[jira] [Created] (MNG-7687) Ignoring SSL using -Dmaven.wagon.http.ssl.insecure=true not working on 3.9.0

["Thibaud Lepretre (Jira)" <ji...@apache.org>]

Thibaud Lepretre created MNG-7687:
-------------------------------------

             Summary: Ignoring SSL using -Dmaven.wagon.http.ssl.insecure=true  not working on 3.9.0
                 Key: MNG-7687
                 URL: https://issues.apache.org/jira/browse/MNG-7687
             Project: Maven
          Issue Type: Bug
          Components: Core
    Affects Versions: 3.9.0
         Environment: MacOS 13.2
Java version: 1.8.0_362, vendor: BellSoft
Windows 10
jdk-8.0.322.6-openj9
            Reporter: Thibaud Lepretre
         Attachments: error.txt

Until now, we disabled SSL checks using following system variables:

{code:bash}
-Dmaven.wagon.http.ssl.insecure=true 
-Dmaven.wagon.http.ssl.allowall=true
-Dmaven.wagon.http.ssl.ignore.validity.dates=true
{code}

but since 3.9.0 it does not work anymore

I've tried directly on command line

{code:bash}
mvn compile -Dmaven.wagon.http.ssl.insecure=true -Dmaven.wagon.http.ssl.allowall=true -Dmaven.wagon.http.ssl.ignore.validity.dates=true -X
{code}

but fail with

Caused by: org.eclipse.aether.resolution.ArtifactResolutionException: Could not transfer artifact com.mygroupid:anotherdep:pom:1.0.0 from/to nexus-public (https://nexus.our.nexus.url/repository/maven-public/): PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

See attached error for complete stacktrace

I've tried on different env (mac/windows) and different JVM (but all on 8)



--
This message was sent by Atlassian Jira
(v8.20.10#820010)