JAVA SSL problem: Received fatal alert: handshake_failure

Setup, Configuration and Use Installation
1

I have openhabian installed on an Ubuntu machine. However when I try to use a plugin that connects to the internet like CalDAV or Pushbullet I get this error:

IO problems pushing note: java.util.concurrent.ExecutionException: javax.net.ssl.SSLHandshakeException: Received fatal alert: handshake_failure

Apparently it is a security problem and it was suggested to download the new jce policy jar files and exchange the old with the new one. However the error still appears.
I’m running this java version:

openjdk version "1.8.0_262"
OpenJDK Runtime Environment (Zulu 8.48.0.51-CA-linux32) (build 1.8.0_262-b19)
OpenJDK Server VM (Zulu 8.48.0.51-CA-linux32) (build 25.262-b19, mixed mode)

Any more Ideas what I can do?

2

Do you try to connect to CalDAV service hosted on Pushbullet ( calendar.pushbullet.com ) ?
I have the impression that the problem is located at pushbullet.com.

When I try to run this ( https://dzone.com/articles/troubleshooting-javaxnetsslsslhandshakeexception-r ) with calendar.pushbullet.com I get “EOFException SSL peer shut down incorrectly sun.security.ssl.InputRecord.read”.
When I use https://www.ssllabs.com/ssltest/analyze.html?d=calendar.pushbullet.com I get “Failed to communicate with the secure server”

3

I’m getting the same error from my Pushbullet notifications. It was working as recently as Wednesday, today’s Friday. Noticed it last night.

[WARN ] [t.internal.handler.PushbulletHandler] - IO problems pushing note: java.util.concurrent.ExecutionException: javax.net.ssl.SSLHandshakeException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

4

I ran an SSL Labs test against api.pushbullet.com and it came back with a great B, lol so it isn’t very secure but it seems to be running ok.

https://www.ssllabs.com/ssltest/analyze.html?d=api.pushbullet.com

I also tested to calendar.pushbullet.com and I got the same message as Wolfgang_S

5

Alright so, found my problem. It was on my end my DNS ad-blocker from pfBlocker-NG was causing the issues. I set a static resolvers in the /etc/hosts file for now until i get update pfBlocker-NG to whitelist pushbullet.com.

1 Like