Web IDE on premise Git problem (cannot open git-upload-pack)

[Former Member]

Dear Web IDE team,

Could you please help use with the following issue.

First of all thanks a lot for the providing the new Web IDE verion for local installation. We really hope you will continue this such a good practice supporting people who has to work in the intranet.

In our company we also use Git service Stash to control the development process.

However when I tried to clone git project in Web IDE - i've got an error: cannot open git-upload-pack.

Here is the full log from the orion server:

!ENTRY org.eclipse.orion.server.core 4 0 2016-03-30 14:52:21.804
!MESSAGE Error cloning git repository
!STACK 0

org.eclipse.jgit.api.errors.TransportException: https://sbt-plenkov-ps@10.68.194.158/scm/sap_mob/orgstructure.git: cannot open git-upload-pack

 at org.eclipse.jgit.api.FetchCommand.call(FetchCommand.java:139)
 at org.eclipse.jgit.api.CloneCommand.fetch(CloneCommand.java:178)
 at org.eclipse.jgit.api.CloneCommand.call(CloneCommand.java:125)
 at org.eclipse.orion.server.git.jobs.CloneJob.doClone(CloneJob.java:119)
 at org.eclipse.orion.server.git.jobs.CloneJob.performJob(CloneJob.java:189)
 at org.eclipse.orion.server.core.tasks.TaskJob.run(TaskJob.java:166)
 at org.eclipse.core.internal.jobs.Worker.run(Worker.java:54)
Caused by: org.eclipse.jgit.errors.TransportException: https://sbt-plenkov-ps@10.68.194.158/scm/sap_mob/orgstructure.git: cannot open git-upload-pack
 at org.eclipse.jgit.transport.TransportHttp.connect(TransportHttp.java:521)
 at org.eclipse.jgit.transport.TransportHttp.openFetch(TransportHttp.java:309)
 at org.eclipse.jgit.transport.FetchProcess.executeImp(FetchProcess.java:136)
 at org.eclipse.jgit.transport.FetchProcess.execute(FetchProcess.java:122)
 at org.eclipse.jgit.transport.Transport.fetch(Transport.java:1111)
 at org.eclipse.jgit.api.FetchCommand.call(FetchCommand.java:130)
 ... 6 more
Caused by: javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
 at sun.security.ssl.Alerts.getSSLException(Unknown Source)
 at sun.security.ssl.SSLSocketImpl.fatal(Unknown Source)
 at sun.security.ssl.Handshaker.fatalSE(Unknown Source)
 at sun.security.ssl.Handshaker.fatalSE(Unknown Source)
 at sun.security.ssl.ClientHandshaker.serverCertificate(Unknown Source)
 at sun.security.ssl.ClientHandshaker.processMessage(Unknown Source)
 at sun.security.ssl.Handshaker.processLoop(Unknown Source)
 at sun.security.ssl.Handshaker.process_record(Unknown Source)
 at sun.security.ssl.SSLSocketImpl.readRecord(Unknown Source)
 at sun.security.ssl.SSLSocketImpl.performInitialHandshake(Unknown Source)
 at sun.security.ssl.SSLSocketImpl.startHandshake(Unknown Source)
 at sun.security.ssl.SSLSocketImpl.startHandshake(Unknown Source)
 at sun.net.www.protocol.https.HttpsClient.afterConnect(Unknown Source)
 at sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.connect(Unknown Source)
 at sun.net.www.protocol.http.HttpURLConnection.getInputStream0(Unknown Source)
 at sun.net.www.protocol.http.HttpURLConnection.getInputStream(Unknown Source)
 at java.net.HttpURLConnection.getResponseCode(Unknown Source)
 at sun.net.www.protocol.https.HttpsURLConnectionImpl.getResponseCode(Unknown Source)
 at org.eclipse.jgit.transport.http.JDKHttpConnection.getResponseCode(JDKHttpConnection.java:98)
 at org.eclipse.jgit.util.HttpSupport.response(HttpSupport.java:168)
 at org.eclipse.jgit.transport.TransportHttp.connect(TransportHttp.java:475)
 ... 11 more
Caused by: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
 at sun.security.validator.PKIXValidator.doBuild(Unknown Source)
 at sun.security.validator.PKIXValidator.engineValidate(Unknown Source)
 at sun.security.validator.Validator.validate(Unknown Source)
 at sun.security.ssl.X509TrustManagerImpl.validate(Unknown Source)
 at sun.security.ssl.X509TrustManagerImpl.checkTrusted(Unknown Source)
 at sun.security.ssl.X509TrustManagerImpl.checkServerTrusted(Unknown Source)
 ... 28 more
Caused by: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
 at sun.security.provider.certpath.SunCertPathBuilder.build(Unknown Source)
 at sun.security.provider.certpath.SunCertPathBuilder.engineBuild(Unknown Source)
 at java.security.cert.CertPathBuilder.build(Unknown Source)

Do you have any ideas or advises how to prevent this case?

I've googled some tips like: git config http.sslVerify false

However I don't know where it should be fixed locally in the Web IDE folder.

Thanks!

Petr

[jamie_cawley · Accepted solution]

Did you import the cert file for git?

See section 3.1.3 at

http://a248.g.akamai.net/n/248/420835/3a1095c07656dd71d50bd75e3fbc3fdc8525956d9c62fdc8dba64e5b927ff8...

Regards,

Jamie

SAP - Technology RIG

[Former Member · Accepted solution]

Hi, Jamie

I'm not sure we use certificate.

Our Stash server provides only http clone links.

Is it obligatory to use the certificate?

Thanks!

[jamie_cawley · Accepted solution]

You are running over https which requires a certificate.  The only other way is if you can access over http or you could try ssh.

Regards,

Jamie

SAP - Technology RIG

[Former Member · Accepted solution]

I wish I could use http however there is no such an option in Web IDE while cloning a git.

Do you think it's possible to use HTTP in Web IDE?

What about SSH - this is something i didn't tried yet.

Waiting for admin rights on my work PC to generate the key.

[jamie_cawley · Accepted solution]

It only support https or ssh. 

Regards,

Jamie

SAP - Technology RIG

[Former Member · Accepted solution]

I've just imported certificated exactly how it's described in the guide, however that didn't help.

The result is the same. something wrong with SSLHandShake

[Former Member · Accepted solution]

I finally tried SSH and it worked!

Nevermind it's even more convenient than HTTPS.

Thanks for helping.

[jamie_cawley · Accepted solution]

For things you could look at...

1.  Is it possible that you have more than one java version installed and web ide is referencing another one?

2.  Did you try cloning through the git cli or gui to see if it works?

3.  Are you certain you have the correct cert file?

Regards,

Jamie

SAP - Technology RIG

[Former Member · Accepted solution]

1) It's exactly one instance 1.8 x64

2) Sourcetree doesn't work over HTTPS - only over HTTP

3) I'm not sure i did right - I opened git repository in Chrome in https mode, then exported *.cer file in DER format manually