Re: [m2e-users] SSLPeerUnverifiedException with Eclipse 2018-09 (m2e 1.9

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] [List Home]

Re: [m2e-users] SSLPeerUnverifiedException with Eclipse 2018-09 (m2e 1.9.1) when downloading dependencies

From: Francois Marot <francois.marot@xxxxxxxxx>
Date: Thu, 24 Jan 2019 11:49:14 +0100
Delivered-to: m2e-users@xxxxxxxxxxx
List-archive: <https://www.eclipse.org/mailman/private/m2e-users>
List-help: <mailto:m2e-users-request@eclipse.org?subject=help>
List-subscribe: <https://www.eclipse.org/mailman/listinfo/m2e-users>, <mailto:m2e-users-request@eclipse.org?subject=subscribe>
List-unsubscribe: <https://www.eclipse.org/mailman/options/m2e-users>, <mailto:m2e-users-request@eclipse.org?subject=unsubscribe>

Hello all, I bump this message because tried again with Eclipse 18.12 and the problem is still there.

Eclipse m2e is unable to connect to an Archiva repository presenting a self-signed certificate and can't download any dependency...

This will start to be really problematic and I do not know what to do...

Does anyone know if I can downgrade okhttp ?

Maven on the command line or IntelliJ do not have this problem...

Regards

- - - - -
François Marot

On Tue, 23 Oct 2018 at 15:25, Matthew Piggott <mpiggott@xxxxxxxxxxxx> wrote:

The error message suggests that it can't verify the hostname, you may need to enable the JVM debug logging and dig through the logs. I also see that okhttp was upgraded 3.7 -> 3.11 which does remove a couple cipher suites.

On Tue, Oct 23, 2018, 04:50 Francois Marot, <francois.marot@xxxxxxxxx> wrote:
Hello, since I use the new version of Eclipse (2018-09 with m2e 1.9.1) Maven in Eclipse is unable to connect to by Archiva repository (behind a reverse proxy with certificate hand-crafted by my IT departement).
It fails whether I use embedded or external version of Maven (but I think only the embedded Maven is used to download dependencies).

It used to work with Eclipse Photon (2018-06) and it also work on the command line.
It tried in both Java 11 and Java 8, with the certificate imported in the JVM's keystore.

Is this an intentional change in m2ee ? Or more global to Eclipse ?
How to bypass it ?

The stack trace containing the SSLPeerUnverifiedException is at the end of the message

Regards,
Francois

Failed to read artifact descriptor for net.java.dev.jna:jna:jar:4.2.1
org.eclipse.aether.resolution.ArtifactDescriptorException: Failed to read artifact descriptor for net.java.dev.jna:jna:jar:4.2.1
    at org.apache.maven.repository.internal.DefaultArtifactDescriptorReader.loadPom(DefaultArtifactDescriptorReader.java:276)
    at org.apache.maven.repository.internal.DefaultArtifactDescriptorReader.readArtifactDescriptor(DefaultArtifactDescriptorReader.java:192)
    at org.eclipse.aether.internal.impl.DefaultDependencyCollector.resolveCachedArtifactDescriptor(DefaultDependencyCollector.java:539)
    at org.eclipse.aether.internal.impl.DefaultDependencyCollector.getArtifactDescriptorResult(DefaultDependencyCollector.java:522)
    at org.eclipse.aether.internal.impl.DefaultDependencyCollector.processDependency(DefaultDependencyCollector.java:411)
    at org.eclipse.aether.internal.impl.DefaultDependencyCollector.processDependency(DefaultDependencyCollector.java:365)
    at org.eclipse.aether.internal.impl.DefaultDependencyCollector.process(DefaultDependencyCollector.java:353)
    at org.eclipse.aether.internal.impl.DefaultDependencyCollector.collectDependencies(DefaultDependencyCollector.java:256)
    at org.eclipse.aether.internal.impl.DefaultRepositorySystem.collectDependencies(DefaultRepositorySystem.java:282)
    at org.apache.maven.project.DefaultProjectDependenciesResolver.resolve(DefaultProjectDependenciesResolver.java:169)
    at org.apache.maven.project.DefaultProjectBuilder.resolveDependencies(DefaultProjectBuilder.java:212)
    at org.apache.maven.project.DefaultProjectBuilder.build(DefaultProjectBuilder.java:185)
    at org.apache.maven.project.DefaultProjectBuilder.build(DefaultProjectBuilder.java:116)
    at org.eclipse.m2e.core.internal.embedder.MavenImpl.readMavenProject(MavenImpl.java:636)
    at org.eclipse.m2e.core.internal.project.registry.DefaultMavenDependencyResolver.resolveProjectDependencies(DefaultMavenDependencyResolver.java:63)
    at org.eclipse.m2e.core.internal.project.registry.ProjectRegistryManager.refreshPhase2(ProjectRegistryManager.java:530)
    at org.eclipse.m2e.core.internal.project.registry.ProjectRegistryManager$3.call(ProjectRegistryManager.java:492)
    at org.eclipse.m2e.core.internal.project.registry.ProjectRegistryManager$3.call(ProjectRegistryManager.java:1)
    at org.eclipse.m2e.core.internal.embedder.MavenExecutionContext.executeBare(MavenExecutionContext.java:177)
    at org.eclipse.m2e.core.internal.embedder.MavenExecutionContext.execute(MavenExecutionContext.java:151)
    at org.eclipse.m2e.core.internal.project.registry.ProjectRegistryManager.refresh(ProjectRegistryManager.java:496)
    at org.eclipse.m2e.core.internal.project.registry.ProjectRegistryManager.refresh(ProjectRegistryManager.java:351)
    at org.eclipse.m2e.core.internal.project.registry.ProjectRegistryManager.refresh(ProjectRegistryManager.java:298)
    at org.eclipse.m2e.core.internal.project.ProjectConfigurationManager.updateProjectConfiguration0(ProjectConfigurationManager.java:405)
    at org.eclipse.m2e.core.internal.project.ProjectConfigurationManager$2.call(ProjectConfigurationManager.java:352)
    at org.eclipse.m2e.core.internal.project.ProjectConfigurationManager$2.call(ProjectConfigurationManager.java:1)
    at org.eclipse.m2e.core.internal.embedder.MavenExecutionContext.executeBare(MavenExecutionContext.java:177)
    at org.eclipse.m2e.core.internal.embedder.MavenExecutionContext.execute(MavenExecutionContext.java:151)
    at org.eclipse.m2e.core.internal.embedder.MavenExecutionContext.execute(MavenExecutionContext.java:99)
    at org.eclipse.m2e.core.internal.embedder.MavenImpl.execute(MavenImpl.java:1351)
    at org.eclipse.m2e.core.internal.project.ProjectConfigurationManager.updateProjectConfiguration(ProjectConfigurationManager.java:349)
    at org.eclipse.m2e.core.ui.internal.UpdateMavenProjectJob.runInWorkspace(UpdateMavenProjectJob.java:77)
    at org.eclipse.core.internal.resources.InternalWorkspaceJob.run(InternalWorkspaceJob.java:42)
    at org.eclipse.core.internal.jobs.Worker.run(Worker.java:63)

Caused by: org.eclipse.aether.resolution.ArtifactResolutionException: Could not transfer artifact net.java.dev.jna:jna:pom:4.2.1 from/to archiva.default (https://archiva.olea-medical.local/repository/internal/): Hostname archiva.olea-medical.local not verified:
    certificate: sha256/fXefAy0ZPHjHZnjtc+O1kWQ4PwK94XCesII/Lp9B3aE=
    DN: CN=archiva.olea-medical.local, OU=Info, O=OLEA MEDICAL, L=LaCiota, ST=BdR, C=FR
    subjectAltNames: []
    at org.eclipse.aether.internal.impl.DefaultArtifactResolver.resolve(DefaultArtifactResolver.java:422)
    at org.eclipse.aether.internal.impl.DefaultArtifactResolver.resolveArtifacts(DefaultArtifactResolver.java:224)
    at org.eclipse.aether.internal.impl.DefaultArtifactResolver.resolveArtifact(DefaultArtifactResolver.java:201)
    at org.apache.maven.repository.internal.DefaultArtifactDescriptorReader.loadPom(DefaultArtifactDescriptorReader.java:261)
    ... 33 more

Caused by: org.eclipse.aether.transfer.ArtifactTransferException: Could not transfer artifact net.java.dev.jna:jna:pom:4.2.1 from/to archiva.default (https://archiva.olea-medical.local/repository/internal/): Hostname archiva.olea-medical.local not verified:
    certificate: sha256/fXefAy0ZPHjHZnjtc+O1kWQ4PwK94XCesII/Lp9B3aE=
    DN: CN=archiva.olea-medical.local, OU=Info, O=OLEA MEDICAL, L=LaCiota, ST=BdR, C=FR
    subjectAltNames: []

    at io.takari.aether.connector.AetherRepositoryConnector$2.wrap(AetherRepositoryConnector.java:856)
    at io.takari.aether.connector.AetherRepositoryConnector$2.wrap(AetherRepositoryConnector.java:1)
    at io.takari.aether.connector.AetherRepositoryConnector$GetTask.flush(AetherRepositoryConnector.java:630)
    at io.takari.aether.connector.AetherRepositoryConnector.get(AetherRepositoryConnector.java:309)
    at org.eclipse.aether.internal.impl.DefaultArtifactResolver.performDownloads(DefaultArtifactResolver.java:498)
    at org.eclipse.aether.internal.impl.DefaultArtifactResolver.resolve(DefaultArtifactResolver.java:399)
    ... 36 more

Caused by: javax.net.ssl.SSLPeerUnverifiedException: Hostname archiva.olea-medical.local not verified:
    certificate: sha256/fXefAy0ZPHjHZnjtc+O1kWQ4PwK94XCesII/Lp9B3aE=
    DN: CN=archiva.olea-medical.local, OU=Info, O=OLEA MEDICAL, L=LaCiota, ST=BdR, C=FR
    subjectAltNames: []

    at okhttp3.internal.connection.RealConnection.connectTls(RealConnection.java:329)
    at okhttp3.internal.connection.RealConnection.establishProtocol(RealConnection.java:282)
    at okhttp3.internal.connection.RealConnection.connect(RealConnection.java:167)
    at okhttp3.internal.connection.StreamAllocation.findConnection(StreamAllocation.java:257)
    at okhttp3.internal.connection.StreamAllocation.findHealthyConnection(StreamAllocation.java:135)
    at okhttp3.internal.connection.StreamAllocation.newStream(StreamAllocation.java:114)
    at okhttp3.internal.connection.ConnectInterceptor.intercept(ConnectInterceptor.java:42)
    at okhttp3.internal.http.RealInterceptorChain.proceed(RealInterceptorChain.java:147)
    at okhttp3.internal.http.RealInterceptorChain.proceed(RealInterceptorChain.java:121)
    at okhttp3.internal.cache.CacheInterceptor.intercept(CacheInterceptor.java:93)
    at okhttp3.internal.http.RealInterceptorChain.proceed(RealInterceptorChain.java:147)
    at okhttp3.internal.http.RealInterceptorChain.proceed(RealInterceptorChain.java:121)
    at okhttp3.internal.http.BridgeInterceptor.intercept(BridgeInterceptor.java:93)
    at okhttp3.internal.http.RealInterceptorChain.proceed(RealInterceptorChain.java:147)
    at okhttp3.internal.http.RetryAndFollowUpInterceptor.intercept(RetryAndFollowUpInterceptor.java:126)
    at okhttp3.internal.http.RealInterceptorChain.proceed(RealInterceptorChain.java:147)
    at okhttp3.internal.http.RealInterceptorChain.proceed(RealInterceptorChain.java:121)
    at okhttp3.RealCall.getResponseWithInterceptorChain(RealCall.java:200)
    at okhttp3.RealCall.execute(RealCall.java:77)
    at io.takari.aether.okhttp.OkHttpAetherClient.execute(OkHttpAetherClient.java:207)
    at io.takari.aether.okhttp.OkHttpAetherClient.get(OkHttpAetherClient.java:153)
    at io.takari.aether.connector.AetherRepositoryConnector$GetTask.getResponse(AetherRepositoryConnector.java:626)
    at io.takari.aether.connector.AetherRepositoryConnector$GetTask.resumableGet(AetherRepositoryConnector.java:571)
    at io.takari.aether.connector.AetherRepositoryConnector$GetTask.run(AetherRepositoryConnector.java:452)
    at io.takari.aether.connector.AetherRepositoryConnector.get(AetherRepositoryConnector.java:303)
    ... 38 more

- - - - -
François Marot
_______________________________________________
m2e-users mailing list
m2e-users@xxxxxxxxxxx
To change your delivery options, retrieve your password, or unsubscribe from this list, visit
https://dev.eclipse.org/mailman/listinfo/m2e-users
_______________________________________________
m2e-users mailing list
m2e-users@xxxxxxxxxxx
To change your delivery options, retrieve your password, or unsubscribe from this list, visit
https://dev.eclipse.org/mailman/listinfo/m2e-users

Follow-Ups:
- Re: [m2e-users] SSLPeerUnverifiedException with Eclipse 2018-09 (m2e 1.9.1) when downloading dependencies
  - From: Fred Bricon

References:
- [m2e-users] SSLPeerUnverifiedException with Eclipse 2018-09 (m2e 1.9.1) when downloading dependencies
  - From: Francois Marot
- Re: [m2e-users] SSLPeerUnverifiedException with Eclipse 2018-09 (m2e 1.9.1) when downloading dependencies
  - From: Matthew Piggott

Prev by Date: [m2e-users] Filtered xsds to target/xsd are not processed by plugin
Next by Date: Re: [m2e-users] SSLPeerUnverifiedException with Eclipse 2018-09 (m2e 1.9.1) when downloading dependencies
Previous by thread: Re: [m2e-users] SSLPeerUnverifiedException with Eclipse 2018-09 (m2e 1.9.1) when downloading dependencies
Next by thread: Re: [m2e-users] SSLPeerUnverifiedException with Eclipse 2018-09 (m2e 1.9.1) when downloading dependencies
Index(es):
- Date
- Thread

Breadcrumbs