View source for Configure Maven to Skip SSL Certificate Verification

=Internal=

* [[Maven#Subjects|Maven]]

=Overview=

If maven is configured to download dependencies from a HTTPS repository that uses self-signed certificates, it fails with:

 mvn clean install
 Downloading: https&#58;//nexus-cicd.apps.openshift.novaordis.io/content/groups/public/org/apache/maven/plugins/maven-source-plugin/maven-metadata.xml
 [WARNING] Could not transfer metadata org.apache.maven.plugins:maven-source-plugin/maven-metadata.xml from/to nexus \
 (https&#58;//nexus-cicd.apps.openshift.novaordis.io/content/groups/public/): sun.security.validator.ValidatorException: \
 PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

Additional configuration is required to make the underlying [[HttpComponents HttpClient|HttpClient]] to ignore the SSL self-signed certificate and to proceed with the HTTP connection.

=Use Maven Wagon System Properties=

Set one of the following on the maven command line:

 -Dmaven.wagon.http.ssl.insecure=true 
 -Dmaven.wagon.http.ssl.allowall=true 
 -Dmaven.wagon.http.ssl.ignore.validity.dates=true

More details {{External