Skip to main content


Eclipse Community Forums
Forum Search:

Search      Help    Register    Login    Home
Home » Newcomers » Newcomers » Installing one plugin gets certificate error
Installing one plugin gets certificate error [message #1821709] Tue, 18 February 2020 23:34 Go to next message
David M. Karr is currently offline David M. KarrFriend
Messages: 652
Registered: July 2009
Senior Member
I'm running Eclipse Java 2019-12 with Java 13 on Windows 10.

I have many plugins installed, and I update them with new versions relatively often.

I am attempting to install the "Bash Editor" from the Marketplace client. Every time I attempt this, it fails with this error:
Unable to read repository at https://dl.bintray.com/de-jcup/basheditor/content.xml.
PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

I've seen this error in other circumstances, and it's obviously related to the TLS certificate. I've posted an issue for that particular plugin, and the author says that many other people have successfully installed it recently.
Re: Installing one plugin gets certificate error [message #1821714 is a reply to message #1821709] Wed, 19 February 2020 04:37 Go to previous messageGo to next message
Ed Merks is currently offline Ed MerksFriend
Messages: 30993
Registered: July 2009
Senior Member
This stack trace generally is the result of the Java installation's certificate store not containing the root certificate of the site's certificate chain. You can try to add it. Google "java add certificate to cacerts" to find some ways to doing that. It's quite complex and painful. You might also avoid the problem by trying http: instead of https for the site's URL.
Re: Installing one plugin gets certificate error [message #1821760 is a reply to message #1821714] Wed, 19 February 2020 17:39 Go to previous messageGo to next message
David M. Karr is currently offline David M. KarrFriend
Messages: 652
Registered: July 2009
Senior Member
Adding the update site as "http" instead of "https" worked.

So, examining the root cause, considering that the author said that many people have successfully installed the plugin lately, I'm going to guess they were using versions older than Java 13. Are there root certificates honored in versions older than 13 that are now revoked?
Re: Installing one plugin gets certificate error [message #1821771 is a reply to message #1821760] Wed, 19 February 2020 22:17 Go to previous messageGo to next message
David M. Karr is currently offline David M. KarrFriend
Messages: 652
Registered: July 2009
Senior Member
I tried exporting the cert for bintray.com, importing that into the cacerts file in the JDK that Eclipse is running with, then restarting Eclipse and trying to install again, and it failed with the same error.
Re: Installing one plugin gets certificate error [message #1821776 is a reply to message #1821771] Thu, 20 February 2020 05:12 Go to previous message
Ed Merks is currently offline Ed MerksFriend
Messages: 30993
Registered: July 2009
Senior Member
At a customer site recently I had endless problems like this. We finally got the network settings to communicate through the proxy (using manual settings) to make update sites accessible, but then EGit/JGit failed with exactly these same low level stack traces until I switched back to native settings... Here too we had to manually add the certificates (for the Git repository's site, and for some reason there were 3 we had to add) to Java's certificate store (and did so correctly), but via manual network settings (to use the proxy server), these somehow didn't work for JGit. I've also had problems like this testing all the marketplace listings locally on my machine, but it worked better on the build server. And yes, I think it's possible for root certificates to be removed but of course it's just so much voodoo...
Previous Topic:Eclipse and Java in Windows XP
Next Topic:Changes in source don't have any effect
Goto Forum:
  


Current Time: Sun Mar 29 16:49:21 GMT 2020

Powered by FUDForum. Page generated in 0.05059 seconds
.:: Contact :: Home ::.

Powered by: FUDforum 3.0.2.
Copyright ©2001-2010 FUDforum Bulletin Board Software

Back to the top