Unable to read repository in Eclipse for Hana Trial

[Former Member]

Hello,

I am attempting to install the HANA trial so I can get a look at it before we start the upgrade process next year.  I am following the install guide I found here.  I am also using the FAQ at http://scn.sap.com/docs/DOC-28325 .   We do not use proxy here, so under Window -> preferences -> General -> Network Connections, I use "Active Provider:" -> Direct.  I looked at several messages on SCN and I have either tried what they did to resolve the issue or it didn't apply (Like correcting proxy information).

After I installed Eclipse and sapjvm_7 on my Windows 7 system I attempted to add HANA to it.  When I go to Help -> Install new Hardware -> https://tools.hana.ondemand.com/luna I get error: 

Unable to read repository at https://tools.hana.ondemand.com/luna/content.xml.

sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

!ENTRY org.eclipse.equinox.p2.ui 4 0 2015-06-24 13:06:16.424

!MESSAGE Unable to read repository at https://tools.hana.ondemand.com/luna/content.xml.

!STACK 1

org.eclipse.equinox.p2.core.ProvisionException: Unable to read repository at https://tools.hana.ondemand.com/luna/content.xml.

at org.eclipse.equinox.internal.p2.repository.CacheManager.createCache(CacheManager.java:192)

at org.eclipse.equinox.internal.p2.metadata.repository.SimpleMetadataRepositoryFactory.getLocalFile(SimpleMetadataRepositoryFactory.java:66)

at org.eclipse.equinox.internal.p2.metadata.repository.SimpleMetadataRepositoryFactory.load(SimpleMetadataRepositoryFactory.java:88)

at org.eclipse.equinox.internal.p2.metadata.repository.MetadataRepositoryManager.factoryLoad(MetadataRepositoryManager.java:57)

at org.eclipse.equinox.internal.p2.repository.helpers.AbstractRepositoryManager.loadRepository(AbstractRepositoryManager.java:768)

at org.eclipse.equinox.internal.p2.repository.helpers.AbstractRepositoryManager.loadRepository(AbstractRepositoryManager.java:668)

at org.eclipse.equinox.internal.p2.metadata.repository.MetadataRepositoryManager.loadRepository(MetadataRepositoryManager.java:96)

at org.eclipse.equinox.internal.p2.metadata.repository.MetadataRepositoryManager.loadRepository(MetadataRepositoryManager.java:92)

at org.eclipse.equinox.p2.ui.ProvisioningUI.loadMetadataRepository(ProvisioningUI.java:439)

at org.eclipse.equinox.internal.p2.ui.model.MetadataRepositoryElement.getMetadataRepository(MetadataRepositoryElement.java:127)

at org.eclipse.equinox.internal.p2.ui.model.MetadataRepositoryElement.fetchChildren(MetadataRepositoryElement.java:76)

at org.eclipse.equinox.internal.p2.ui.model.RemoteQueriedElement.fetchDeferredChildren(RemoteQueriedElement.java:34)

at org.eclipse.ui.progress.DeferredTreeContentManager$1.run(DeferredTreeContentManager.java:238)

at org.eclipse.core.internal.jobs.Worker.run(Worker.java:54)

Caused by: javax.net.ssl.SSLException: Received fatal alert: protocol_version

at com.sun.net.ssl.internal.ssl.Alerts.getSSLException(Unknown Source)

at com.sun.net.ssl.internal.ssl.Alerts.getSSLException(Unknown Source)

at com.sun.net.ssl.internal.ssl.SSLSocketImpl.recvAlert(Unknown Source)

at com.sun.net.ssl.internal.ssl.SSLSocketImpl.readRecord(Unknown Source)

at com.sun.net.ssl.internal.ssl.SSLSocketImpl.performInitialHandshake(Unknown Source)

at com.sun.net.ssl.internal.ssl.SSLSocketImpl.startHandshake(Unknown Source)

at com.sun.net.ssl.internal.ssl.SSLSocketImpl.startHandshake(Unknown Source)

at org.apache.http.conn.ssl.SSLSocketFactory.connectSocket(SSLSocketFactory.java:535)

at org.apache.http.conn.ssl.SSLSocketFactory.connectSocket(SSLSocketFactory.java:403)

at org.apache.http.impl.conn.DefaultClientConnectionOperator.openConnection(DefaultClientConnectionOperator.java:177)

at org.apache.http.impl.conn.ManagedClientConnectionImpl.open(ManagedClientConnectionImpl.java:304)

at org.apache.http.impl.client.DefaultRequestDirector.tryConnect(DefaultRequestDirector.java:611)

at org.apache.http.impl.client.DefaultRequestDirector.execute(DefaultRequestDirector.java:446)

at org.apache.http.impl.client.AbstractHttpClient.doExecute(AbstractHttpClient.java:863)

at org.apache.http.impl.client.CloseableHttpClient.execute(CloseableHttpClient.java:82)

at org.eclipse.ecf.provider.filetransfer.httpclient4.HttpClientFileSystemBrowser.runRequest(HttpClientFileSystemBrowser.java:259)

at org.eclipse.ecf.provider.filetransfer.browse.AbstractFileSystemBrowser$DirectoryJob.run(AbstractFileSystemBrowser.java:69)

... 1 more

I have 2 personal certificates in my IE Certificates.  I used keytool to add those to the cacerts file in sapjvm_7/jre/lib/security.  In Eclipse, I  looked in Help -> Installation Details -> Configuration and I can see that I'm using sapjvm_7.

-vm

C:\Program Files\Java\sapjvm_7\jre\bin\javaw.exe

eclipse.launcher.name=Eclipse

eclipse.p2.data.area=@config.dir/../p2/

eclipse.p2.profile=epp.package.jee

eclipse.product=org.eclipse.epp.package.jee.product

eclipse.startTime=1435233210787

eclipse.stateSaveDelayInterval=30000

eclipse.vm=C:\Program Files\Java\sapjvm_7\jre\bin\javaw.exe

eclipse.vmargs=-Dosgi.requiredJavaVersion=1.6

-Xms40m

java.class.version=51.0

java.endorsed.dirs=C:\Program Files\Java\sapjvm_7\jre\lib\endorsed

java.ext.dirs=C:\Program Files\Java\sapjvm_7\jre\lib\ext-sap;C:\Program Files\Java\sapjvm_7\jre\lib\ext;C:\Windows\Sun\Java\lib\ext

java.home=C:\Program Files\Java\sapjvm_7\jre

java.io.tmpdir=C:\Users\hearndw\AppData\Local\Temp\

java.library.path=C:\Program Files\Java\sapjvm_7\jre\bin;C:\Windows\Sun\Java\bin;C:\Windows\system32;C:\Windows;C:\Program Files\Java\sapjvm_7\jre\bin;C:\ProgramData\Oracle\Java\javapath;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\IXOS\bin;C:\Program Files (x86)\Common Files\Roxio Shared\DLLShared\;C:\Program Files (x86)\Common Files\Roxio Shared\OEM\DLLShared\;C:\Program Files (x86)\Common Files\Roxio Shared\OEM\DLLShared\;C:\Program Files (x86)\Common Files\Roxio Shared\OEM\12.0\DLLShared\;C:\Program Files (x86)\Roxio\OEM\AudioCore\;C:\Program Files (x86)\OpenText\Viewer\bin;C:\Program Files\OmniBack\bin\;.;;.;;.

java.runtime.name=Java(TM) SE Runtime Environment

java.runtime.version=7.1.030

java.specification.name=Java Platform API Specification

java.specification.vendor=Oracle Corporation

java.specification.version=1.7

java.vendor=SAP AG

-Xmx512m

-jar

[stephan_merker2 · Accepted solution]

Hello Danny,

I can't reproduce your problem. Opening "Install New Software" with SAP Development Tools for Eclipse - Luna Software Repository works well using SAP JVM 7.1.030 and I can see the available features.

Please try again using an unmodified version of SAPJVM (i.e. no certificates added to keystore). If this doesn't work for you you could try a recent Oracle JVM 7.

Best regards,

Stephan

FAQ #9,

[Former Member · Accepted solution]

Hello Stephen,

I tried both sapjvm_7 and Oracle JDK 1.7.0_76.  I get the same results.  Regarding JAVA, I've set the following environment variables in Windows:

JAVA_HOME C:\Program Files\Java\jdk1.7.0_76\jre

JAVA_PATH C:\Program Files\Java\jdk1.7.0_76\jre\bin

PATH C:\Program Files\Java\jdk1.7.0_76\jre\bin

I added the following entry to eclipse.ini

-vm

C:\Program Files\Java\jdk1.7.0_76\jre\bin\javaw.exe

Java version from CMD shows as:

java version "1.7.0_76"

Java(TM) SE Runtime Environment (build 1.7.0_76-b13)

Do you have any other ideas?

Thanks.

Danny Hearn

[Former Member · Accepted solution]

I had the same Problem at a customer pc. I needed to add an certificate, not for tools.hana but a customer one. after that i was able to install the tools

[PradeepBondla]

Hi,

I had same issue today, I was searching for solutions... your thread gave good understanding.

My solution is...

All I have to do is come out of company network and just use internet (no LAN, VPN etc).

Thats solved the issue. This is just for future reference if anyone facing similar issue.

-Pradeep

[Former Member]

Hello Stephen,

Looking at the certificate for that page, it comes from our company.

Mathias,  I downloaded the trusted root certificate for our company and I can now see the HANA tools.

Thank you both.

[Former Member]

In my continued troubleshooting attempts, I have done a few things.  First I deleted all versions of JAVA from my PC.  Secondly, I installed the 1.6.0_45 SDK version of JAVA.  I used IE to get to the https://tools.hana.ondemand.com/luna and added the certificate to IE.  I then exported that certificate from IE and added it to the cacerts file for JAVA 1.6   This didn't make a difference.

I found that Eclipse adds /content.xml to the URL above when attempting to download the HANA addon.  Using IE to go to https://tools.hana.ondemand.com/luna/content.xml I get a 404 not found error.  After some google searches, I replaced content.xml with content.jar and a file download popped up.   I tried to add content.jar to the url for HANA within Eclipse, but it just made it content.xml/content.jar and returned the same unable to read repository message.

I'm not sure where to go from this point.

[stephan_merker2]

You should never need to add any certificate for https://tools.hana.ondemand.com/ , neither in your browser nor in an (up to date) JVM. If you have to, it looks to me like someone is tweaking with https on the way from https://tools.hana.ondemand.com/ to your browser (intermediate SSL termination aka man-in-the-middle attack).

Can you check the certificate path of https://tools.hana.ondemand.com/ in your browser? It is supposed to be:

Baltimore CyberTrust Root

  Verizon Akamai SureServer CA G14-SHA1

     *.hana.ondemand.com

Some more info:

• https://tools.hana.ondemand.com/luna/content.xml is supposed to result in a 404. This file doesn't exist on the update site. Still Eclipse asks for it as part of the p2 protocol.
• https://tools.hana.ondemand.com/luna/content.jar exists on the server and can be downloaded e.g. via browser
• The correct URL to enter in the Eclipse Installation Wizard is: https://tools.hana.ondemand.com/luna (without content.xml/content.jar)