B4J Question SSL problem with Win 10 build

[gpa]

Hi...

I have an app that works fine in the IDE, and the jar file runs fine under Linux.
However the build file crashes under Win 10.
I expect this is because the Windows build needs an extra file included by the packager for the TLS / SSL support, but I'm not sure what!
Or it could be a java version issue - but I thought the packager handled all the correct dependencies?

Any help or advice appreciated!


The code that crashes, is when btnConnect is pressed:

Sub btnConnect_Action
    Dim m As Matcher = Regex.Matcher("(\d+\.\d+\.\d+\.\d+):(\d+)", txtServerIP.Text)
    If m.Find Then
        CloseExistingConnection
        Dim c As Socket = CreateTrustAllSSLSocket("client")
        c.Connect(m.Group(1), m.Group(2), 10000)
        Wait For Client_Connected (Successful As Boolean)
        If Successful Then
            NewConnection(c)
        End If
    Else
        fx.Msgbox(MainForm, "Invalid address", "")
    End If
End Sub

Private Sub CreateTrustAllSSLSocket (EventName As String) As Socket
    Dim socket As Socket
    socket.Initialize(EventName)
    Dim jo As JavaObject = socket
    jo.SetField("socket", CreateTrustAllSSLSocketFactory.RunMethod("createSocket", Null))
    Return socket
End Sub

Sub CreateTrustAllSSLSocketFactory As JavaObject
    Dim tm As CustomTrustManager
    tm.InitializeAcceptAll
    Dim SSLContext As JavaObject
    SSLContext = SSLContext.InitializeStatic("javax.net.ssl.SSLContext").RunMethod("getInstance", Array("TLS"))
    SSLContext.RunMethod("init", Array(Null, tm, Null))
    Dim Factory As JavaObject = SSLContext.RunMethod("getSocketFactory", Null)
    Return Factory
End Sub

The exception is, as captured by run_debug.bat:

D:\Temp\Objects\temp\build>cd bin

D:\Temp\Objects\temp\build\bin>java.exe @release_java_modules.txt  -m b4j/b4j.example.main
main._createtrustallsslsocket (java line: -1)
java.lang.IllegalAccessException: class anywheresoftware.b4j.object.JavaObject (in module b4j) cannot access class sun.security.ssl.SSLSocketFactoryImpl (in module java.base) because module java.base does not export sun.security.ssl to module b4j
        at java.base/jdk.internal.reflect.Reflection.newIllegalAccessException(Unknown Source)
        at java.base/java.lang.reflect.AccessibleObject.checkAccess(Unknown Source)
        at java.base/java.lang.reflect.Method.invoke(Unknown Source)
        at b4j/anywheresoftware.b4j.object.JavaObject.RunMethod(Unknown Source)
        at b4j/b4j.example.main._createtrustallsslsocket(Unknown Source)
        at b4j/b4j.example.main$ResumableSub_btnConnect_Action.resume(Unknown Source)
        at b4j/b4j.example.main._btnconnect_action(Unknown Source)
        at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
        at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke(Unknown Source)
        at java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source)
        at java.base/java.lang.reflect.Method.invoke(Unknown Source)
        at b4j/anywheresoftware.b4a.BA.raiseEvent2(Unknown Source)
        at b4j/anywheresoftware.b4a.BA$1.run(Unknown Source)
        at javafx.graphics/com.sun.javafx.application.PlatformImpl.lambda$runLater$10(Unknown Source)
        at java.base/java.security.AccessController.doPrivileged(Native Method)
        at javafx.graphics/com.sun.javafx.application.PlatformImpl.lambda$runLater$11(Unknown Source)
        at javafx.graphics/com.sun.glass.ui.InvokeLaterDispatcher$Future.run(Unknown Source)
        at javafx.graphics/com.sun.glass.ui.win.WinApplication._runLoop(Native Method)
        at javafx.graphics/com.sun.glass.ui.win.WinApplication.lambda$runLoop$3(Unknown Source)
        at java.base/java.lang.Thread.run(Unknown Source)

 

[aeric]

Integrated B4JPackager11 - The simple way to distribute standalone UI apps

B4JPackager11 is a utility written in B4J that uses the underlying Java tools to create a standalone package that doesn't depend on any other software being installed. It works with OpenJDK 11 and OpenJDK 14. Starting from B4J v8.30 it is integrated in the IDE and available under Project - Build...

www.b4x.com

Not sure it would help. Maybe something similar to Tip #7.

7. If you get an error that looks like: javax.net.ssl.SSLHandshakeException: Received fatal alert: handshake_failure, add:

#PackagerProperty: IncludedModules = jdk.crypto.ec

 

[gpa]

Thanks for the suggestion - unfortunately it makes no difference, same error...

 

[Erel]

Add this:

#PackagerProperty: VMArgs = --add-opens java.base/sun.security.ssl=b4j

 

[gpa]

Hi...
Thanks - that stops the crash, but it fails to connect - handshake fails. I think the createtrustallsocket needs something else to work?

I think this is the part that fails...
CreateTrustAllSSLSocketFactory As JavaObject

 

[Erel]

Does it work on Windows when you run it from the IDE?

 

[gpa]

Yes, it works fine. On the same PC, the built version fails, as well as on another PC.

 

[Erel]

I'm unable to reproduce it. If the server is accessible over the internet, I can try it from here.

 

[gpa]

Hi...
Thanks for getting back to me.
It's on a private link, so that would be tricky.
Two suggestions - it fails in testing to openssl, if you have that -

openssl s_server -cert ..\..\usr\ssl\cert.pem -key ..\..\usr\ssl\key.pem

I could send you the keys referred - what's the best way to send that privately?

Also I could send you the complete build, or the b4j file?

It should be simple - it works in IDE and the jar file runs on Linux ok!

 

[Erel]

What are you connecting to?

 

[gpa]

A custom application (Vb6) and openssl for testing.

The IDE ver connects to 8.8.8.8:443, the build version fails to connect too.

 

[OliverA]

What is the connection error? Why are you connecting to 8.8.8.8? What does OpenSSL have to do with it?

 

[gpa]

Fails to handshake, cert trust fails. 8.8.8.8 is simply a public test address, as discussed with Erel - read above. Openssl can act as a server to test ssl/tls clients - or as a client to test servers.
The trustallsslsocket works in IDE, works standalone on Linx, fails standalone on Windows. So, something is missing in the windows build.

 

[OliverA]

Adding both these to my test project solved the issue for me:

    #PackagerProperty: VMArgs = --add-opens java.base/sun.security.ssl=b4j
    #PackagerProperty: IncludedModules = jdk.crypto.ec

OS: Win10 20H2 (19042.928)
B4J: 8.9
JDK: 14.01 (found here: https://www.b4x.com/android/forum/t...lest-way-to-distribute-ui-apps.99835/#content)

 

[OliverA]

Sample project used attached

 

[gpa]

Ah! Thanks. We'd tried the VMArgs.... addition as per Erel's suggestion. Adding the jdk.crypto.ec line fixed it!
Many thanks!