Thibaud Lepretre created MNG-7687:
-------------------------------------
Summary: Ignoring SSL using -Dmaven.wagon.http.ssl.insecure=true
not working on 3.9.0
Key: MNG-7687
URL: https://issues.apache.org/jira/browse/MNG-7687
Project: Maven
Issue Type: Bug
Components: Core
Affects Versions: 3.9.0
Environment: MacOS 13.2
Java version: 1.8.0_362, vendor: BellSoft
Windows 10
jdk-8.0.322.6-openj9
Reporter: Thibaud Lepretre
Attachments: error.txt
Until now, we disabled SSL checks using following system variables:
{code:bash}
-Dmaven.wagon.http.ssl.insecure=true
-Dmaven.wagon.http.ssl.allowall=true
-Dmaven.wagon.http.ssl.ignore.validity.dates=true
{code}
but since 3.9.0 it does not work anymore
I've tried directly on command line
{code:bash}
mvn compile -Dmaven.wagon.http.ssl.insecure=true
-Dmaven.wagon.http.ssl.allowall=true
-Dmaven.wagon.http.ssl.ignore.validity.dates=true -X
{code}
but fail with
Caused by: org.eclipse.aether.resolution.ArtifactResolutionException: Could not
transfer artifact com.mygroupid:anotherdep:pom:1.0.0 from/to nexus-public
(https://nexus.our.nexus.url/repository/maven-public/): PKIX path building
failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to
find valid certification path to requested target
See attached error for complete stacktrace
I've tried on different env (mac/windows) and different JVM (but all on 8)
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
