Do we know what the root cause is of having to use that?

Ed

On Thu, Mar 23, 2017 at 1:24 PM, Colin Dixon <[email protected]> wrote:

> While the -Djavax.net.ssl.trustStore=$JAVA_HOME/jre/lib/security/cacerts
> option fixes the problem, it feels like the "wrong" answer. Is there a
> right answer?
>
> --Colin
>
>
> On Mon, Mar 20, 2017 at 8:05 AM, Vishal Thapar <[email protected]
> > wrote:
>
>> Thank you Ivan, this worked for me.
>>
>>
>>
>> *From:* Ivan Hraško [mailto:[email protected]]
>> *Sent:* 20 March 2017 15:44
>> *To:* Vishal Thapar <[email protected]>; Anil Belur <
>> [email protected]>
>> *Cc:* [email protected]; OpenDaylight Discuss <
>> [email protected]>; [email protected];
>> OpenDaylight Infrastructure <[email protected]>
>> *Subject:* Re: [release] [OpenDaylight Discuss] Certificate changes
>>
>>
>>
>> Hi
>>
>>
>>
>> you can try:
>>
>>
>>
>> mvn clean install -Djavax.net.ssl.trustStore=$JAVA_HOME
>> /jre/lib/security/cacerts
>>
>>
>>
>> maybe it helps
>> ------------------------------
>>
>> *Od:* Vishal Thapar <[email protected]>
>> *Odoslané:* 20. marca 2017 11:04
>> *Komu:* Anil Belur
>> *Kópia:* [email protected]; OpenDaylight Discuss;
>> [email protected]; OpenDaylight Infrastructure
>> *Predmet:* Re: [release] [OpenDaylight Discuss] Certificate changes
>>
>>
>>
>> Hi Anil,
>>
>>
>>
>> I got the certificate downloaded and checked my cert store to confirm
>> also, but still getting the same error.
>>
>>
>>
>> Regards,
>>
>> Vishal.
>>
>>
>>
>> *From:* Anil Belur [mailto:[email protected]
>> <[email protected]>]
>> *Sent:* 20 March 2017 14:48
>> *To:* Vishal Thapar <[email protected]>
>> *Cc:* Andrew Grimberg <[email protected]>; OpenDaylight
>> Discuss <[email protected]>; OpenDaylight Infrastructure <
>> [email protected]>; [email protected];
>> [email protected]
>> *Subject:* Re: [OpenDaylight Discuss] [release] Certificate changes
>>
>>
>>
>>
>>
>>
>>
>> On Mon, Mar 20, 2017 at 5:41 PM, Vishal Thapar <
>> [email protected]> wrote:
>>
>> Hi Andrew,
>>
>> I am facing cert issues when trying to build locally. Does this require
>> any specific version of Java? Do I need to manually update certificates?
>>
>> This is what I have:
>> $ java -version
>> java version "1.8.0_60"
>> Java(TM) SE Runtime Environment (build 1.8.0_60-b27)
>> Java HotSpot(TM) 64-Bit Server VM (build 25.60-b23, mixed mode)
>>
>> This is the error I am getting:
>>
>> Downloading: https://nexus.opendaylight.org/content/repositories/opendayl
>> ight.snapshot/org/opendaylight/neutron/model/0.8.0-SNAPSHOT/
>> maven-metadata.xml
>> [WARNING] Could not transfer metadata org.opendaylight.neutron:model
>> :0.8.0-SNAPSHOT/maven-metadata.xml from/to opendaylight-snapshot (
>> https://nexus.opendaylight.org/content/reposit
>> ories/opendaylight.snapshot/
>> <https://nexus.opendaylight.org/content/repositories/opendaylight.snapshot/>):
>> sun.security.validator.ValidatorException: PKIX path building failed:
>> sun.security.provider.certpath.SunCertPathBuilderException: unable to
>> find vali
>> d certification path to requested target
>>
>>
>>
>> Hello Vishal,
>>
>>
>>
>> This possibly looks like the cert chain may not be imported into your
>> $JAVA_HOME key store. For fixing this, I would try downloading the cert
>> file and using keytool to import the certificate{s}.
>>
>>
>>
>> --[cut]--
>>
>> openssl s_client -connect nexus.opendaylight.org:443 < /dev/null | sed
>> -ne '/-BEGIN CERTIFICATE-/,/-END CERTIFICATE-/p' > public.crt
>>
>> <JAVA_HOME>/bin/keytool -import -alias nexus.opendaylight.org:443 -keystore
>> <JAVA_HOME>/jre/lib/security/cacerts -file public.crt
>>
>> --[/cut]--
>>
>>
>>
>> Thanks,
>>
>> Anil
>>
>> _______________________________________________
>> Discuss mailing list
>> [email protected]
>> https://lists.opendaylight.org/mailman/listinfo/discuss
>>
>>
>
> _______________________________________________
> release mailing list
> [email protected]
> https://lists.opendaylight.org/mailman/listinfo/release
>
>
_______________________________________________
Discuss mailing list
[email protected]
https://lists.opendaylight.org/mailman/listinfo/discuss
    • Re:... Andrew Grimberg
      • ... Andrew Grimberg
        • ... Andrew Grimberg
  • Re: [Ope... Andrew Grimberg
    • Re:... Vishal Thapar
      • ... Anil Belur
        • ... Vishal Thapar
          • ... Ivan Hraško
            • ... Vishal Thapar
            • ... Colin Dixon
            • ... Ed Warnicke
            • ... Colin Dixon
            • ... Vishal Thapar
            • ... Daniel Malachovsky -X (dmalacho - PANTHEON TECHNOLOGIES at Cisco)
            • ... Mohamed ElSerngawy
            • ... Colin Dixon
            • ... Vishal Thapar
            • ... Ed Warnicke
            • ... Colin Dixon
            • ... Colin Dixon
            • ... Ed Warnicke

Reply via email to