From ba85569fcb3e3a45f9a8a794edfedcf31c36d593 Mon Sep 17 00:00:00 2001 From: jmoore Date: Tue, 21 Jul 2015 10:55:12 +0200 Subject: [PATCH] Disable SSL ciphers unsupported by Java 8u51 et al. A recent change to Java dropped support for several SSL ciphers which were being used by Glacier2. Attempts to login from OMERO.java including the CLI importer and insight failed with the exception: ``` 2015-07-20 21:25:02,718 1196 [ main] ERROR formats.importer.cli.CommandLineImporter - Error during import process. Ice.SecurityException: javax.net.ssl.SSLHandshakeException: DHPublicKey does not comply to algorithm constraints at IceInternal.ConnectRequestHandler.getConnection(ConnectRequestHandler.java:240) ~[ice.jar:na] at IceInternal.ConnectRequestHandler.sendRequest(ConnectRequestHandler.java:138) ~[ice.jar:na] at IceInternal.Outgoing.invoke(Outgoing.java:66) ~[ice.jar:na] at Ice._ObjectDelM.ice_isA(_ObjectDelM.java:30) ~[ice.jar:na] at Ice.ObjectPrxHelperBase.ice_isA(ObjectPrxHelperBase.java:111) ~[ice.jar:na] at Ice.ObjectPrxHelperBase.ice_isA(ObjectPrxHelperBase.java:77) ~[ice.jar:na] at Glacier2.RouterPrxHelper.checkedCast(RouterPrxHelper.java:2268) ~[ice.jar:na] at omero.client.getRouter(client.java:786) ~[blitz.jar:na] at omero.client.createSession(client.java:709) ~[blitz.jar:na] at omero.client.joinSession(client.java:638) ~[blitz.jar:na] at ome.formats.OMEROMetadataStoreClient.initialize(OMEROMetadataStoreClient.java:695) ~[blitz.jar:na] at ome.formats.importer.ImportConfig.createStore(ImportConfig.java:364) ~[blitz.jar:na] at ome.formats.importer.cli.CommandLineImporter.(CommandLineImporter.java:155) ~[blitz.jar:na] at ome.formats.importer.cli.CommandLineImporter.main(CommandLineImporter.java:856) ~[blitz.jar:na] ``` This removes those ciphers from the handshade so that newer versions of Java like 7u85 and 8u51 can still connect. For more information, see http://blog.openmicroscopy.org/tech-issues/2015/07/21/java-issue/ --- etc/grid/templates.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/etc/grid/templates.xml b/etc/grid/templates.xml index c0da62d..cecff79 100644 --- a/etc/grid/templates.xml +++ b/etc/grid/templates.xml @@ -469,7 +469,7 @@ - +