Schedules Direct and Java 10 (not working)

[stuckless]

I've been working on a Java 10 container for SageTV and everything appears to work, except that Schedules Direct throws some ssl error. I'm not sure why, but, we'll have to try to resolve this before people start moving to Java 10. (Java 10 was released recently)

Fri 3/23 14:39:37.755 [EPG@3e803b41] Caused by: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
Fri 3/23 14:39:37.755 [EPG@3e803b41]    at java.base/sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:385)
Fri 3/23 14:39:37.755 [EPG@3e803b41]    at java.base/sun.security.validator.PKIXValidator.engineValidate(PKIXValidator.java:290)
Fri 3/23 14:39:37.755 [EPG@3e803b41]    at java.base/sun.security.validator.Validator.validate(Validator.java:264)
Fri 3/23 14:39:37.755 [EPG@3e803b41]    at java.base/sun.security.ssl.X509TrustManagerImpl.validate(X509TrustManagerImpl.java:343)
Fri 3/23 14:39:37.755 [EPG@3e803b41]    at java.base/sun.security.ssl.X509TrustManagerImpl.checkTrusted(X509TrustManagerImpl.java:226)
Fri 3/23 14:39:37.755 [EPG@3e803b41]    at java.base/sun.security.ssl.X509TrustManagerImpl.checkServerTrusted(X509TrustManagerImpl.java:133)
Fri 3/23 14:39:37.755 [EPG@3e803b41]    at java.base/sun.security.ssl.ClientHandshaker.checkServerCerts(ClientHandshaker.java:1947)
Fri 3/23 14:39:37.755 [EPG@3e803b41]    ... 26 more
Fri 3/23 14:39:37.755 [EPG@3e803b41] Caused by: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
Fri 3/23 14:39:37.755 [EPG@3e803b41]    at java.base/sun.security.provider.certpath.SunCertPathBuilder.build(SunCertPathBuilder.java:141)
Fri 3/23 14:39:37.755 [EPG@3e803b41]    at java.base/sun.security.provider.certpath.SunCertPathBuilder.engineBuild(SunCertPathBuilder.java:126)
Fri 3/23 14:39:37.755 [EPG@3e803b41]    at java.base/java.security.cert.CertPathBuilder.build(CertPathBuilder.java:297)
Fri 3/23 14:39:37.755 [EPG@3e803b41]    at java.base/sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:380)
Fri 3/23 14:39:37.755 [EPG@3e803b41]    ... 32 more
Fri 3/23 14:39:37.756 [EPG@3e803b41] ERROR Updating EPG Source Local Over the Air Broadcast - N5Y5M4 (sdepg)
Fri 3/23 14:39:37.756 [EPG@3e803b41] ErrorText:expand called on Local Over the Air Broadcast - N5Y5M4 (sdepg) at Fri 3/23 14:39:37.589 expandedUntil=Fri 3/23 14:38:37.410 scannedUntil=Sun 8/17 2:12:55.80:

[Taddeusz]

Everything I'm seeing is that it has to do with self-signed certificates. Did they change the behavior of ignoring or accepting them?

[KarylFStein]

I don't know much about JAVA, but it looks like you may need to add a trusted certificate store with the root CA and any intermediaries.

[stuckless]

Originally Posted by Taddeusz

Everything I'm seeing is that it has to do with self-signed certificates. Did they change the behavior of ignoring or accepting them?

Originally Posted by KarylFStein

I don't know much about JAVA, but it looks like you may need to add a trusted certificate store with the root CA and any intermediaries.

Yeah, so it's odd that Java 9 was OK, but Java 10 fails. But, I did find some answers related to importing the certificate, so, in the Java 10 docker container it does now include the certificate for schedules direct. When I put the URL in the browser, it says it's valid, but Java 10 for some reason doesn't like it (it does now, because I added it)

[Taddeusz]

I’m reading that Java 10 has changed the way they source the root CA certs. Might have something to do with that.

[atchoo]

Is this still an issue? I recently moved to Unraid-Docker with the java10 install and I had guide data until today where I have No Data everywhere. Maybe it downloaded the guide the first time I installed but isn't able to update it with the java10 install?

(edit) I went back to the sources and configured the EPG again and the guide data downloaded. Not sure what happened, if it will still work in 2 weeks. We'll see.

(edit2) When I restart sage I lose all Guide Data !

(edit3) Might be a problem with a corrupted Wiz.bin... it seems it could be related? If you have hints they are welcome.

(edit4) All good now. I fixed Wiz.bin (it was big and corrupted) and I got my guide data back (had to reload my sources and configurations). So I guess Schedules Direct and Java10 is not an issue anymore because it's all running fine in my install now.