java.security.cert.CertificateException: No name matching josm.openstreetmap.de

[miketho16@…]

What steps will reproduce the problem?

1. Start JOSM

What is the expected result?

Clean startup, with "Message of the day" displayed.

What happens instead?

The following message is displayed:

JOSM tried to access the following resources:

https://josm.openstreetmap.de/maps
https://josm.openstreetmap.de/wiki/StartupPage
but failed to do so, because of the following network errors:
java.security.cert.CertificateException: No name matching josm.openstreetmap.de found
It may be due to a missing proxy configuration.
Would you like to change your proxy settings now?

Please provide any additional information below. Attach a screenshot if possible.

Also happened on Java 7
On a corporate network, behind firewall
No proxy
I can access josm.openstreetmap.de through Chrome
I can access josm.openstreetmap.de with wget
I attempted to import the certificate chain as trusted, didn't solve the problem.

Revision: 8491
Repository Root: http://josm.openstreetmap.de/svn
Relative URL: ^/trunk
Last Changed Author: Don-vip
Last Changed Date: 2015-06-16 23:27:08 +0200 (Tue, 16 Jun 2015)
Build-Date: 2015-06-16 21:45:58
URL: http://josm.openstreetmap.de/svn/trunk
Repository UUID: 0c6e7542-c601-0410-84e7-c038aed88b3b
Last Changed Rev: 8491

Identification: JOSM/1.5 (8491 en) Windows 7 64-Bit
Memory Usage: 449 MB / 1776 MB (366 MB allocated, but free)
Java version: 1.8.0_51, Oracle Corporation, Java HotSpot(TM) 64-Bit Server VM
VM arguments: [-Djava.net.useSystemProxies=true]

Plugins:
- InfoMode (31241)
- Mapillary (31331)
- PicLayer (31241)
- buildings_tools (31241)
- commons-imaging (31241)
- geotools (31126)
- jts (31126)
- measurement (31289)
- opendata (31241)
- proj4j (31353)
- undelete (31241)
- utilsplugin2 (31241)

Last errors/warnings:
- W: Failed to read MOTD. Exception was: javax.net.ssl.SSLHandshakeException: java.security.cert.CertificateException: No name matching josm.openstreetmap.de found
- E: javax.net.ssl.SSLHandshakeException: java.security.cert.CertificateException: No name matching josm.openstreetmap.de found. Cause: java.security.cert.CertificateException: No name matching josm.openstreetmap.de found

[Don-vip]

OK can you please copy/paste the console output, then try again after updating to latest java ? 8u60. Thanks.

[miketho16@…]

I am unable to get a java console to appear after repeatedly trying the instructions on the Sun website. I am running from a batch file (so to be sure and invoke the correct version of Java), and here is the output to the Windows Console:

C:\windows\system32>"c:\Program Files\Java\jre1.8.0_51\bin\java.exe" -jar C:\MyPrograms\josm-tested.jar
INFO: loading plugin 'proj4j' (version 31353)
WARNING: Failed to read MOTD. Exception was: javax.net.ssl.SSLHandshakeException: java.security.cert.CertificateException: No name matching josm.openstreetmap.de found
ERROR: javax.net.ssl.SSLHandshakeException: java.security.cert.CertificateException: No name matching josm.openstreetmap.de found. Cause: java.security.cert.CertificateException: No name matching josm.openstreetmap.de found
INFO: loading plugin 'commons-imaging' (version 31241)
INFO: loading plugin 'jts' (version 31126)
INFO: loading plugin 'geotools' (version 31126)
INFO: loading plugin 'utilsplugin2' (version 31241)
INFO: loading plugin 'InfoMode' (version 31241)
INFO: loading plugin 'opendata' (version 31241)
INFO: loading plugin 'Mapillary' (version 31331)
[INFO] CompositeCacheManager - Instance is null, returning unconfigured instance
[INFO] ThreadPoolManager - thread_pool.default PoolConfiguration = useBoundary = [true] boundarySize = [2000] maximumPoolSize = [150] minimumPoolSize = [4] keepAliveTime = [300000] whenBlockedPolicy = [RUN] startUpSize = [4]
[INFO] CompositeCacheConfigurator - Setting default auxiliaries to null
[INFO] CompositeCacheConfigurator - setting defaultCompositeCacheAttributes to [ useLateral = true, useRemote = true, useDisk = true, maxObjs = 1000, maxSpoolPerRun = -1, diskUsagePattern = UPDATE, spoolChunkSize = 2 ]
[INFO] CompositeCacheConfigurator - setting defaultElementAttributes to [ IS_LATERAL = true, IS_SPOOL = true, IS_REMOTE = true, IS_ETERNAL = false, MaxLifeSeconds = 9223372036854775807, IdleTime = 9223372036854775807, CreateTime = 1445039846908, LastAccessTime = 1445039846908, getTimeToLiveSeconds() = -1, createTime =1445039846908 ]
[INFO] CompositeCacheConfigurator - Parsed regions []
[INFO] CompositeCacheConfigurator - Finished configuration in 16 ms.
[INFO] CompositeCacheConfigurator - No special ElementAttribute class defined for key [jcs.region.mapillary.elementattributes], using default class.
[INFO] AbstractDoubleLinkedListMemoryCache - initialized MemoryCache for mapillary
[INFO] CompositeCache - Constructed cache with name [mapillary] and cache attributes [ useLateral = true, useRemote = true, useDisk = true, maxObjs = 10, maxSpoolPerRun = -1, diskUsagePattern = UPDATE, spoolChunkSize = 2 ]
[INFO] IndexedDiskCache - Region [mapillary] Cache file root directory: C:\Users\michaelthompson\AppData\Roaming\JOSM\plugins\Mapillary\cache
[INFO] IndexedDiskCache - Region [mapillary] Set maxKeySize to: '10000'
[INFO] IndexedDiskCache - Region [mapillary] Loaded keys from [mapillary], key count: 67; up to 10000 will be available.
[INFO] IndexedDiskCache - Region [mapillary] Finished inital consistency check,isOk = true in 1ms.
[INFO] IndexedDiskCache - Region [mapillary] Indexed Disk Cache is alive.
INFO: loading plugin 'undelete' (version 31241)
INFO: loading plugin 'buildings_tools' (version 31241)
INFO: loading plugin 'measurement' (version 31289)
INFO: loading plugin 'PicLayer' (version 31241)
INFO: RemoteControl::Accepting remote connections on /127.0.0.1:8111
INFO: RemoteControl::Accepting remote connections on /0:0:0:0:0:0:0:1:8111

[Don-vip]

The version of Java is still not good. Please test with latest version (8u66 now). Thanks.

[miketho16@…]

I am now running Java 1.8.0_65 I ran the Java "Check for Updates" and it says I have the latest version.

I also downloaded and ran the latest Windows installer for JOSM (8800). Before I had just downloaded the Jar file and I thought that running the installer might fix the issue.

I still get the same error:
==========
JOSM tried to access the following resources:
https://josm.openstreetmap.de/maps
https://josm.openstreetmap.de/wiki/StartupPage
​https://dl.dropbox.com/u/8010189/Forum%20attachments/Hide_nodes.mapcss
but failed to do so, because of the following network errors:
java.security.cert.CertificateException: No name matching dl.dropbox.com found
java.security.cert.CertificateException: No name matching josm.openstreetmap.de found
It may be due to a missing proxy configuration. Would you like to change your proxy settings now?
==========

I am still unable to display the Java console.

[miketho16@…]

Is it possible that Windows firewall is causing this problem? It has various exceptions for Chrome, Firefox and IE, but nothing for JOSM. Would one make an exception for JOSM or Java?

[Don-vip]

Instructions for displaying the console are here: ​https://www.java.com/en/download/help/javaconsole.xml

I don't think it comes from the Windows firewall. You say you're on a "corporate network". Can you please ask to your system administrator? Maybe your company makes something strange with https traffic.

[miketho16@…]

Regarding "console" - I followed the instructions in the link without luck. My IT support couldn't get it to come up either.

Regarding "corporate network" - IT support installed JOSM on a different laptop and duplicated the problem. They then connected to a different network, and the problem didn't occur. They they connected back to the corporate network and the problem did *not* occur. They concluded that Java/JOSM must have downloaded what it needed while off the corporate network. I am submitting the issue to a network specialist for (hopefully) ultimate resolution. I will update this ticket with information about what had to be changed on the corporate network to hopefully help others that may have this problem.

[Don-vip]

OK let me know. If there is no progress on your side maybe we can workaround the problem:
​http://java.globinch.com/enterprise-java/security/fix-java-security-certificate-exception-no-matching-localhost-found/#Certificate-HostnameVerifier

[miketho16@…]

I think this has been solved.

Our network specialist determined that JOSM is asking for these resources by IP address, not by URL (or perhaps the JAVA JRE/JVM is translating the URL to IP before sending?). Our network (can't remember if he called it a gateway, proxy or filter) doesn't accept raw IP addresses without prompting the user, but since I am not accessing the site (josm.openstreetmap.com) through a browser, I can't see that prompt, and since my tests in the browser always accessed the site by URL I never saw it there either (and didn't need to in that case). He is going to add an exception to the software which controls this.

My speculation: Telling JOSM that there is a proxy might have fixed the problem as well (although standard methods of determining if there was a proxy showed none - and one would need to know the IP address and port of the "proxy").

Another interesting fact: Running JOSM through Web Start didn't exhibit the problem reported in this ticket (even before the network changes).

[anonymous]

in my above comment josm.openstreetmap.com should have been josm.openstreetmap.de

[Don-vip]

Great! I'm closing the ticket as other software then :)