SSL/proxy error on startup while downloading map styles

[ftrebien]

Hello,

Since an update to JOSM 6891, I've started getting the following message at start-up on two computers, both running an up-to-date Debian Wheezy system, one behind a proxy, but not the other:

---

JOSM tried to access the following resources:

• ​https://raw.githubusercontent.com/bastik/mapcss-tools/osm/mapnik2mapcss/osm-results/mapnik.zip

but failed to do so, because of the following network errors:

• javax.net.ssl.SSLProtocolException: handshake alert: unrecognized_name

It may result of a missing proxy configuration.
Would you like to change your proxy settings now?

---

Proxy settings are set to No proxy on the computer that is not behind a proxy.

The URL above is downloadable to me using a web browser (Chromium, Iceweasel) without problems. The Mapnik style no longer appears under the Map Paint Styles menu. It does show in the Map Settings pane in JOSM's preferences, but even though it is checked, the style is not applied to the map view.

JOSM updated all plugins without any network-related error on both computers.

I also have JOSM (latest) installed, version 6918, where all symptoms are now equal after I tried to reload the Mapnik style by removing it from the list of active styles, reloading the list of available styles, and then adding it back to the active list (which gave me no error message at all). Before trying to do so, the Mapnik style still showed under the Map Paint Styles menu and the style still worked.

The Mapnik style is not one I use often, but other people are having the same problem, so any ideas on how to fix this would be appreciated.

[Don-vip]

Java bug: ​http://stackoverflow.com/q/7615645/2257172

But there's an easy workaround.

[Don-vip]

In 6946/josm:

fix #9875 - disable jsse.enableSNIExtension

[ftrebien]

Indeed, running JOSM with java -Djsse.enableSNIExtension=false -jar /usr/share/josm/josm.jar fixes the issue for me. Meanwhile, users can set the environment variable JAVA_OPTS=-Djsse.enableSNIExtension=false before launching JOSM or edit the line that sets JAVA_OPTS in the launch scripts at /usr/bin/josm and /usr/bin/josm-latest.

[Don-vip]

or wait a few hours for the next tested version :)

[ftrebien]

Sure. Well, thanks a lot! :D

[stoecker]

Hmm, disabling SNI seems not a good idea to me. It will break all HTTPS accesses to servers with virtual hosts.

[Don-vip]

In 6950/josm:

see #9875 - implement fallback via advanced preference jdk.tls.enableSNIExtension to re-enable SNI if needed

[bastiK]

In 9218/josm:

fix #12152 - re-enable SNI by default

[bastiK]

Ticket #14241 has been marked as a duplicate of this ticket.