[
https://issues.apache.org/jira/browse/MNG-6329?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16303916#comment-16303916
]
Yogendra Rampuria commented on MNG-6329:
----------------------------------------
[~rfscholte] I have tried using absolute path also, and that is not a problem
in this case. Just to be sure I changed permission of keystore to be readable
by all. I also used different quotations (singles, singles inside double,
double inside single, no quotes with escaped spaces) to ensure that
substitution was correct.
Just to debug, I added an echo statement for java command in mvn script. Based
on that here is was I observed:
NOT WORKING
$ export MAVEN_OPTS=" -Djavax.net.ssl.trustStore=internalca.jks
-Djavax.net.ssl.trustStorePassword=changeit"
$ mvn clean install
/Library/Java/JavaVirtualMachines/jdk1.8.0_151.jdk/Contents/Home/bin/java
-Djavax.net.ssl.trustStore=internalca.jks
-Djavax.net.ssl.trustStorePassword=changeit -classpath
/usr/local/Cellar/maven/3.5.2/libexec/boot/plexus-classworlds-2.5.2.jar
-Dclassworlds.conf=/usr/local/Cellar/maven/3.5.2/libexec/bin/m2.conf
-Dmaven.home=/usr/local/Cellar/maven/3.5.2/libexec
-Dlibrary.jansi.path=/usr/local/Cellar/maven/3.5.2/libexec/lib/jansi-native
-Dmaven.multiModuleProjectDirectory=/Users/yogendra
org.codehaus.plexus.classworlds.launcher.Launcher clean install
WORKING
$ unset MAVEN_OPTS
$ mvn -Djavax.net.ssl.trustStore=internalca.jks
-Djavax.net.ssl.trustStorePassword=changeit clean install
/Library/Java/JavaVirtualMachines/jdk1.8.0_151.jdk/Contents/Home/bin/java
-classpath
/usr/local/Cellar/maven/3.5.2/libexec/boot/plexus-classworlds-2.5.2.jar
-Dclassworlds.conf=/usr/local/Cellar/maven/3.5.2/libexec/bin/m2.conf
-Dmaven.home=/usr/local/Cellar/maven/3.5.2/libexec
-Dlibrary.jansi.path=/usr/local/Cellar/maven/3.5.2/libexec/lib/jansi-native
-Dmaven.multiModuleProjectDirectory=/Users/yogendra
org.codehaus.plexus.classworlds.launcher.Launcher
-Djavax.net.ssl.trustStore=internalca.jks
-Djavax.net.ssl.trustStorePassword=changeit clean install
So, my _hunch_ is that somehow the launcher is able to carry forward the -D
flags that are passed are program arguments, but -D flag as jvm arguments are
not getting carried over.
> SSL Truststore via MAVEN_OPTS fails
> -----------------------------------
>
> Key: MNG-6329
> URL: https://issues.apache.org/jira/browse/MNG-6329
> Project: Maven
> Issue Type: Bug
> Components: Command Line
> Affects Versions: 3.5.2
> Environment: Apache Maven 3.5.2
> (138edd61fd100ec658bfa2d307c43b76940a5d7d; 2017-10-18T15:58:13+08:00)
> Maven home: /usr/local/Cellar/maven/3.5.2/libexec
> Java version: 1.8.0_151, vendor: Oracle Corporation
> Java home:
> /Library/Java/JavaVirtualMachines/jdk1.8.0_151.jdk/Contents/Home/jre
> Default locale: en_SG, platform encoding: UTF-8
> OS name: "mac os x", version: "10.13.2", arch: "x86_64", family: "mac"
> Reporter: Yogendra Rampuria
>
> We use an internal self-signed CA certificate for our repository.
> Certificates for these internal CAs are distributed via a jks file. I set
> MAVEN_OPTS in .mavenrc file (and also tried on command line)
> {code:title=Shell|borderStyle=solid}
> $ export MAVEN_OPTS="-Djavax.net.ssl.trustStore=internalca.jks
> -Djavax.net.ssl.trustStorePassword=changeit"
> $ mvn clean install
> ...snip...
> sun.security.validator.ValidatorException: PKIX path building failed:
> sun.security.provider.certpath.SunCertPathBuilderException: unable to find
> valid certification path to requested target
> ...snip..
> $ unset MAVEN_OPTS
> $ mvn clean -Djavax.net.ssl.trustStore=internalca.jks
> -Djavax.net.ssl.trustStorePassword=changeit install
> ..snip..
> BUILD SUCESS
> {code}
--
This message was sent by Atlassian JIRA
(v6.4.14#64029)
