Hi Douglas, Am Donnerstag, dem 28.10.2021 um 14:58 +0000 schrieb Douglas Thompson (dthompson): > INFO [org.netbeans.modules.autoupdate.services.Utilities]: Cannot validate > certificate path - Path does not chain with any of the trust anchors > java.security.cert.CertPathValidatorException: Path does not chain with any > of the trust anchors > at > java.base/sun.security.provider.certpath.PKIXCertPathValidator.validate(PKIXCertPathValidator.java:158) > at > java.base/sun.security.provider.certpath.PKIXCertPathValidator.engineValidate(PKIXCertPathValidator.java:84) > at > java.base/java.security.cert.CertPathValidator.validate(CertPathValidator.java:309) > [catch] at > org.netbeans.modules.autoupdate.services.Utilities.verifyCACertificatePath(Utilities.java:200) > at > org.netbeans.modules.autoupdate.services.Utilities.verifyCertificates(Utilities.java:177) > at > org.netbeans.modules.autoupdate.services.InstallSupportImpl.verifyNbm(InstallSupportImpl.java:1135) > at > org.netbeans.modules.autoupdate.services.InstallSupportImpl.doValidate(InstallSupportImpl.java:852) > at > org.netbeans.modules.autoupdate.services.InstallSupportImpl.doValidate(InstallSupportImpl.java:805) > at > org.netbeans.modules.autoupdate.services.InstallSupportImpl.access$900(InstallSupportImpl.java:75) > at > org.netbeans.modules.autoupdate.services.InstallSupportImpl$2.call(InstallSupportImpl.java:247) > at > org.netbeans.modules.autoupdate.services.InstallSupportImpl$2.call(InstallSupportImpl.java:220) > at > java.base/java.util.concurrent.FutureTask.run(FutureTask.java:264) > at > java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1128) > at > java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:628) > at java.base/java.lang.Thread.run(Thread.java:834)
this exception is triggered from the plugin package verification. NBMs are basicly JAR files, JAR files can contain cryptographic signatures, that can be used to validate the origin of plugins and ensure they are not tampered with. To do this, the autoupdate code tries to validate the found certificate against a list of trusted certificates. The message in the log reports, that there is no trust root found. This results in the plugin being listed as "Self signed". HTH Matthias --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected] For further information about the NetBeans mailing lists, visit: https://cwiki.apache.org/confluence/display/NETBEANS/Mailing+lists
