SSL Certificate problem

[christianLThomas]

First, thanks for a very useful library.

I'm building a C# library that wraps a java library and, using MavenReference, I am getting
PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
for all my dependencies. I get it both for repo1.maven.org/maven2 and also an internal instance of artifactory. From this discussion it sounds like IKVM is using the same certificate store as .NET. I'm pretty confident that is set up properly as nupkgs are getting pulled from the same internal server. I've also manually installed the certificate and all parents with certmgr. Everything works fine with Maven, but that uses the java cert store. Is there another certificate store IKVM uses?

I'll have to get permission to share logs so that might take a while. If there is any specific information that would be helpful please let me know.

IKVM 8.10.3
IKVM.Maven.Sdk 1.8.2
TargetFramework 4.8

[wasabii]

IKVM is not using the same store as .net anymore. It's a full OpenJDK8 stack with all that entails.

Including mscapi on Windows, now.

[wasabii]

So I hadn't really thought about that, because on Windows with mscapi you didn't use only cacerts. But I guess with these other operating systems they do.

The IKVM distro is just embedded in the Maven SDK Nuget package. So you can't really modify it. Need to think on that.

Are you behind a proxy or something?

[christianLThomas]

I'm limited to using an internal repo with approved packages. For some development I can use the default repo repo1.maven.org/maven2, but that produced the same cert errors. I am building on Windows.

[wasabii]

Yeah but is Maven central behind a proxy? If not you should not be having issues.

[christianLThomas]

No, maven central is not behind a proxy.

[wasabii]

Well, then likely the cacerts file has nothing to do with your issue anyways. It of course already has the root certs for that. And on Windows it should be using mscapi anyways.