Shibboleth IDP 2.3.8 build error

[Brent Putman]

On 12/5/12 6:29 PM, Yaowen Tu wrote:
>
>
>
> [ERROR]   The project
> edu.internet2.middleware:shibboleth-identityprovider:2.3.8
>
> (E:\...\...\shibboleth\shibboleth-idp\2.3.8\pom.xml) has 1 error
>
> [ERROR]     Non-resolvable parent POM: Could not transfer artifact
> net.shibbolet
>
> h:parent:pom:3 from/to shib-release
> (https://build.shibboleth.net/nexus/content/
>
> groups/public): sun.security.validator.ValidatorException: PKIX path
> building fa
>
> iled: sun.security.provider.certpath.SunCertPathBuilderException:
> unable to find
>
> valid certification path to requested target
>



As others have said, we did restructure the way the Maven parent
projects work.

However, I'm not sure that is what is going on here.  The old parent
project (and specifically, version 3) is published and available in the
Nexus repo. For example:

https://build.shibboleth.net/nexus/content/groups/public/net/shibboleth/parent/3/parent-3.pom

is there for me.

The above error seems to suggest that the SSL truststore used by your
Maven installation isn't able to properly trust the Nexus repo's web
server cert.  I've never seen that happen before, but that's how I
interpret the above error message.  That cert chain is rooted in the CA
cert with subject of:

/C=SE/O=AddTrust AB/OU=AddTrust External TTP Network/CN=AddTrust
External CA Root.

You might want to see if that cert is in your Java trust store used by
Maven.

--Brent