Unable to install PMD Eclipse Plugin from update site

[MarcoLasticot]

The new update-site is available now (since 2017-03-18):

https://dl.bintray.com/pmd/pmd-eclipse-plugin/updates/

---

I'm unable to install PMD Eclipse Plugin from update site on Eclipse NEON 2

Tried:

• https://sourceforge.net/projects/pmd/files/pmd-eclipse/update-site/

• https://sourceforge.net/projects/pmd/files/pmd-eclipse/update-site-latest/

• http://netassist.dl.sourceforge.net/project/pmd/pmd-eclipse/update-site-latest/

Still the same error:
Unable to read repository at https://sourceforge.net/projects/pmd/files/pmd-eclipse/update-site-latest/content.xml.
Unable to read repository at https://sourceforge.net/projects/pmd/files/pmd-eclipse/update-site-latest/content.xml.
Received fatal alert: handshake_failure

[adangel]

This handshake_failure might be a certificate problem. Make sure, you use jdk 8 update 101 or later, otherwise java doesn't accept Let's Encrypt certificates.

Sourceforge Mirrors behave very undeterministic (e.g. files might exist or might not...). The easiest workaround is, to download the update site as a zip archive from https://github.com/pmd/pmd-eclipse-plugin/releases , unpack it locally and use this folder as an update site.

See also pmd/pmd#187

[adangel]

@adangel maybe we should consider publishing the update site to http://pmd.github.io/ ?

github uses a DigiCert certificate for *.github.io - so SSL should be possible without an up-to-date JRE...

[dolhim]

This link is working on my neon2

• http://netassist.dl.sourceforge.net/project/pmd/pmd-eclipse/update-site-latest/

Thank you.

ps.
but, those not working for me neither :

• https://sourceforge.net/projects/pmd/files/pmd-eclipse/update-site/
• https://sourceforge.net/projects/pmd/files/pmd-eclipse/update-site-latest/

same error with marco

[HappySnoopy]

This link is unavailable on my neon2:

http://netassist.dl.sourceforge.net/project/pmd/pmd-eclipse/update-site-latest/

and my Eclipse is:
Version: Neon.2 (4.6.2)
Build id: M20161124-1400

I download a zip archive from https://github.com/pmd/pmd-eclipse-plugin/releases and it works.

thanks all

[egry35]

hello,

like dolhim, this link is ok for me on my neon2 :
http://netassist.dl.sourceforge.net/project/pmd/pmd-eclipse/update-site-latest/

and my Eclipse is:
Version: Neon.2 Release (4.6.2)
Build id: 20161208-0600

But I think you should update "Eclipse marketplace" to allow developers to install "pmd-eclipse-plugin" with Eclipse MarketPlace (my first attempt was to use eclipse marketplace and i saw that this plugin wasn't migrated for Neon)

[Niceplace]

I am also getting the SSL certificates error
Java version is "1.8.0_121"
Eclipse version is : neon 2

!ENTRY org.eclipse.equinox.p2.transport.ecf 4 1002 2017-03-09 13:24:23.896
!MESSAGE Unable to read repository at https://sourceforge.net/projects/pmd/files/pmd-eclipse/update-site/content.xml.
!STACK 0
javax.net.ssl.SSLHandshakeException: Received fatal alert: handshake_failure
	at sun.security.ssl.Alerts.getSSLException(Alerts.java:192)
	at sun.security.ssl.Alerts.getSSLException(Alerts.java:154)
	at sun.security.ssl.SSLSocketImpl.recvAlert(SSLSocketImpl.java:2023)
	at sun.security.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:1125)
	at sun.security.ssl.SSLSocketImpl.performInitialHandshake(SSLSocketImpl.java:1375)
	at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1403)
	at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1387)
	at org.apache.http.conn.ssl.SSLSocketFactory.createLayeredSocket(SSLSocketFactory.java:554)
	at org.apache.http.conn.ssl.SSLSocketFactory.createLayeredSocket(SSLSocketFactory.java:435)
	at org.apache.http.impl.conn.DefaultClientConnectionOperator.updateSecureConnection(DefaultClientConnectionOperator.java:216)
	at org.apache.http.impl.conn.ManagedClientConnectionImpl.layerProtocol(ManagedClientConnectionImpl.java:394)
	at org.apache.http.impl.client.DefaultRequestDirector.establishRoute(DefaultRequestDirector.java:814)
	at org.apache.http.impl.client.DefaultRequestDirector.tryConnect(DefaultRequestDirector.java:615)
	at org.apache.http.impl.client.DefaultRequestDirector.execute(DefaultRequestDirector.java:446)
	at org.apache.http.impl.client.AbstractHttpClient.doExecute(AbstractHttpClient.java:863)
	at org.apache.http.impl.client.CloseableHttpClient.execute(CloseableHttpClient.java:82)
	at org.eclipse.ecf.provider.filetransfer.httpclient4.HttpClientFileSystemBrowser.runRequest(HttpClientFileSystemBrowser.java:263)
	at org.eclipse.ecf.provider.filetransfer.browse.AbstractFileSystemBrowser$DirectoryJob.run(AbstractFileSystemBrowser.java:69)
	at org.eclipse.core.internal.jobs.Worker.run(Worker.java:55)

[adangel]

Crossposting the solution from http://stackoverflow.com/questions/42128981/eclipse-pmd-plug-in-handshake-failure

It's probably one of the following two cases:

Either the cipher is not supported by your JRE - see answer http://stackoverflow.com/a/42129608/1169968 to install the JCE security patch to allow unlimited security (local_policy.jar and US_export_policy.jar)

The JRE version, you are using, doesn't trust Let's Encrypt certificates, that are used by some of the sourceforge mirrors. You need at least Java 7 Update 111 or Java 8 Update 101. See https://letsencrypt.org/docs/certificate-compatibility/

Can you try to install the JCE patch? -> http://www.oracle.com/technetwork/java/javase/downloads/jce8-download-2133166.html

[Niceplace]

Thank you for your solution @adangel ! I was able to implement a specific one for Ubuntu 16.04
However, I have to note that the installation time is astronomically high, I don't understand why ...

I use the webupd8 repository for java and this package is available for installation via apt

Steps to completely install java8
(I recommend nuking java 7 if it is installed by default on the system)

Add webupd8 repo

su -
echo "deb http://ppa.launchpad.net/webupd8team/java/ubuntu xenial main" | tee /etc/apt/sources.list.d/webupd8team-java.list
echo "deb-src http://ppa.launchpad.net/webupd8team/java/ubuntu xenial main" | tee -a /etc/apt/sources.list.d/webupd8team-java.list
apt-key adv --keyserver hkp://keyserver.ubuntu.com:80 --recv-keys EEA14886
apt-get update

Install java 8 and jce-policy

sudo apt-get install oracle-java8-installer
sudo apt-get install ca-certificates
sudo apt-get install oracle-java8-set-default
sudo apt-get install oracle-java8-unlimited-jce-policy

[creckord]

Note that despite Let's Encrypt's claim, Java 8 Update 101 does not seem to contain the proper root certificates. Java 8 Update 121 worked for me, earlier ones might as well. Some mirrors also seem to require the JCE unlimited strength policy due to updated ciphers, others apparently don't.

If you can't update your Java, you can import the root certs either into your global trust store or create a custom trust store for your Eclipse. See https://t.co/wnMXTRRjSs for a step-by-step.

In general, I would agree though that moving away from SF as host for the update site might be a good idea.

[adangel]

I've configured a new update site at bintray. Please use from now on https://dl.bintray.com/pmd/pmd-eclipse-plugin/updates/

Requests, that come through to sourceforge, will be redirected to the new site.

Please comment/reopen the issue, if you still experience problems. Thanks!

[rallengrc]

Just had this problem in 2021 with openjdk 1.8.0_282 on mac osx 10.15.7 with SpringToolSuite 4.11.1 and I had to install the JCE patch -> http://www.oracle.com/technetwork/java/javase/downloads/jce8-download-2133166.html

Its not fixed, it just worked with one particular site all the 'standard' sites are broken including https://dl.bintray.com/pmd/pmd-eclipse-plugin/updates/ and the JDK 1.8 is classpath, but it appears STS is using JDK 16 embedded so don't know how to get version. Why does this SSL stuff never get fixed even when closed?

Installed JCE extensions into embedded JVM in Eclipse app plugins directory and still busted.

Some sites could not be found. See the error log for more detail.
No repository found at https://dl.bintray.com/pmd/pmd-eclipse-plugin/updates/.
Unable to read repository at http://sourceforge.net/projects/pmd/files/pmd-eclipse/update-site.
No repository found at https://dl.bintray.com/pmd/pmd-eclipse-plugin/updates/.
No repository found at http://eclipse-cs.sourceforge.net/update.
No repository found at http://eclipse-cs.sf.net/update.

Added cert from https://dl.bintray.com/pmd/pmd-eclipse-plugin/updates/ to cacerts trust store by downloading it with firefox and using Portecle to add it. Looks to STILL be broken.