[jira] [Updated] (NETBEANS-2322) Downloading Maven index (from a mirror) fails due to TLS handshake error, -Djavax.net.ssl.trustStore from global execution options is not used
[
https://issues.apache.org/jira/browse/NETBEANS-2322?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
dennis lucero updated NETBEANS-2322:
Affects Version/s: 11.3
Labels: certificate download javadoc maven mirror sources ssl
tls (was: certificate maven mirror ssl tls)
> Downloading Maven index (from a mirror) fails due to TLS handshake error,
> -Djavax.net.ssl.trustStore from global execution options is not used
> --
>
> Key: NETBEANS-2322
> URL: https://issues.apache.org/jira/browse/NETBEANS-2322
> Project: NetBeans
> Issue Type: Bug
> Components: projects - Maven
>Affects Versions: 10.0, 11.3
> Environment: Product Version: Apache NetBeans IDE 10.0 (Build
> incubator-netbeans-release-380-on-20181217)
> Java: 11; OpenJDK 64-Bit Server VM 11+28
> Runtime: OpenJDK Runtime Environment 11+28
> System: Windows 10 version 10.0 running on amd64; Cp1252; de_DE (nb)
>Reporter: dennis lucero
>Priority: Major
> Labels: certificate, download, javadoc, maven, mirror, sources,
> ssl, tls
>
> We have set up a mirror of the Maven central. Downloading artifacts works
> without a problem, but the index cannot be retrieved, so NetBeans fails to
> suggest version numbers in pom.xml files.
> Excerpt from ~/.m2/settings.xml:
> {{}}
> {{my-central-mirror}}
> {{My Central Mirror}}
> {{https://maven.example.org/repository/maven-central/}}
> {{central}}
> {{}}
> (Of course the real URL is using our local hostname.)
> The global execution options (Options, Java, Maven, Execution) are:
> {{--batch-mode --errors
> -Djavax.net.ssl.trustStore=C:/Users/example/example.jks}}
> Our mirror can only be used with HTTPS. The NetBeans log contains:
> {{INFO [org.netbeans.modules.maven.indexer.NexusRepositoryIndexerImpl]:
> Downloaded maven index file has size 0 (zipped). The usable space in
> C:\Users\example\AppData\Local\NetBeans\Cache\10.0 is 139.946.274.816.}}
> {{INFO [org.netbeans.modules.maven.indexer.NexusRepositoryIndexerImpl]: could
> not (re-)index my-central-mirror}}
> {{sun.security.provider.certpath.SunCertPathBuilderException: unable to find
> valid certification path to requested target}}
> {{at
> java.base/sun.security.provider.certpath.SunCertPathBuilder.build(SunCertPathBuilder.java:141)}}
> {{at
> java.base/sun.security.provider.certpath.SunCertPathBuilder.engineBuild(SunCertPathBuilder.java:126)}}
> {{at
> java.base/java.security.cert.CertPathBuilder.build(CertPathBuilder.java:297)}}
> {{at
> java.base/sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:380)}}
> {{Caused: sun.security.validator.ValidatorException: PKIX path building
> failed}}
> {{at
> java.base/sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:385)}}
> {{at
> java.base/sun.security.validator.PKIXValidator.engineValidate(PKIXValidator.java:290)}}
> {{at java.base/sun.security.validator.Validator.validate(Validator.java:264)}}
> {{at
> java.base/sun.security.ssl.X509TrustManagerImpl.validate(X509TrustManagerImpl.java:321)}}
> {{at
> java.base/sun.security.ssl.X509TrustManagerImpl.checkTrusted(X509TrustManagerImpl.java:221)}}
> {{at
> java.base/sun.security.ssl.X509TrustManagerImpl.checkServerTrusted(X509TrustManagerImpl.java:129)}}
> {{at
> java.base/sun.security.ssl.CertificateMessage$T12CertificateConsumer.checkServerCerts(CertificateMessage.java:626)}}
> {{Caused: javax.net.ssl.SSLHandshakeException: PKIX path building failed:
> sun.security.provider.certpath.SunCertPathBuilderException: unable to find
> valid certification path to requested target}}
> {{at java.base/sun.security.ssl.Alert.createSSLException(Alert.java:128)}}
> {{at
> java.base/sun.security.ssl.TransportContext.fatal(TransportContext.java:321)}}
> {{at
> java.base/sun.security.ssl.TransportContext.fatal(TransportContext.java:264)}}
> {{at
> java.base/sun.security.ssl.TransportContext.fatal(TransportContext.java:259)}}
> {{at
> java.base/sun.security.ssl.CertificateMessage$T12CertificateConsumer.checkServerCerts(CertificateMessage.java:642)}}
> {{at
> java.base/sun.security.ssl.CertificateMessage$T12CertificateConsumer.onCertificate(CertificateMessage.java:461)}}
> {{at
> java.base/sun.security.ssl.CertificateMessage$T12CertificateConsumer.consume(CertificateMessage.java:361)}}
> {{at java.base/sun.security.ssl.SSLHandshake.consume(SSLHandshake.java:392)}}
> {{at
> java.base/sun.security.ssl.HandshakeContext.dispatch(HandshakeContext.java:444)}}
> {{at
> java.base/sun.security.ssl.HandshakeContext.dispatch(HandshakeContext.java:421)}}
> {{at
> java.base/sun.security.ssl.TransportContext.dispatch(TransportContext.java:178)}}
> {{at java.base/sun.security.ssl.SSLTransport.decode(SSLTransport.java:164
[jira] [Updated] (NETBEANS-2322) Downloading Maven index (from a mirror) fails due to TLS handshake error, -Djavax.net.ssl.trustStore from global execution options is not used
[
https://issues.apache.org/jira/browse/NETBEANS-2322?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
dennis lucero updated NETBEANS-2322:
Labels: certificate maven mirror ssl tls (was: certificate maven ssl tls)
> Downloading Maven index (from a mirror) fails due to TLS handshake error,
> -Djavax.net.ssl.trustStore from global execution options is not used
> --
>
> Key: NETBEANS-2322
> URL: https://issues.apache.org/jira/browse/NETBEANS-2322
> Project: NetBeans
> Issue Type: Bug
> Components: projects - Maven
>Affects Versions: 10.0
> Environment: Product Version: Apache NetBeans IDE 10.0 (Build
> incubator-netbeans-release-380-on-20181217)
> Java: 11; OpenJDK 64-Bit Server VM 11+28
> Runtime: OpenJDK Runtime Environment 11+28
> System: Windows 10 version 10.0 running on amd64; Cp1252; de_DE (nb)
>Reporter: dennis lucero
>Priority: Major
> Labels: certificate, maven, mirror, ssl, tls
>
> We have set up a mirror of the Maven central. Downloading artifacts works
> without a problem, but the index cannot be retrieved, so NetBeans fails to
> suggest version numbers in pom.xml files.
> Excerpt from ~/.m2/settings.xml:
> {{}}
> {{my-central-mirror}}
> {{My Central Mirror}}
> {{https://maven.example.org/repository/maven-central/}}
> {{central}}
> {{}}
> (Of course the real URL is using our local hostname.)
> The global execution options (Options, Java, Maven, Execution) are:
> {{--batch-mode --errors
> -Djavax.net.ssl.trustStore=C:/Users/example/example.jks}}
> Our mirror can only be used with HTTPS. The NetBeans log contains:
> {{INFO [org.netbeans.modules.maven.indexer.NexusRepositoryIndexerImpl]:
> Downloaded maven index file has size 0 (zipped). The usable space in
> C:\Users\example\AppData\Local\NetBeans\Cache\10.0 is 139.946.274.816.}}
> {{INFO [org.netbeans.modules.maven.indexer.NexusRepositoryIndexerImpl]: could
> not (re-)index my-central-mirror}}
> {{sun.security.provider.certpath.SunCertPathBuilderException: unable to find
> valid certification path to requested target}}
> {{at
> java.base/sun.security.provider.certpath.SunCertPathBuilder.build(SunCertPathBuilder.java:141)}}
> {{at
> java.base/sun.security.provider.certpath.SunCertPathBuilder.engineBuild(SunCertPathBuilder.java:126)}}
> {{at
> java.base/java.security.cert.CertPathBuilder.build(CertPathBuilder.java:297)}}
> {{at
> java.base/sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:380)}}
> {{Caused: sun.security.validator.ValidatorException: PKIX path building
> failed}}
> {{at
> java.base/sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:385)}}
> {{at
> java.base/sun.security.validator.PKIXValidator.engineValidate(PKIXValidator.java:290)}}
> {{at java.base/sun.security.validator.Validator.validate(Validator.java:264)}}
> {{at
> java.base/sun.security.ssl.X509TrustManagerImpl.validate(X509TrustManagerImpl.java:321)}}
> {{at
> java.base/sun.security.ssl.X509TrustManagerImpl.checkTrusted(X509TrustManagerImpl.java:221)}}
> {{at
> java.base/sun.security.ssl.X509TrustManagerImpl.checkServerTrusted(X509TrustManagerImpl.java:129)}}
> {{at
> java.base/sun.security.ssl.CertificateMessage$T12CertificateConsumer.checkServerCerts(CertificateMessage.java:626)}}
> {{Caused: javax.net.ssl.SSLHandshakeException: PKIX path building failed:
> sun.security.provider.certpath.SunCertPathBuilderException: unable to find
> valid certification path to requested target}}
> {{at java.base/sun.security.ssl.Alert.createSSLException(Alert.java:128)}}
> {{at
> java.base/sun.security.ssl.TransportContext.fatal(TransportContext.java:321)}}
> {{at
> java.base/sun.security.ssl.TransportContext.fatal(TransportContext.java:264)}}
> {{at
> java.base/sun.security.ssl.TransportContext.fatal(TransportContext.java:259)}}
> {{at
> java.base/sun.security.ssl.CertificateMessage$T12CertificateConsumer.checkServerCerts(CertificateMessage.java:642)}}
> {{at
> java.base/sun.security.ssl.CertificateMessage$T12CertificateConsumer.onCertificate(CertificateMessage.java:461)}}
> {{at
> java.base/sun.security.ssl.CertificateMessage$T12CertificateConsumer.consume(CertificateMessage.java:361)}}
> {{at java.base/sun.security.ssl.SSLHandshake.consume(SSLHandshake.java:392)}}
> {{at
> java.base/sun.security.ssl.HandshakeContext.dispatch(HandshakeContext.java:444)}}
> {{at
> java.base/sun.security.ssl.HandshakeContext.dispatch(HandshakeContext.java:421)}}
> {{at
> java.base/sun.security.ssl.TransportContext.dispatch(TransportContext.java:178)}}
> {{at java.base/sun.security.ssl.SSLTransport.decode(SSLTransport.java:164)}}
> {{at
> java.base/sun.security.ssl.SSLSocketImpl.decode(SSLSocketImpl.java:1152)}}
> {{at
> java.base/
[jira] [Updated] (NETBEANS-2322) Downloading Maven index (from a mirror) fails due to TLS handshake error, -Djavax.net.ssl.trustStore from global execution options is not used
[
https://issues.apache.org/jira/browse/NETBEANS-2322?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
dennis lucero updated NETBEANS-2322:
Description:
We have set up a mirror of the Maven central. Downloading artifacts works
without a problem, but the index cannot be retrieved, so NetBeans fails to
suggest version numbers in pom.xml files.
Excerpt from ~/.m2/settings.xml:
{{}}
{{my-central-mirror}}
{{My Central Mirror}}
{{https://maven.example.org/repository/maven-central/}}
{{central}}
{{}}
(Of course the real URL is using our local hostname.)
The global execution options (Options, Java, Maven, Execution) are:
{{--batch-mode --errors
-Djavax.net.ssl.trustStore=C:/Users/example/example.jks}}
Our mirror can only be used with HTTPS. The NetBeans log contains:
{{INFO [org.netbeans.modules.maven.indexer.NexusRepositoryIndexerImpl]:
Downloaded maven index file has size 0 (zipped). The usable space in
C:\Users\example\AppData\Local\NetBeans\Cache\10.0 is 139.946.274.816.}}
{{INFO [org.netbeans.modules.maven.indexer.NexusRepositoryIndexerImpl]: could
not (re-)index my-central-mirror}}
{{sun.security.provider.certpath.SunCertPathBuilderException: unable to find
valid certification path to requested target}}
{{at
java.base/sun.security.provider.certpath.SunCertPathBuilder.build(SunCertPathBuilder.java:141)}}
{{at
java.base/sun.security.provider.certpath.SunCertPathBuilder.engineBuild(SunCertPathBuilder.java:126)}}
{{at
java.base/java.security.cert.CertPathBuilder.build(CertPathBuilder.java:297)}}
{{at
java.base/sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:380)}}
{{Caused: sun.security.validator.ValidatorException: PKIX path building failed}}
{{at
java.base/sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:385)}}
{{at
java.base/sun.security.validator.PKIXValidator.engineValidate(PKIXValidator.java:290)}}
{{at java.base/sun.security.validator.Validator.validate(Validator.java:264)}}
{{at
java.base/sun.security.ssl.X509TrustManagerImpl.validate(X509TrustManagerImpl.java:321)}}
{{at
java.base/sun.security.ssl.X509TrustManagerImpl.checkTrusted(X509TrustManagerImpl.java:221)}}
{{at
java.base/sun.security.ssl.X509TrustManagerImpl.checkServerTrusted(X509TrustManagerImpl.java:129)}}
{{at
java.base/sun.security.ssl.CertificateMessage$T12CertificateConsumer.checkServerCerts(CertificateMessage.java:626)}}
{{Caused: javax.net.ssl.SSLHandshakeException: PKIX path building failed:
sun.security.provider.certpath.SunCertPathBuilderException: unable to find
valid certification path to requested target}}
{{at java.base/sun.security.ssl.Alert.createSSLException(Alert.java:128)}}
{{at
java.base/sun.security.ssl.TransportContext.fatal(TransportContext.java:321)}}
{{at
java.base/sun.security.ssl.TransportContext.fatal(TransportContext.java:264)}}
{{at
java.base/sun.security.ssl.TransportContext.fatal(TransportContext.java:259)}}
{{at
java.base/sun.security.ssl.CertificateMessage$T12CertificateConsumer.checkServerCerts(CertificateMessage.java:642)}}
{{at
java.base/sun.security.ssl.CertificateMessage$T12CertificateConsumer.onCertificate(CertificateMessage.java:461)}}
{{at
java.base/sun.security.ssl.CertificateMessage$T12CertificateConsumer.consume(CertificateMessage.java:361)}}
{{at java.base/sun.security.ssl.SSLHandshake.consume(SSLHandshake.java:392)}}
{{at
java.base/sun.security.ssl.HandshakeContext.dispatch(HandshakeContext.java:444)}}
{{at
java.base/sun.security.ssl.HandshakeContext.dispatch(HandshakeContext.java:421)}}
{{at
java.base/sun.security.ssl.TransportContext.dispatch(TransportContext.java:178)}}
{{at java.base/sun.security.ssl.SSLTransport.decode(SSLTransport.java:164)}}
{{at java.base/sun.security.ssl.SSLSocketImpl.decode(SSLSocketImpl.java:1152)}}
{{at
java.base/sun.security.ssl.SSLSocketImpl.readHandshakeRecord(SSLSocketImpl.java:1063)}}
{{at
java.base/sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:402)}}
{{at
org.apache.maven.wagon.providers.http.httpclient.conn.ssl.SSLConnectionSocketFactory.createLayeredSocket(SSLConnectionSocketFactory.java:275)}}
{{at
org.apache.maven.wagon.providers.http.httpclient.conn.ssl.SSLConnectionSocketFactory.connectSocket(SSLConnectionSocketFactory.java:254)}}
{{at
org.apache.maven.wagon.providers.http.httpclient.impl.conn.HttpClientConnectionOperator.connect(HttpClientConnectionOperator.java:123)}}
{{at
org.apache.maven.wagon.providers.http.httpclient.impl.conn.PoolingHttpClientConnectionManager.connect(PoolingHttpClientConnectionManager.java:318)}}
{{at
org.apache.maven.wagon.providers.http.httpclient.impl.execchain.MainClientExec.establishRoute(MainClientExec.java:363)}}
{{at
org.apache.maven.wagon.providers.http.httpclient.impl.execchain.MainClientExec.execute(MainClientExec.java:219)}}
{{at
org.apache.maven.wagon.providers.http.httpclient.impl.execchain.ProtocolExec.execute(ProtocolExec.java:195)}}
{{at
org.apache.maven
