Re: [release] [OpenDaylight Discuss] Certificate changes


Ivan Hrasko
 

Hi


you can try:


mvn clean install -Djavax.net.ssl.trustStore=$JAVA_HOME/jre/lib/security/cacerts


maybe it helps


Od: Vishal Thapar <vishal.thapar@...>
Odoslané: 20. marca 2017 11:04
Komu: Anil Belur
Kópia: tsc@...; OpenDaylight Discuss; release@...; OpenDaylight Infrastructure
Predmet: Re: [release] [OpenDaylight Discuss] Certificate changes
 

Hi Anil,

 

I got the certificate downloaded and checked my cert store to confirm also, but still getting the same error.

 

Regards,

Vishal.

 

From: Anil Belur [mailto:abelur@...]
Sent: 20 March 2017 14:48
To: Vishal Thapar <vishal.thapar@...>
Cc: Andrew Grimberg <agrimberg@...>; OpenDaylight Discuss <discuss@...>; OpenDaylight Infrastructure <infrastructure@...>; release@...; tsc@...
Subject: Re: [OpenDaylight Discuss] [release] Certificate changes

 

 

 

On Mon, Mar 20, 2017 at 5:41 PM, Vishal Thapar <vishal.thapar@...> wrote:

Hi Andrew,

I am facing cert issues when trying to build locally. Does this require any specific version of Java? Do I need to manually update certificates?

This is what I have:
$ java -version
java version "1.8.0_60"
Java(TM) SE Runtime Environment (build 1.8.0_60-b27)
Java HotSpot(TM) 64-Bit Server VM (build 25.60-b23, mixed mode)

This is the error I am getting:

Downloading: https://nexus.opendaylight.org/content/repositories/opendaylight.snapshot/org/opendaylight/neutron/model/0.8.0-SNAPSHOT/maven-metadata.xml
[WARNING] Could not transfer metadata org.opendaylight.neutron:model:0.8.0-SNAPSHOT/maven-metadata.xml from/to opendaylight-snapshot (https://nexus.opendaylight.org/content/reposit
ories/opendaylight.snapshot/
): sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find vali
d certification path to requested target

 

Hello Vishal, 

 

This possibly looks like the cert chain may not be imported into your $JAVA_HOME key store. For fixing this, I would try downloading the cert file and using keytool to import the certificate{s}.  

 

--[cut]--

openssl s_client -connect nexus.opendaylight.org:443 < /dev/null | sed -ne '/-BEGIN CERTIFICATE-/,/-END CERTIFICATE-/p' > public.crt

<JAVA_HOME>/bin/keytool -import -alias nexus.opendaylight.org:443 -keystore <JAVA_HOME>/jre/lib/security/cacerts -file public.crt 

--[/cut]--

 

Thanks,

Anil 

Join TSC@lists.opendaylight.org to automatically receive all group messages.