|Proxy / SSL problems with update sites [message #1741857]
||Tue, 30 August 2016 08:16
| István Mészáros
Registered: October 2009
our team is behind a company proxy which fakes SSL certificates to intercept HTTPS traffic.
If i configure the eclipse network settings to use the proxy server, i can properly reach the internet, use the embedded browser, GIT, update sites, etc.
The problem is that some update sites use HTTPS, and in that case eclipse refuses the connection with the following error:
Unable to read repository at http://.........../content.xml.
sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
My guess that the problem is that the JVM that runs eclipse does not use the system CERT store that has the root certificate issued by the proxy.
I tried to export the certificate from the system CERT story to import it to the JVM CERT store, but exporting the private key is forbidden, and my guess is that i'd need that.
Is there a possibility to tell the JVM or Eclipse to ignore all certificate validation errors? I know it's not safe and not recommended, but currently i don't have any other idea how to overcome this problem.
Powered by FUDForum
. Page generated in 0.01741 seconds