Not able to fetch accessToken. about spring-social-facebook

[okohub]

Hello guys,

There is a strange bug about this: https://bugs.openjdk.java.net/browse/JDK-8213202

Actually we did not find this through facebook login problem, we were also struggling with some other api (which is facebook merchant). Looks like its about tlsv1.3

A solution? Of course;

For now, you can add this prop to jvm. After we made this, connection problems were gone :)

-Dhttps.protocols=TLSv1,TLSv1.1,TLSv1.2 

Cheers! :)

[IRus]

Got same issue (unrelated to spring-social-facebook) but with facebook api:

Get on https://graph.facebook.com/?id=$url randomly fails with

javax.net.ssl.SSLPeerUnverifiedException: peer not authenticated
    at sun.security.ssl.SSLSessionImpl.getPeerCertificates(SSLSessionImpl.java:526)
    at org.apache.http.nio.conn.ssl.SSLIOSessionStrategy.verifySession(SSLIOSessionStrategy.java:205)
    at org.apache.http.nio.conn.ssl.SSLIOSessionStrategy$1.verify(SSLIOSessionStrategy.java:188)
    at org.apache.http.nio.reactor.ssl.SSLIOSession.doHandshake(SSLIOSession.java:354)
    at org.apache.http.nio.reactor.ssl.SSLIOSession.isAppInputReady(SSLIOSession.java:503)
    at org.apache.http.impl.nio.reactor.AbstractIODispatch.inputReady(AbstractIODispatch.java:120)
    at org.apache.http.impl.nio.reactor.BaseIOReactor.readable(BaseIOReactor.java:162)
    at org.apache.http.impl.nio.reactor.AbstractIOReactor.processEvent(AbstractIOReactor.java:337)
    at org.apache.http.impl.nio.reactor.AbstractIOReactor.processEvents(AbstractIOReactor.java:315)
    at org.apache.http.impl.nio.reactor.AbstractIOReactor.execute(AbstractIOReactor.java:276)
    at org.apache.http.impl.nio.reactor.BaseIOReactor.execute(BaseIOReactor.java:104)
    at org.apache.http.impl.nio.reactor.AbstractMultiworkerIOReactor$Worker.run(AbstractMultiworkerIOReactor.java:588)
    at java.lang.Thread.run(Thread.java:834)

Code running in docker openjdk:11.0.1-jre-sid

[thithuhanguyen]

@attybro

_{Sent with GitHawk}

[attybro]

Hello @alpeshvas, I am facing the same ("peer authentication") problem.
Have you solved the problem yet?

[lazarai]

Also curious if you managed to fix it. I'm having the same issue and can't find any leads. The funny part is, this happens only on the every other request, so one works, one doesn't. @alpeshvas

[thithuhanguyen]

---

_{Sent with GitHawk}

[thithuhanguyen]

Hà Nội

_{Sent with GitHawk}

[emmanuelt88]

Hey
I'm having the same issue but with Oracle JDK as well.
I tried adding the https.protocols, I thought it was fixed with that till today that failed again after 3 days running ok and as @IRus said it fails randomly for me as well.

Any other options I could try?
Context:

• Running on Docker with jdk-11.0.2
• Springboot 2.1.2.RELEASE
• Running on Amazon ECS (I tried locally and the same issue)

Any help will be really appreciated.

Thanks in advance!

[RoieBeck]

Hello,
this issue still happen when using spring social facebook,
the fix(https jvm flag) you offered does work, but I was wonderting when the issue will be fixed?
details:
OpenJdk 11.0.2

Spring social facebook LTS(2.0.3)
<dependency> <groupId>org.springframework.social</groupId> <artifactId>spring-social-facebook</artifactId> <version>2.0.3.RELEASE</version> </dependency>

tnx

[anatolyw]

If it is still actual for someone:
the issue is TLS related as it was mentioned by @okohub and a fix with Java VM-Dhttps.protocols=TLSv1,TLSv1.1,TLSv1.2 works. But the real problem is the bug in JDK 11.0.2 and nothing to do with spring-social-facebook
See here: https://bugs.openjdk.java.net/browse/JDK-8213202
You have to upgrade your JDK.
Note for macOS users:
if you use brew for java installation (ex: brew cask install java11),
it still installs openjdk-11.0.2.jdk (on the moment of writing this reply).
Use the one from adoptopenjdk (install it manually with .pkg file): https://adoptopenjdk.net/index.html?variant=openjdk11&jvmVariant=hotspot
Tested with v11.0.6 the problem has gone!