[ https://issues.apache.org/jira/browse/WAGON-452?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16427074#comment-16427074 ]
Michael Osipov commented on WAGON-452: -------------------------------------- Folks, while the PR looks fine to me, I would like to fully understand [~DonnyDepp]'s comment: your problem was basically that your chain was not of length 1, but of three and the {{checkValidity()}} method was never called, {{false}} was returned by default. > Missing exception handling when maven.wagon.http.ssl.ignore.validity.dates > flag is set to 'true' > ------------------------------------------------------------------------------------------------ > > Key: WAGON-452 > URL: https://issues.apache.org/jira/browse/WAGON-452 > Project: Maven Wagon > Issue Type: Bug > Components: wagon-http > Affects Versions: 2.10 > Reporter: VĂtor Teixeira > Priority: Major > Labels: easyfix, maven, security > Original Estimate: 24h > Remaining Estimate: 24h > > On org.apache.maven.wagon.providers.http.RelaxedTrustStrategy exception > handling is missing. > With maven.wagon.http.ssl.ignore.validity.dates=true the following exception > is thrown: > sun.security.validator.ValidatorException: PKIX path validation failed: > java.security.cert.CertPathValidatorException: timestamp check failed: > NotAfter: Tue Dec 29 23:59:59 GMT 2015 -> [Help 1] -- This message was sent by Atlassian JIRA (v7.6.3#76005)