Error attempting to connect IBM Developer for z/OS 15.0.x and 16.0.x to SonarQube with an integrated SonarLint plugin

Troubleshooting

Problem

The SonarLint 6.2 binding connection from IBM Developer for z/OS 15.0.x or 16.0.x to SonarQube 9.2 fails with

"Unable to find acceptable protocols.  
isFallback=false, modes=[ConnectionSpec(cipherSuites=[TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,
TLS,CHACHA_POLY1305_SHA256, ...
TLS_RSA_WITH_AES_256_CBC_SHA, SSL_RSA_WITH_3DES_EDE_CBC_SHA], 
tlsVersion=[TLS_1_3, TLS_1_2], 
supportsTlsExtensions=true), 
ConnectionSpec()], 
supported protocols=[TLSv1]"

The certificates being used in this scenario are TLSv1.2.

Symptom

In the SonarLint Console when output is enabled, there is a stack trace with results:

Cause

SonarQube uses an https server connection, not the RSE secure connection.

Environment

Windows

Diagnosing The Problem

To capture IDz logging for SonarLint,

1) In IDz, go to Window/Show view/Other, select General/Console and click OK.

2) In the Console view, select the far right drop-down to access the Console types.

3) Select SonarLint Console.

4) Select the Show Console drop-down.

5) Select On Output.

6) Select Configure logs.

7) Select both Verbose output and Analysis logs.

To capture Java logging for SonarLint:

1) Edit the eclipse.ini from the IDz install location such as C:\Program Files\IBM\SDP.

Add -Djavax.net.debug=all to the bottom of the eclipse.ini and save.

-vm
jdk/jre/bin/javaw
-startup
plugins/org.eclipse.equinox.launcher_1.5.0.v20180512-1130.jar
--launcher.library
plugins/org.eclipse.equinox.launcher.win32.win32.x86_64_1.1.700.v20180518-1200
-install
C:/Program Files/IBM/SDP
-vmargs
-Xquickstart
-Xgcpolicy:gencon
-Xcompressedrefs
-Djava.util.Arrays.useLegacyMergeSort=true
-Djavax.xml.accessExternalSchema=all
-Xgc:concurrentScavenge
-Xms256m
-Xmx2048m
-Dequinox.resolver.batch.timeout=2000
-Djavax.net.debug=all

2) With the Windows command prompt, cd to C:\Program Files\IBM\SDP.

Launch the workbench with eclipsec.exe instead of eclipse.exe that is used in the shortcut.

Type eclipsec -debug -consoleLog > c:\temp\console.log.

This should generate an output file called console.log in c:/temp.

If C:\temp is not a writable directory, pick a directory where you can create a file.

*Note: Administrator permission is required to edit the eclipse.ini and to launch eclipsec.

Resolving The Problem

Add the SonarQube certificates including any intermediate certificates required to complete the chain to IDz.

1) Add the certificates to the Java cacerts file found in C:\Program Files\IBM\SDP\jdk\jre\lib\security

using Java keytool under C:\Program Files\IBM\SDP\jdk\jre\bin\keytool.exe or IBM Key Management found in C:\Program Files\IBM\SDP\jdk\jre\bin\ikeyman.exe as trusted.

2) Under Window/Preferences/Explorer/Certificate Management, set the truststore to the cacerts (or other specified file) to which the certificates are added.

3) Under Window/Preferences/Explorer/Certificate Management, set the Secure Socket Protocol to TLSv1.2.

Lastly, in the target path of the IDz shortcut, after -vmargs, add:

-Dhttps.protocols=TLSv1.2
-Dcom.ibm.jsse2.overrideDefaultTLS=true
-Dcom.ibm.jsse2.overrideDefaultProtocol=TLSv12

The command in the target path should look similar to (with no line breaks):

"C:\Program Files\IBM\SDP\eclipse.exe" 
-product com.ibm.rational.developer.systemz.product.ide 
-Dhttps.protocols=TLSv1.2 -Dcom.ibm.jsse2.overrideDefaultTLS=true -Dcom.ibm.jsse2.overrideDefaultProtocol=TLSv12

Document Location

Worldwide

[{"Type":"MASTER","Line of Business":{"code":"LOB35","label":"Mainframe SW"},"Business Unit":{"code":"BU058","label":"IBM Infrastructure w\/TPS"},"Product":{"code":"SSTRMM","label":"IBM Developer for z\/OS"},"ARM Category":[{"code":"a8m0z00000008gXAAQ","label":"IBM Developer for Z\/OS-\u003EIntegrations: Third Party-\u003ESonarLint_SonarQube_SonarCloud"}],"ARM Case Number":"TS010389856","Platform":[{"code":"PF033","label":"Windows"}],"Version":"15.0.0;15.0.1;15.0.2;15.0.3;15.0.4;15.0.5;16.0.0;and future releases"}]

Product Synonym

IDz

Was this topic helpful?

Document Information

Modified date:
05 December 2023

UID

ibm16837505

Tips