Is it possible that a new appliance has been inserted in your network configuration that is doing man-in-the-middle packet inspection?
I've seen several organisations recently start implementing SSL resigning with a private root certificate that is pushed onto all PCs in a domain via the GPO. But java didn't recognize the PC trust store and needs to have the same root certificate installed in its own trust store. Easy way to test/validate is to check the https site/certificate in Browser and see if it is truly signed by a known CA or if it is signed by a different CA. If it isn't a trusted CA, but you recognize the CA as your own organisation, then you need to install the root certificate in the Java cacerts = trust store for java). Hope this helps. Thanks Eric On Nov 18, 2016 1:01 PM, "David Delbecq" <[email protected]> wrote: > Hello, > > I had no problem using maven for about the whole day and downloading > artefacts, but suddently my builds started to fail with ssl certificate > issue. The repo "repo.maven.apache.org" is answering with a certificate > dedicated to "repo1.maven.org". I have tried mirror https://uk.maven.org > and it exposes the same behaviour. Browser confirms the problem and > refuses to let me go to those https pages. Is there some maintenance in > progress that explains this situation? > > [DEBUG] Lifecycle default -> [validate, initialize, generate-sources, > process-sources, generate-resources, process-resources, compile, > process-classes, generate-test-sources, process-test-sources, > generate-test-resources, process-test-resources, test-compile, > process-test-classes, test, prepare-package, package, pre-integration-test, > integration-test, post-integration-test, verify, install, deploy] > [DEBUG] Lifecycle clean -> [pre-clean, clean, post-clean] > [DEBUG] Lifecycle site -> [pre-site, site, post-site, site-deploy] > [DEBUG] Using transporter WagonTransporter with priority -1.0 for > https://repo.maven.apache.org/maven2 > [DEBUG] Using connector BasicRepositoryConnector with priority 0.0 for > https://repo.maven.apache.org/maven2 > Downloading: > https://repo.maven.apache.org/maven2/org/apache/maven/ > plugins/maven-compiler-plugin/3.6.0/maven-compiler-plugin-3.6.0.pom > [DEBUG] Writing tracking file > /home/ddelbecq/.m2/repository/org/apache/maven/plugins/ > maven-compiler-plugin/3.6.0/maven-compiler-plugin-3.6.0.pom.lastUpdated > [INFO] > ------------------------------------------------------------------------ > [INFO] BUILD FAILURE > [INFO] > ------------------------------------------------------------------------ > [INFO] Total time: 1.039 s > [INFO] Finished at: 2016-11-18T18:51:45+01:00 > [INFO] Final Memory: 20M/481M > [INFO] > ------------------------------------------------------------------------ > [ERROR] Plugin org.apache.maven.plugins:maven-compiler-plugin:3.6.0 or one > of its dependencies could not be resolved: Failed to read artifact > descriptor for org.apache.maven.plugins:maven-compiler-plugin:jar:3.6.0: > Could not transfer artifact > org.apache.maven.plugins:maven-compiler-plugin:pom:3.6.0 from/to central ( > https://repo.maven.apache.org/maven2): Host name 'repo.maven.apache.org' > does not match the certificate subject provided by the peer (CN= > repo1.maven.org, O="Sonatype, Inc", L=Fulton, ST=MD, C=US) -> [Help 1] > org.apache.maven.plugin.PluginResolutionException: Plugin > org.apache.maven.plugins:maven-compiler-plugin:3.6.0 or one of its > dependencies could not be resolved: Failed to read artifact descriptor for > org.apache.maven.plugins:maven-compiler-plugin:jar:3.6.0 > at > org.apache.maven.plugin.internal.DefaultPluginDependenciesResol > ver.resolve(DefaultPluginDependenciesResolver.java:117) > at > org.apache.maven.plugin.internal.DefaultMavenPluginManager. > getPluginDescriptor(DefaultMavenPluginManager.java:180) > at > org.apache.maven.plugin.internal.DefaultMavenPluginManager. > getMojoDescriptor(DefaultMavenPluginManager.java:284) > at > org.apache.maven.plugin.DefaultBuildPluginManager.getMojoDescriptor( > DefaultBuildPluginManager.java:241) > at > org.apache.maven.lifecycle.internal.DefaultLifecycleExecutionPlanC > alculator.setupMojoExecution(DefaultLifecycleExecutionPlanC > alculator.java:170) > at > org.apache.maven.lifecycle.internal.DefaultLifecycleExecutionPlanC > alculator.setupMojoExecutions(DefaultLifecycleExecutionPlanC > alculator.java:155) > at > org.apache.maven.lifecycle.internal.DefaultLifecycleExecutionPlanC > alculator.calculateExecutionPlan(DefaultLifecycleExecutionPlanC > alculator.java:131) > at > org.apache.maven.lifecycle.internal.DefaultLifecycleExecutionPlanC > alculator.calculateExecutionPlan(DefaultLifecycleExecutionPlanC > alculator.java:145) > at > org.apache.maven.lifecycle.internal.builder.BuilderCommon. > resolveBuildPlan(BuilderCommon.java:97) > at > org.apache.maven.lifecycle.internal.LifecycleModuleBuilder.buildProject( > LifecycleModuleBuilder.java:110) > at > org.apache.maven.lifecycle.internal.LifecycleModuleBuilder.buildProject( > LifecycleModuleBuilder.java:80) > at > org.apache.maven.lifecycle.internal.builder.singlethreaded. > SingleThreadedBuilder.build(SingleThreadedBuilder.java:51) > at > org.apache.maven.lifecycle.internal.LifecycleStarter. > execute(LifecycleStarter.java:128) > at org.apache.maven.DefaultMaven.doExecute(DefaultMaven.java:307) > at org.apache.maven.DefaultMaven.doExecute(DefaultMaven.java:193) > at org.apache.maven.DefaultMaven.execute(DefaultMaven.java:106) > at org.apache.maven.cli.MavenCli.execute(MavenCli.java:863) > at org.apache.maven.cli.MavenCli.doMain(MavenCli.java:288) > at org.apache.maven.cli.MavenCli.main(MavenCli.java:199) > at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) > at > sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java: > 62) > at > sun.reflect.DelegatingMethodAccessorImpl.invoke( > DelegatingMethodAccessorImpl.java:43) > at java.lang.reflect.Method.invoke(Method.java:483) > at > org.codehaus.plexus.classworlds.launcher.Launcher. > launchEnhanced(Launcher.java:289) > at > org.codehaus.plexus.classworlds.launcher.Launcher. > launch(Launcher.java:229) > at > org.codehaus.plexus.classworlds.launcher.Launcher. > mainWithExitCode(Launcher.java:415) > at org.codehaus.plexus.classworlds.launcher.Launcher. > main(Launcher.java:356) > Caused by: org.eclipse.aether.resolution.ArtifactDescriptorException: > Failed to read artifact descriptor for > org.apache.maven.plugins:maven-compiler-plugin:jar:3.6.0 > at > org.apache.maven.repository.internal.DefaultArtifactDescriptorReade > r.loadPom(DefaultArtifactDescriptorReader.java:282) > at > org.apache.maven.repository.internal.DefaultArtifactDescriptorReade > r.readArtifactDescriptor(DefaultArtifactDescriptorReader.java:198) > at > org.eclipse.aether.internal.impl.DefaultRepositorySystem. > readArtifactDescriptor(DefaultRepositorySystem.java:287) > at > org.apache.maven.plugin.internal.DefaultPluginDependenciesResol > ver.resolve(DefaultPluginDependenciesResolver.java:103) > ... 26 more > Caused by: org.eclipse.aether.resolution.ArtifactResolutionException: > Could > not transfer artifact > org.apache.maven.plugins:maven-compiler-plugin:pom:3.6.0 from/to central ( > https://repo.maven.apache.org/maven2): Host name 'repo.maven.apache.org' > does not match the certificate subject provided by the peer (CN= > repo1.maven.org, O="Sonatype, Inc", L=Fulton, ST=MD, C=US) > at > org.eclipse.aether.internal.impl.DefaultArtifactResolver.resolve( > DefaultArtifactResolver.java:444) > at > org.eclipse.aether.internal.impl.DefaultArtifactResolver.resolveArtifacts( > DefaultArtifactResolver.java:246) > at > org.eclipse.aether.internal.impl.DefaultArtifactResolver.resolveArtifact( > DefaultArtifactResolver.java:223) > at > org.apache.maven.repository.internal.DefaultArtifactDescriptorReade > r.loadPom(DefaultArtifactDescriptorReader.java:267) > ... 29 more > Caused by: org.eclipse.aether.transfer.ArtifactTransferException: Could > not > transfer artifact org.apache.maven.plugins:maven-compiler-plugin:pom:3.6.0 > from/to central (https://repo.maven.apache.org/maven2): Host name ' > repo.maven.apache.org' does not match the certificate subject provided by > the peer (CN=repo1.maven.org, O="Sonatype, Inc", L=Fulton, ST=MD, C=US) > at > org.eclipse.aether.connector.basic.ArtifactTransportListener. > transferFailed(ArtifactTransportListener.java:43) > at > org.eclipse.aether.connector.basic.BasicRepositoryConnector$ > TaskRunner.run(BasicRepositoryConnector.java:355) > at > org.eclipse.aether.util.concurrency.RunnableErrorForwarder$1.run( > RunnableErrorForwarder.java:67) > at > org.eclipse.aether.connector.basic.BasicRepositoryConnector$ > DirectExecutor.execute(BasicRepositoryConnector.java:581) > at > org.eclipse.aether.connector.basic.BasicRepositoryConnector.get( > BasicRepositoryConnector.java:249) > at > org.eclipse.aether.internal.impl.DefaultArtifactResolver.performDownloads( > DefaultArtifactResolver.java:520) > at > org.eclipse.aether.internal.impl.DefaultArtifactResolver.resolve( > DefaultArtifactResolver.java:421) > ... 32 more > Caused by: org.apache.maven.wagon.TransferFailedException: Host name ' > repo.maven.apache.org' does not match the certificate subject provided by > the peer (CN=repo1.maven.org, O="Sonatype, Inc", L=Fulton, ST=MD, C=US) > at > org.apache.maven.wagon.providers.http.AbstractHttpClientWagon. > fillInputData(AbstractHttpClientWagon.java:1066) > at > org.apache.maven.wagon.providers.http.AbstractHttpClientWagon. > fillInputData(AbstractHttpClientWagon.java:960) > at org.apache.maven.wagon.StreamWagon.getInputStream(StreamWagon.java:116) > at org.apache.maven.wagon.StreamWagon.getIfNewer(StreamWagon.java:88) > at org.apache.maven.wagon.StreamWagon.get(StreamWagon.java:61) > at > org.eclipse.aether.transport.wagon.WagonTransporter$GetTaskRunner.run( > WagonTransporter.java:560) > at > org.eclipse.aether.transport.wagon.WagonTransporter. > execute(WagonTransporter.java:427) > at > org.eclipse.aether.transport.wagon.WagonTransporter.get( > WagonTransporter.java:404) > at > org.eclipse.aether.connector.basic.BasicRepositoryConnector$ > GetTaskRunner.runTask(BasicRepositoryConnector.java:447) > at > org.eclipse.aether.connector.basic.BasicRepositoryConnector$ > TaskRunner.run(BasicRepositoryConnector.java:350) > ... 37 more > Caused by: javax.net.ssl.SSLPeerUnverifiedException: Host name ' > repo.maven.apache.org' does not match the certificate subject provided by > the peer (CN=repo1.maven.org, O="Sonatype, Inc", L=Fulton, ST=MD, C=US) > at > org.apache.http.conn.ssl.SSLConnectionSocketFactory.verifyHostname( > SSLConnectionSocketFactory.java:466) > at > org.apache.http.conn.ssl.SSLConnectionSocketFactory.createLayeredSocket( > SSLConnectionSocketFactory.java:395) > at > org.apache.http.conn.ssl.SSLConnectionSocketFactory.connectSocket( > SSLConnectionSocketFactory.java:353) > at > org.apache.http.impl.conn.DefaultHttpClientConnectionOperator.connect( > DefaultHttpClientConnectionOperator.java:141) > at > org.apache.http.impl.conn.PoolingHttpClientConnectionManager.connect( > PoolingHttpClientConnectionManager.java:353) > at > org.apache.http.impl.execchain.MainClientExec. > establishRoute(MainClientExec.java:380) > at > org.apache.http.impl.execchain.MainClientExec.execute(MainClientExec.java: > 236) > at > org.apache.http.impl.execchain.ProtocolExec.execute(ProtocolExec.java:184) > at org.apache.http.impl.execchain.RetryExec.execute(RetryExec.java:88) > at > org.apache.http.impl.execchain.RedirectExec.execute(RedirectExec.java:110) > at > org.apache.http.impl.client.InternalHttpClient.doExecute( > InternalHttpClient.java:184) > at > org.apache.http.impl.client.CloseableHttpClient.execute( > CloseableHttpClient.java:82) > at > org.apache.maven.wagon.providers.http.AbstractHttpClientWagon.execute( > AbstractHttpClientWagon.java:832) > at > org.apache.maven.wagon.providers.http.AbstractHttpClientWagon. > fillInputData(AbstractHttpClientWagon.java:983) > > -- > <http://www.trimble.com/> > David Delbecq > Software engineer, Transport & Logistics > Geldenaaksebaan 329, 1st floor | 3001 Leuven > +32 16 391 121 <+32%2016%20391%20121> Direct > [email protected] > <http://www.trimbletl.com/> >
