisco/O=Gradleware, Inc./CN=services.gradle.org
issuer=/C=US/O=DigiCert Inc/CN=DigiCert SHA2 Secure Server CA
---
No client certificate CA names sent
---
SSL handshake has read 2648 bytes and written 444 bytes
---
New, TLSv1/SSLv3, Cipher is RC4-SHA
Server public key is 2048 bit
Secure Renegotiation IS supported
Compression: NONE
Expansion: NONE
SSL-Session:
Protocol : TLSv1
Cipher : RC4-SHA
Session-ID: 81F5AFD048614F640C37F6A155AE9E5AB96AE10BA28DF15EA4CCA22CE2063230
Session-ID-ctx:
Master-Key: 65859FB7482CBF1CBFE6E2310F8A44F8F3268AC854AAA0E6A84C71DE56B45955D1B0AD9B63B0A077B373914DBE08003A
Key-Arg : None
Start Time: 1430039724
Timeout : 300 (sec)
Verify return code: 0 (ok)
---
@flyinprogrammer I don’t have an explanation as to why it is different for you.
Ah - i figured it out - silly dns 
My machine’s dns show’s this:
services.gradle.org. 0 IN A 207.223.250.26
But the public DNS shows this:
services.gradle.org. 294 IN A 207.223.250.8
The .8 server is indeed serving the correct certificate. Sorry for my the frustration!!