HattrickOrganizer icon indicating copy to clipboard operation
HattrickOrganizer copied to clipboard

[BUG] First Portable Installation missed CHPP link

Open mistermax80 opened this issue 1 year ago • 7 comments

Describe the bug First Portable Installation missed CHPP link

To Reproduce On new portabile installation

Screenshots image

Platform information:

  • OS: Windows
  • Version 7.3 523

mistermax80 avatar Jan 29 '24 14:01 mistermax80

Wow, welcome back, long time no see! ;-)

This could be an issue with OAuth, somehow. Would you be able to include the logs to see if there is anything in there? Also, you mention “First portable installation” -- does it mean it worked subsequently?

tychobrailleur avatar Jan 29 '24 20:01 tychobrailleur

@mistermax80 nice to see you here again!

Please check if this could be the same as #1939

wsbrenk avatar Jan 29 '24 22:01 wsbrenk

hi mates, nice to see you!!!! I need this error: image

2024-01-30 12:58:33 [Info] core.model.HOVerwaltung: language used for interface is: Italiano 2024-01-30 12:58:33 [Info] core.gui.HOMainFrame: This is HO! version 7.3, have fun! 2024-01-30 12:58:33 [Info] core.gui.HOMainFrame: Operating system found: Windows 10 on amd64 (10.0) 2024-01-30 12:58:33 [Info] core.gui.HOMainFrame: Using java: 17.0.3 (Eclipse Adoptium) 2024-01-30 12:58:34 [Warning] module.lineup.Lineup: no match to determine location 2024-01-30 12:58:41 [Error] core.net.login.OAuthDialog: Exception in obtainUserCode: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target 2024-01-30 12:59:46 [Info] core.gui.HOMainFrame$1: shutting down HO... 2024-01-30 12:59:46 [Info] core.gui.HOMainFrame: Shutdown complete! isAppTerminated: true 2024-01-30 12:59:47 [Info] core.gui.HOMainFrame$1: exiting...

mistermax80 avatar Jan 30 '24 12:01 mistermax80

This seems to be the same TLS error as #1939 all right. Are you behind a VPN, a firewall, or a network proxy, by any chance?

From memory, we use the JVM CA certs to connect to CHPP, and CHPP's cert is signed by DigitCert:

Screenshot from 2024-01-30 20-48-08

And that root CA definitely is the cacerts bundle part of 17.0.3 Eclipse Temurin:

Screenshot from 2024-01-30 20-52-59

Reason this could fail, however, like in #1939 is if you're behind a work proxy which re-encrypts all traffic using an internal CA.

(Edit: with the correct screenshot, this time...)

tychobrailleur avatar Jan 30 '24 20:01 tychobrailleur

So, I think some limitation, Im trying on business laptop. I will try run with admin right.

mistermax80 avatar Jan 30 '24 20:01 mistermax80

@mistermax80 It's not really a permissions issue, more of a network one. One way to solve this would be to prompt the user with the cert that is being used, and ask that user whether to accept it, but in 99% of cases, the user would not be able to tell whether or not this is a safe cert to accept, so I am erring on the “this is a limitation” side all right.

tychobrailleur avatar Feb 03 '24 07:02 tychobrailleur

So, in my case, i should accept the limitation and I will not install HO... I think, if I take the risk if accept or no, by an force beviour.

mistermax80 avatar Mar 14 '24 08:03 mistermax80

Closing this as per https://github.com/ho-dev/HattrickOrganizer/issues/2016#issuecomment-1925204763

tychobrailleur avatar Jun 23 '24 07:06 tychobrailleur