configuring settings.xml for Tomcat 6 and https

View: New views
10 Messages — Rating Filter:   Alert me  

configuring settings.xml for Tomcat 6 and https

by Joshua Moody :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

I am new to Nexus, but reasonably familiar with maven and tomcat.

I have deployed the nexus 1.4.0 war in tomcat 6.0.20 and have configured an ssl Connector.

The Nexus UI appears to be working fine.  I followed the instructions/tutorials in the documentation and things appear to be working.  I've successfully uploaded some of my organization's jars.  

I am, however, having trouble running with https.  

My .m2/settings.xml is configured as advised in the documentation.  When I attempt to include a dependency  that I have uploaded to nexus, maven can not resolve the dependency.   If I switch to connecting via http (versus https), maven can resolve the dependency.

The only difference from the suggested settings.xml, is that I have included a section for username and password:

  <servers>
    <server>
      <id>nexus</id>
      <username>some-user</username>
      <password>some-pass</password>
    </server>
  </servers>

By way of test, I tried to deploy a jar from the cli:

mvn deploy:deploy-file -DgroupId=some-group-id -DartifactId=ontapi -Dversion=1.0 -Dpackaging=jar -Dfile=/path/to/ontapi-1.0.jar -Durl=https://some-server.somewhere:8443/nexus -DrepositoryId=nexus

and was met with this response:

=== BEGIN ===

[INFO] Scanning for projects...
[INFO] Searching repository for plugin with prefix: 'deploy'.
[INFO] ------------------------------------------------------------------------
[INFO] Building Sample
[INFO]    task-segment: [deploy:deploy-file] (aggregator-style)
[INFO] ------------------------------------------------------------------------
[INFO] [deploy:deploy-file]
Uploading: https://some-server.somewhere:8443/nexus/edu/isi/ikcap/ontapi/1.0/ontapi-1.0.jar
[INFO] ------------------------------------------------------------------------
[ERROR] BUILD ERROR
[INFO] ------------------------------------------------------------------------
[INFO] Error deploying artifact: Error transferring file

unable to find valid certification path to requested target

=== END ===

Enabling error traces:  

Caused by: javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

Does anyone have any suggestions?  

I thought that I saw some documentation about using the keytool to import a certificate, but I can't find the reference again.

Thanks,

Joshua Moody
Program Analyst
USC/ISI

jjm


Re: configuring settings.xml for Tomcat 6 and https

by Anders Hammar :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

http://maven.apache.org/guides/mini/guide-repository-ssl.html

/Anders

On Mon, Nov 9, 2009 at 19:41, Joshua Moody <moody@...> wrote:

I am new to Nexus, but reasonably familiar with maven and tomcat.

I have deployed the nexus 1.4.0 war in tomcat 6.0.20 and have configured an
ssl Connector.

The Nexus UI appears to be working fine.  I followed the
instructions/tutorials in the documentation and things appear to be working.
I've successfully uploaded some of my organization's jars.

I am, however, having trouble running with https.

My .m2/settings.xml is configured as advised in the documentation.  When I
attempt to include a dependency  that I have uploaded to nexus, maven can
not resolve the dependency.   If I switch to connecting via http (versus
https), maven can resolve the dependency.

The only difference from the suggested settings.xml, is that I have included
a section for username and password:

 <servers>
   <server>
     <id>nexus</id>
     <username>some-user</username>
     <password>some-pass</password>
   </server>
 </servers>

By way of test, I tried to deploy a jar from the cli:

mvn deploy:deploy-file -DgroupId=some-group-id -DartifactId=ontapi
-Dversion=1.0 -Dpackaging=jar -Dfile=/path/to/ontapi-1.0.jar
-Durl=https://some-server.somewhere:8443/nexus -DrepositoryId=nexus

and was met with this response:

=== BEGIN ===

[INFO] Scanning for projects...
[INFO] Searching repository for plugin with prefix: 'deploy'.
[INFO]
------------------------------------------------------------------------
[INFO] Building Sample
[INFO]    task-segment: [deploy:deploy-file] (aggregator-style)
[INFO]
------------------------------------------------------------------------
[INFO] [deploy:deploy-file]
Uploading:
https://some-server.somewhere:8443/nexus/edu/isi/ikcap/ontapi/1.0/ontapi-1.0.jar
[INFO]
------------------------------------------------------------------------
[ERROR] BUILD ERROR
[INFO]
------------------------------------------------------------------------
[INFO] Error deploying artifact: Error transferring file

unable to find valid certification path to requested target

=== END ===

Enabling error traces:

Caused by: javax.net.ssl.SSLHandshakeException:
sun.security.validator.ValidatorException: PKIX path building failed:
sun.security.provider.certpath.SunCertPathBuilderException: unable to find
valid certification path to requested target

Does anyone have any suggestions?

I thought that I saw some documentation about using the keytool to import a
certificate, but I can't find the reference again.

Thanks,

Joshua Moody
Program Analyst
USC/ISI

jjm


--
View this message in context: http://old.nabble.com/configuring-settings.xml-for-Tomcat-6-and-https-tp26271419p26271419.html
Sent from the Nexus Maven Repository Manager Users List mailing list archive at Nabble.com.


---------------------------------------------------------------------
To unsubscribe, e-mail: nexus-user-unsubscribe@...
For additional commands, e-mail: nexus-user-help@...



Re: configuring settings.xml for Tomcat 6 and https

by Brian Fox :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

You need to configure your system to have the correct certificates
trusted, otherwise Java won't talk to that server. The instructions we
give for having Nexus connect to ssl certs should apply to Maven as
well (that tool is uber-handy):

http://nexus.sonatype.org/nexus-faq.html#26

On Mon, Nov 9, 2009 at 11:21 AM, Anders Hammar <anders@...> wrote:

> http://maven.apache.org/guides/mini/guide-repository-ssl.html
>
> /Anders
>
> On Mon, Nov 9, 2009 at 19:41, Joshua Moody <moody@...> wrote:
>>
>> I am new to Nexus, but reasonably familiar with maven and tomcat.
>>
>> I have deployed the nexus 1.4.0 war in tomcat 6.0.20 and have configured
>> an
>> ssl Connector.
>>
>> The Nexus UI appears to be working fine.  I followed the
>> instructions/tutorials in the documentation and things appear to be
>> working.
>> I've successfully uploaded some of my organization's jars.
>>
>> I am, however, having trouble running with https.
>>
>> My .m2/settings.xml is configured as advised in the documentation.  When I
>> attempt to include a dependency  that I have uploaded to nexus, maven can
>> not resolve the dependency.   If I switch to connecting via http (versus
>> https), maven can resolve the dependency.
>>
>> The only difference from the suggested settings.xml, is that I have
>> included
>> a section for username and password:
>>
>>  <servers>
>>    <server>
>>      <id>nexus</id>
>>      <username>some-user</username>
>>      <password>some-pass</password>
>>    </server>
>>  </servers>
>>
>> By way of test, I tried to deploy a jar from the cli:
>>
>> mvn deploy:deploy-file -DgroupId=some-group-id -DartifactId=ontapi
>> -Dversion=1.0 -Dpackaging=jar -Dfile=/path/to/ontapi-1.0.jar
>> -Durl=https://some-server.somewhere:8443/nexus -DrepositoryId=nexus
>>
>> and was met with this response:
>>
>> === BEGIN ===
>>
>> [INFO] Scanning for projects...
>> [INFO] Searching repository for plugin with prefix: 'deploy'.
>> [INFO]
>> ------------------------------------------------------------------------
>> [INFO] Building Sample
>> [INFO]    task-segment: [deploy:deploy-file] (aggregator-style)
>> [INFO]
>> ------------------------------------------------------------------------
>> [INFO] [deploy:deploy-file]
>> Uploading:
>>
>> https://some-server.somewhere:8443/nexus/edu/isi/ikcap/ontapi/1.0/ontapi-1.0.jar
>> [INFO]
>> ------------------------------------------------------------------------
>> [ERROR] BUILD ERROR
>> [INFO]
>> ------------------------------------------------------------------------
>> [INFO] Error deploying artifact: Error transferring file
>>
>> unable to find valid certification path to requested target
>>
>> === END ===
>>
>> Enabling error traces:
>>
>> Caused by: javax.net.ssl.SSLHandshakeException:
>> sun.security.validator.ValidatorException: PKIX path building failed:
>> sun.security.provider.certpath.SunCertPathBuilderException: unable to find
>> valid certification path to requested target
>>
>> Does anyone have any suggestions?
>>
>> I thought that I saw some documentation about using the keytool to import
>> a
>> certificate, but I can't find the reference again.
>>
>> Thanks,
>>
>> Joshua Moody
>> Program Analyst
>> USC/ISI
>>
>> jjm
>>
>>
>> --
>> View this message in context:
>> http://old.nabble.com/configuring-settings.xml-for-Tomcat-6-and-https-tp26271419p26271419.html
>> Sent from the Nexus Maven Repository Manager Users List mailing list
>> archive at Nabble.com.
>>
>>
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: nexus-user-unsubscribe@...
>> For additional commands, e-mail: nexus-user-help@...
>>
>
>

---------------------------------------------------------------------
To unsubscribe, e-mail: nexus-user-unsubscribe@...
For additional commands, e-mail: nexus-user-help@...


Re: configuring settings.xml for Tomcat 6 and https

by Joshua Moody :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

Thank you Anders and Brian,

I found the following links very helpful as well:

http://tomcat.apache.org/tomcat-6.0-doc/ssl-howto.html
http://jcalcote.wordpress.com/2009/06/19/java-https-key-setup/

Clients are now able to connect to our nexus repository.

As an aside, I have not been able to view the faq because I can't  
connect to the sonatype domain.  In addition, the documentation page  
appears to no longer lead to any documentation.  Where and how would I  
report something like this?

Thanks,

jjm

On Nov 9, 2009, at 5:58 PM, Brian Fox wrote:

> You need to configure your system to have the correct certificates
> trusted, otherwise Java won't talk to that server. The instructions we
> give for having Nexus connect to ssl certs should apply to Maven as
> well (that tool is uber-handy):
>
> http://nexus.sonatype.org/nexus-faq.html#26
>
> On Mon, Nov 9, 2009 at 11:21 AM, Anders Hammar <anders@...>  
> wrote:
>> http://maven.apache.org/guides/mini/guide-repository-ssl.html
>>
>> /Anders
>>
>> On Mon, Nov 9, 2009 at 19:41, Joshua Moody <moody@...> wrote:
>>>
>>> I am new to Nexus, but reasonably familiar with maven and tomcat.
>>>
>>> I have deployed the nexus 1.4.0 war in tomcat 6.0.20 and have  
>>> configured
>>> an
>>> ssl Connector.
>>>
>>> The Nexus UI appears to be working fine.  I followed the
>>> instructions/tutorials in the documentation and things appear to be
>>> working.
>>> I've successfully uploaded some of my organization's jars.
>>>
>>> I am, however, having trouble running with https.
>>>
>>> My .m2/settings.xml is configured as advised in the  
>>> documentation.  When I
>>> attempt to include a dependency  that I have uploaded to nexus,  
>>> maven can
>>> not resolve the dependency.   If I switch to connecting via http  
>>> (versus
>>> https), maven can resolve the dependency.
>>>
>>> The only difference from the suggested settings.xml, is that I have
>>> included
>>> a section for username and password:
>>>
>>>  <servers>
>>>    <server>
>>>      <id>nexus</id>
>>>      <username>some-user</username>
>>>      <password>some-pass</password>
>>>    </server>
>>>  </servers>
>>>
>>> By way of test, I tried to deploy a jar from the cli:
>>>
>>> mvn deploy:deploy-file -DgroupId=some-group-id -DartifactId=ontapi
>>> -Dversion=1.0 -Dpackaging=jar -Dfile=/path/to/ontapi-1.0.jar
>>> -Durl=https://some-server.somewhere:8443/nexus -DrepositoryId=nexus
>>>
>>> and was met with this response:
>>>
>>> === BEGIN ===
>>>
>>> [INFO] Scanning for projects...
>>> [INFO] Searching repository for plugin with prefix: 'deploy'.
>>> [INFO]
>>> ------------------------------------------------------------------------
>>> [INFO] Building Sample
>>> [INFO]    task-segment: [deploy:deploy-file] (aggregator-style)
>>> [INFO]
>>> ------------------------------------------------------------------------
>>> [INFO] [deploy:deploy-file]
>>> Uploading:
>>>
>>> https://some-server.somewhere:8443/nexus/edu/isi/ikcap/ontapi/1.0/ontapi-1.0.jar
>>> [INFO]
>>> ------------------------------------------------------------------------
>>> [ERROR] BUILD ERROR
>>> [INFO]
>>> ------------------------------------------------------------------------
>>> [INFO] Error deploying artifact: Error transferring file
>>>
>>> unable to find valid certification path to requested target
>>>
>>> === END ===
>>>
>>> Enabling error traces:
>>>
>>> Caused by: javax.net.ssl.SSLHandshakeException:
>>> sun.security.validator.ValidatorException: PKIX path building  
>>> failed:
>>> sun.security.provider.certpath.SunCertPathBuilderException: unable  
>>> to find
>>> valid certification path to requested target
>>>
>>> Does anyone have any suggestions?
>>>
>>> I thought that I saw some documentation about using the keytool to  
>>> import
>>> a
>>> certificate, but I can't find the reference again.
>>>
>>> Thanks,
>>>
>>> Joshua Moody
>>> Program Analyst
>>> USC/ISI
>>>
>>> jjm
>>>
>>>
>>> --
>>> View this message in context:
>>> http://old.nabble.com/configuring-settings.xml-for-Tomcat-6-and-https-tp26271419p26271419.html
>>> Sent from the Nexus Maven Repository Manager Users List mailing list
>>> archive at Nabble.com.
>>>
>>>
>>> ---------------------------------------------------------------------
>>> To unsubscribe, e-mail: nexus-user-unsubscribe@...
>>> For additional commands, e-mail: nexus-user-help@...
>>>
>>
>>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: nexus-user-unsubscribe@...
> For additional commands, e-mail: nexus-user-help@...
>


---------------------------------------------------------------------
To unsubscribe, e-mail: nexus-user-unsubscribe@...
For additional commands, e-mail: nexus-user-help@...


Re: configuring settings.xml for Tomcat 6 and https

by Brian Fox :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

Which documentation page?

The domain sounds like a firewall problem, it's definitely there.

On Tue, Nov 10, 2009 at 12:44 PM, Joshua Moody <moody@...> wrote:

> Thank you Anders and Brian,
>
> I found the following links very helpful as well:
>
> http://tomcat.apache.org/tomcat-6.0-doc/ssl-howto.html
> http://jcalcote.wordpress.com/2009/06/19/java-https-key-setup/
>
> Clients are now able to connect to our nexus repository.
>
> As an aside, I have not been able to view the faq because I can't connect to
> the sonatype domain.  In addition, the documentation page appears to no
> longer lead to any documentation.  Where and how would I report something
> like this?
>
> Thanks,
>
> jjm
>
> On Nov 9, 2009, at 5:58 PM, Brian Fox wrote:
>
>> You need to configure your system to have the correct certificates
>> trusted, otherwise Java won't talk to that server. The instructions we
>> give for having Nexus connect to ssl certs should apply to Maven as
>> well (that tool is uber-handy):
>>
>> http://nexus.sonatype.org/nexus-faq.html#26
>>
>> On Mon, Nov 9, 2009 at 11:21 AM, Anders Hammar <anders@...> wrote:
>>>
>>> http://maven.apache.org/guides/mini/guide-repository-ssl.html
>>>
>>> /Anders
>>>
>>> On Mon, Nov 9, 2009 at 19:41, Joshua Moody <moody@...> wrote:
>>>>
>>>> I am new to Nexus, but reasonably familiar with maven and tomcat.
>>>>
>>>> I have deployed the nexus 1.4.0 war in tomcat 6.0.20 and have configured
>>>> an
>>>> ssl Connector.
>>>>
>>>> The Nexus UI appears to be working fine.  I followed the
>>>> instructions/tutorials in the documentation and things appear to be
>>>> working.
>>>> I've successfully uploaded some of my organization's jars.
>>>>
>>>> I am, however, having trouble running with https.
>>>>
>>>> My .m2/settings.xml is configured as advised in the documentation.  When
>>>> I
>>>> attempt to include a dependency  that I have uploaded to nexus, maven
>>>> can
>>>> not resolve the dependency.   If I switch to connecting via http (versus
>>>> https), maven can resolve the dependency.
>>>>
>>>> The only difference from the suggested settings.xml, is that I have
>>>> included
>>>> a section for username and password:
>>>>
>>>>  <servers>
>>>>   <server>
>>>>     <id>nexus</id>
>>>>     <username>some-user</username>
>>>>     <password>some-pass</password>
>>>>   </server>
>>>>  </servers>
>>>>
>>>> By way of test, I tried to deploy a jar from the cli:
>>>>
>>>> mvn deploy:deploy-file -DgroupId=some-group-id -DartifactId=ontapi
>>>> -Dversion=1.0 -Dpackaging=jar -Dfile=/path/to/ontapi-1.0.jar
>>>> -Durl=https://some-server.somewhere:8443/nexus -DrepositoryId=nexus
>>>>
>>>> and was met with this response:
>>>>
>>>> === BEGIN ===
>>>>
>>>> [INFO] Scanning for projects...
>>>> [INFO] Searching repository for plugin with prefix: 'deploy'.
>>>> [INFO]
>>>> ------------------------------------------------------------------------
>>>> [INFO] Building Sample
>>>> [INFO]    task-segment: [deploy:deploy-file] (aggregator-style)
>>>> [INFO]
>>>> ------------------------------------------------------------------------
>>>> [INFO] [deploy:deploy-file]
>>>> Uploading:
>>>>
>>>>
>>>> https://some-server.somewhere:8443/nexus/edu/isi/ikcap/ontapi/1.0/ontapi-1.0.jar
>>>> [INFO]
>>>> ------------------------------------------------------------------------
>>>> [ERROR] BUILD ERROR
>>>> [INFO]
>>>> ------------------------------------------------------------------------
>>>> [INFO] Error deploying artifact: Error transferring file
>>>>
>>>> unable to find valid certification path to requested target
>>>>
>>>> === END ===
>>>>
>>>> Enabling error traces:
>>>>
>>>> Caused by: javax.net.ssl.SSLHandshakeException:
>>>> sun.security.validator.ValidatorException: PKIX path building failed:
>>>> sun.security.provider.certpath.SunCertPathBuilderException: unable to
>>>> find
>>>> valid certification path to requested target
>>>>
>>>> Does anyone have any suggestions?
>>>>
>>>> I thought that I saw some documentation about using the keytool to
>>>> import
>>>> a
>>>> certificate, but I can't find the reference again.
>>>>
>>>> Thanks,
>>>>
>>>> Joshua Moody
>>>> Program Analyst
>>>> USC/ISI
>>>>
>>>> jjm
>>>>
>>>>
>>>> --
>>>> View this message in context:
>>>>
>>>> http://old.nabble.com/configuring-settings.xml-for-Tomcat-6-and-https-tp26271419p26271419.html
>>>> Sent from the Nexus Maven Repository Manager Users List mailing list
>>>> archive at Nabble.com.
>>>>
>>>>
>>>> ---------------------------------------------------------------------
>>>> To unsubscribe, e-mail: nexus-user-unsubscribe@...
>>>> For additional commands, e-mail: nexus-user-help@...
>>>>
>>>
>>>
>>
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: nexus-user-unsubscribe@...
>> For additional commands, e-mail: nexus-user-help@...
>>
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: nexus-user-unsubscribe@...
> For additional commands, e-mail: nexus-user-help@...
>
>

---------------------------------------------------------------------
To unsubscribe, e-mail: nexus-user-unsubscribe@...
For additional commands, e-mail: nexus-user-help@...


Re: configuring settings.xml for Tomcat 6 and https

by Joshua Moody :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message


On Nov 10, 2009, at 9:55 AM, Brian Fox wrote:

Which documentation page?

http://nexus.sonatype.org/documentation.html

Until yesteday(?) I was able to click on the Maven:  The Definitive Guide link in the first sentence and be sent, not to the book site (where I am sent now), but to documentation about how to install, configure, and use Nexus.  Now there are no other links on the page and the nexus documentation appears to be inaccessible.

jjm

On Tue, Nov 10, 2009 at 12:44 PM, Joshua Moody <moody@...> wrote:
Thank you Anders and Brian,

I found the following links very helpful as well:

http://tomcat.apache.org/tomcat-6.0-doc/ssl-howto.html
http://jcalcote.wordpress.com/2009/06/19/java-https-key-setup/

Clients are now able to connect to our nexus repository.

As an aside, I have not been able to view the faq because I can't connect to
the sonatype domain.  In addition, the documentation page appears to no
longer lead to any documentation.  Where and how would I report something
like this?

Thanks,

jjm

On Nov 9, 2009, at 5:58 PM, Brian Fox wrote:

You need to configure your system to have the correct certificates
trusted, otherwise Java won't talk to that server. The instructions we
give for having Nexus connect to ssl certs should apply to Maven as
well (that tool is uber-handy):

http://nexus.sonatype.org/nexus-faq.html#26

On Mon, Nov 9, 2009 at 11:21 AM, Anders Hammar <anders@...> wrote:

http://maven.apache.org/guides/mini/guide-repository-ssl.html

/Anders

On Mon, Nov 9, 2009 at 19:41, Joshua Moody <moody@...> wrote:

I am new to Nexus, but reasonably familiar with maven and tomcat.

I have deployed the nexus 1.4.0 war in tomcat 6.0.20 and have configured
an
ssl Connector.

The Nexus UI appears to be working fine.  I followed the
instructions/tutorials in the documentation and things appear to be
working.
I've successfully uploaded some of my organization's jars.

I am, however, having trouble running with https.

My .m2/settings.xml is configured as advised in the documentation.  When
I
attempt to include a dependency  that I have uploaded to nexus, maven
can
not resolve the dependency.   If I switch to connecting via http (versus
https), maven can resolve the dependency.

The only difference from the suggested settings.xml, is that I have
included
a section for username and password:

 <servers>
  <server>
    <id>nexus</id>
    <username>some-user</username>
    <password>some-pass</password>
  </server>
 </servers>

By way of test, I tried to deploy a jar from the cli:

mvn deploy:deploy-file -DgroupId=some-group-id -DartifactId=ontapi
-Dversion=1.0 -Dpackaging=jar -Dfile=/path/to/ontapi-1.0.jar
-Durl=https://some-server.somewhere:8443/nexus -DrepositoryId=nexus

and was met with this response:

=== BEGIN ===

[INFO] Scanning for projects...
[INFO] Searching repository for plugin with prefix: 'deploy'.
[INFO]
------------------------------------------------------------------------
[INFO] Building Sample
[INFO]    task-segment: [deploy:deploy-file] (aggregator-style)
[INFO]
------------------------------------------------------------------------
[INFO] [deploy:deploy-file]
Uploading:


https://some-server.somewhere:8443/nexus/edu/isi/ikcap/ontapi/1.0/ontapi-1.0.jar
[INFO]
------------------------------------------------------------------------
[ERROR] BUILD ERROR
[INFO]
------------------------------------------------------------------------
[INFO] Error deploying artifact: Error transferring file

unable to find valid certification path to requested target

=== END ===

Enabling error traces:

Caused by: javax.net.ssl.SSLHandshakeException:
sun.security.validator.ValidatorException: PKIX path building failed:
sun.security.provider.certpath.SunCertPathBuilderException: unable to
find
valid certification path to requested target

Does anyone have any suggestions?

I thought that I saw some documentation about using the keytool to
import
a
certificate, but I can't find the reference again.

Thanks,

Joshua Moody
Program Analyst
USC/ISI

jjm


--
View this message in context:

http://old.nabble.com/configuring-settings.xml-for-Tomcat-6-and-https-tp26271419p26271419.html
Sent from the Nexus Maven Repository Manager Users List mailing list
archive at Nabble.com.


---------------------------------------------------------------------
To unsubscribe, e-mail: nexus-user-unsubscribe@...
For additional commands, e-mail: nexus-user-help@...




---------------------------------------------------------------------
To unsubscribe, e-mail: nexus-user-unsubscribe@...
For additional commands, e-mail: nexus-user-help@...



---------------------------------------------------------------------
To unsubscribe, e-mail: nexus-user-unsubscribe@...
For additional commands, e-mail: nexus-user-help@...



---------------------------------------------------------------------
To unsubscribe, e-mail: nexus-user-unsubscribe@...
For additional commands, e-mail: nexus-user-help@...



Re: configuring settings.xml for Tomcat 6 and https

by Brian Fox :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

This is what I see:http://screencast.com/t/YjZkYWVkN

On Tue, Nov 10, 2009 at 1:37 PM, Joshua Moody <moody@...> wrote:

>
> On Nov 10, 2009, at 9:55 AM, Brian Fox wrote:
>
> Which documentation page?
>
> http://nexus.sonatype.org/documentation.html
>
> Until yesteday(?) I was able to click on the Maven:  The Definitive Guide
> link in the first sentence and be sent, not to the book site (where I am
> sent now), but to documentation about how to install, configure, and use
> Nexus.  Now there are no other links on the page and the nexus documentation
> appears to be inaccessible.
> jjm
>
> On Tue, Nov 10, 2009 at 12:44 PM, Joshua Moody <moody@...> wrote:
>
> Thank you Anders and Brian,
>
> I found the following links very helpful as well:
>
> http://tomcat.apache.org/tomcat-6.0-doc/ssl-howto.html
>
> http://jcalcote.wordpress.com/2009/06/19/java-https-key-setup/
>
> Clients are now able to connect to our nexus repository.
>
> As an aside, I have not been able to view the faq because I can't connect to
>
> the sonatype domain.  In addition, the documentation page appears to no
>
> longer lead to any documentation.  Where and how would I report something
>
> like this?
>
> Thanks,
>
> jjm
>
> On Nov 9, 2009, at 5:58 PM, Brian Fox wrote:
>
> You need to configure your system to have the correct certificates
>
> trusted, otherwise Java won't talk to that server. The instructions we
>
> give for having Nexus connect to ssl certs should apply to Maven as
>
> well (that tool is uber-handy):
>
> http://nexus.sonatype.org/nexus-faq.html#26
>
> On Mon, Nov 9, 2009 at 11:21 AM, Anders Hammar <anders@...> wrote:
>
> http://maven.apache.org/guides/mini/guide-repository-ssl.html
>
> /Anders
>
> On Mon, Nov 9, 2009 at 19:41, Joshua Moody <moody@...> wrote:
>
> I am new to Nexus, but reasonably familiar with maven and tomcat.
>
> I have deployed the nexus 1.4.0 war in tomcat 6.0.20 and have configured
>
> an
>
> ssl Connector.
>
> The Nexus UI appears to be working fine.  I followed the
>
> instructions/tutorials in the documentation and things appear to be
>
> working.
>
> I've successfully uploaded some of my organization's jars.
>
> I am, however, having trouble running with https.
>
> My .m2/settings.xml is configured as advised in the documentation.  When
>
> I
>
> attempt to include a dependency  that I have uploaded to nexus, maven
>
> can
>
> not resolve the dependency.   If I switch to connecting via http (versus
>
> https), maven can resolve the dependency.
>
> The only difference from the suggested settings.xml, is that I have
>
> included
>
> a section for username and password:
>
>  <servers>
>
>   <server>
>
>     <id>nexus</id>
>
>     <username>some-user</username>
>
>     <password>some-pass</password>
>
>   </server>
>
>  </servers>
>
> By way of test, I tried to deploy a jar from the cli:
>
> mvn deploy:deploy-file -DgroupId=some-group-id -DartifactId=ontapi
>
> -Dversion=1.0 -Dpackaging=jar -Dfile=/path/to/ontapi-1.0.jar
>
> -Durl=https://some-server.somewhere:8443/nexus -DrepositoryId=nexus
>
> and was met with this response:
>
> === BEGIN ===
>
> [INFO] Scanning for projects...
>
> [INFO] Searching repository for plugin with prefix: 'deploy'.
>
> [INFO]
>
> ------------------------------------------------------------------------
>
> [INFO] Building Sample
>
> [INFO]    task-segment: [deploy:deploy-file] (aggregator-style)
>
> [INFO]
>
> ------------------------------------------------------------------------
>
> [INFO] [deploy:deploy-file]
>
> Uploading:
>
>
> https://some-server.somewhere:8443/nexus/edu/isi/ikcap/ontapi/1.0/ontapi-1.0.jar
>
> [INFO]
>
> ------------------------------------------------------------------------
>
> [ERROR] BUILD ERROR
>
> [INFO]
>
> ------------------------------------------------------------------------
>
> [INFO] Error deploying artifact: Error transferring file
>
> unable to find valid certification path to requested target
>
> === END ===
>
> Enabling error traces:
>
> Caused by: javax.net.ssl.SSLHandshakeException:
>
> sun.security.validator.ValidatorException: PKIX path building failed:
>
> sun.security.provider.certpath.SunCertPathBuilderException: unable to
>
> find
>
> valid certification path to requested target
>
> Does anyone have any suggestions?
>
> I thought that I saw some documentation about using the keytool to
>
> import
>
> a
>
> certificate, but I can't find the reference again.
>
> Thanks,
>
> Joshua Moody
>
> Program Analyst
>
> USC/ISI
>
> jjm
>
>
> --
>
> View this message in context:
>
> http://old.nabble.com/configuring-settings.xml-for-Tomcat-6-and-https-tp26271419p26271419.html
>
> Sent from the Nexus Maven Repository Manager Users List mailing list
>
> archive at Nabble.com.
>
>
> ---------------------------------------------------------------------
>
> To unsubscribe, e-mail: nexus-user-unsubscribe@...
>
> For additional commands, e-mail: nexus-user-help@...
>
>
>
>
> ---------------------------------------------------------------------
>
> To unsubscribe, e-mail: nexus-user-unsubscribe@...
>
> For additional commands, e-mail: nexus-user-help@...
>
>
>
> ---------------------------------------------------------------------
>
> To unsubscribe, e-mail: nexus-user-unsubscribe@...
>
> For additional commands, e-mail: nexus-user-help@...
>
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: nexus-user-unsubscribe@...
> For additional commands, e-mail: nexus-user-help@...
>
>
>

---------------------------------------------------------------------
To unsubscribe, e-mail: nexus-user-unsubscribe@...
For additional commands, e-mail: nexus-user-help@...


Re: configuring settings.xml for Tomcat 6 and https

by Joshua Moody :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message


On Nov 10, 2009, at 10:46 AM, Brian Fox wrote:

> This is what I see:http://screencast.com/t/YjZkYWVkN

Yes, this is what see.  But there are no links on that page to the  
internal nexus documentation.  At least none that I can see.

Should we move this to a private conversation or another thread?

Thanks,

jjm


> On Tue, Nov 10, 2009 at 1:37 PM, Joshua Moody <moody@...> wrote:
>>
>> On Nov 10, 2009, at 9:55 AM, Brian Fox wrote:
>>
>> Which documentation page?
>>
>> http://nexus.sonatype.org/documentation.html
>>
>> Until yesteday(?) I was able to click on the Maven:  The Definitive  
>> Guide
>> link in the first sentence and be sent, not to the book site (where  
>> I am
>> sent now), but to documentation about how to install, configure,  
>> and use
>> Nexus.  Now there are no other links on the page and the nexus  
>> documentation
>> appears to be inaccessible.
>> jjm
>>
>> On Tue, Nov 10, 2009 at 12:44 PM, Joshua Moody <moody@...> wrote:
>>
>> Thank you Anders and Brian,
>>
>> I found the following links very helpful as well:
>>
>> http://tomcat.apache.org/tomcat-6.0-doc/ssl-howto.html
>>
>> http://jcalcote.wordpress.com/2009/06/19/java-https-key-setup/
>>
>> Clients are now able to connect to our nexus repository.
>>
>> As an aside, I have not been able to view the faq because I can't  
>> connect to
>>
>> the sonatype domain.  In addition, the documentation page appears  
>> to no
>>
>> longer lead to any documentation.  Where and how would I report  
>> something
>>
>> like this?
>>
>> Thanks,
>>
>> jjm
>>
>> On Nov 9, 2009, at 5:58 PM, Brian Fox wrote:
>>
>> You need to configure your system to have the correct certificates
>>
>> trusted, otherwise Java won't talk to that server. The instructions  
>> we
>>
>> give for having Nexus connect to ssl certs should apply to Maven as
>>
>> well (that tool is uber-handy):
>>
>> http://nexus.sonatype.org/nexus-faq.html#26
>>
>> On Mon, Nov 9, 2009 at 11:21 AM, Anders Hammar <anders@...>  
>> wrote:
>>
>> http://maven.apache.org/guides/mini/guide-repository-ssl.html
>>
>> /Anders
>>
>> On Mon, Nov 9, 2009 at 19:41, Joshua Moody <moody@...> wrote:
>>
>> I am new to Nexus, but reasonably familiar with maven and tomcat.
>>
>> I have deployed the nexus 1.4.0 war in tomcat 6.0.20 and have  
>> configured
>>
>> an
>>
>> ssl Connector.
>>
>> The Nexus UI appears to be working fine.  I followed the
>>
>> instructions/tutorials in the documentation and things appear to be
>>
>> working.
>>
>> I've successfully uploaded some of my organization's jars.
>>
>> I am, however, having trouble running with https.
>>
>> My .m2/settings.xml is configured as advised in the documentation.  
>> When
>>
>> I
>>
>> attempt to include a dependency  that I have uploaded to nexus, maven
>>
>> can
>>
>> not resolve the dependency.   If I switch to connecting via http  
>> (versus
>>
>> https), maven can resolve the dependency.
>>
>> The only difference from the suggested settings.xml, is that I have
>>
>> included
>>
>> a section for username and password:
>>
>>  <servers>
>>
>>   <server>
>>
>>     <id>nexus</id>
>>
>>     <username>some-user</username>
>>
>>     <password>some-pass</password>
>>
>>   </server>
>>
>>  </servers>
>>
>> By way of test, I tried to deploy a jar from the cli:
>>
>> mvn deploy:deploy-file -DgroupId=some-group-id -DartifactId=ontapi
>>
>> -Dversion=1.0 -Dpackaging=jar -Dfile=/path/to/ontapi-1.0.jar
>>
>> -Durl=https://some-server.somewhere:8443/nexus -DrepositoryId=nexus
>>
>> and was met with this response:
>>
>> === BEGIN ===
>>
>> [INFO] Scanning for projects...
>>
>> [INFO] Searching repository for plugin with prefix: 'deploy'.
>>
>> [INFO]
>>
>> ------------------------------------------------------------------------
>>
>> [INFO] Building Sample
>>
>> [INFO]    task-segment: [deploy:deploy-file] (aggregator-style)
>>
>> [INFO]
>>
>> ------------------------------------------------------------------------
>>
>> [INFO] [deploy:deploy-file]
>>
>> Uploading:
>>
>>
>> https://some-server.somewhere:8443/nexus/edu/isi/ikcap/ontapi/1.0/ontapi-1.0.jar
>>
>> [INFO]
>>
>> ------------------------------------------------------------------------
>>
>> [ERROR] BUILD ERROR
>>
>> [INFO]
>>
>> ------------------------------------------------------------------------
>>
>> [INFO] Error deploying artifact: Error transferring file
>>
>> unable to find valid certification path to requested target
>>
>> === END ===
>>
>> Enabling error traces:
>>
>> Caused by: javax.net.ssl.SSLHandshakeException:
>>
>> sun.security.validator.ValidatorException: PKIX path building failed:
>>
>> sun.security.provider.certpath.SunCertPathBuilderException: unable to
>>
>> find
>>
>> valid certification path to requested target
>>
>> Does anyone have any suggestions?
>>
>> I thought that I saw some documentation about using the keytool to
>>
>> import
>>
>> a
>>
>> certificate, but I can't find the reference again.
>>
>> Thanks,
>>
>> Joshua Moody
>>
>> Program Analyst
>>
>> USC/ISI
>>
>> jjm
>>
>>
>> --
>>
>> View this message in context:
>>
>> http://old.nabble.com/configuring-settings.xml-for-Tomcat-6-and-https-tp26271419p26271419.html
>>
>> Sent from the Nexus Maven Repository Manager Users List mailing list
>>
>> archive at Nabble.com.
>>
>>
>> ---------------------------------------------------------------------
>>
>> To unsubscribe, e-mail: nexus-user-unsubscribe@...
>>
>> For additional commands, e-mail: nexus-user-help@...
>>
>>
>>
>>
>> ---------------------------------------------------------------------
>>
>> To unsubscribe, e-mail: nexus-user-unsubscribe@...
>>
>> For additional commands, e-mail: nexus-user-help@...
>>
>>
>>
>> ---------------------------------------------------------------------
>>
>> To unsubscribe, e-mail: nexus-user-unsubscribe@...
>>
>> For additional commands, e-mail: nexus-user-help@...
>>
>>
>>
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: nexus-user-unsubscribe@...
>> For additional commands, e-mail: nexus-user-help@...
>>
>>
>>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: nexus-user-unsubscribe@...
> For additional commands, e-mail: nexus-user-help@...
>


---------------------------------------------------------------------
To unsubscribe, e-mail: nexus-user-unsubscribe@...
For additional commands, e-mail: nexus-user-help@...


Re: configuring settings.xml for Tomcat 6 and https

by Brian Fox :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

> Yes, this is what see.  But there are no links on that page to the internal
> nexus documentation.  At least none that I can see.
>
>

Ah! The link on the left that says Documentation is empty. Ok I'll fix
that now, thanks.

---------------------------------------------------------------------
To unsubscribe, e-mail: nexus-user-unsubscribe@...
For additional commands, e-mail: nexus-user-help@...


Re: configuring settings.xml for Tomcat 6 and https

by Brian Fox :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

Ok, all better now.

On Tue, Nov 10, 2009 at 2:06 PM, Brian Fox <brianf@...> wrote:
>> Yes, this is what see.  But there are no links on that page to the internal
>> nexus documentation.  At least none that I can see.
>>
>>
>
> Ah! The link on the left that says Documentation is empty. Ok I'll fix
> that now, thanks.
>

---------------------------------------------------------------------
To unsubscribe, e-mail: nexus-user-unsubscribe@...
For additional commands, e-mail: nexus-user-help@...