[
https://issues.apache.org/jira/browse/NETBEANS-3810?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17114440#comment-17114440
]
Eric Bresie edited comment on NETBEANS-3810 at 5/22/20, 10:52 PM:
------------------------------------------------------------------
Not sure if this is related, but was reading a recent thread about root ca
certificate issues on openjdk mailing list (1) which seems to follow with some
aspect of missing.
This made me wonder if maybe there is something related to the version of jdk
in use where some trusted certs may no longer be available in the JDK in use.
Another question, I’ve also read recently that maven central is no longer
supporting insecure (i.e. http) connections in favor of https and related
secure. I’m wonder if this has the side effect that ssl/https requiring ca
root/trusted/keystone is more prevalent now causing more dependency on secure
communications.
Maybe at install or first startup can do some preparation steps including
checking on network proxy and related security session for initial setup, then
if subsequent network calls if network is not good due to security purposes
then maybe can cause a dialog to allow adding the certs as applicable to a
share or app specific cert key store
(1)https://mail.openjdk.java.net/pipermail/jdk-dev/2020-May/004305.html
(2)
[https://support.sonatype.com/hc/en-us/articles/360041287334-Central-501-HTTPS-Required]
was (Author: ebresie):
Not sure if this is related, but was reading a recent thread about root ca
certificate issues on openjdk mailing list (1) which seems to follow with some
aspect of missing.
This made me wonder if maybe there is something related to the version of jdk
in use where some trusted certs may no longer be available in the JDK in use.
Another question, I’ve also read recently that maven central is no longer
supporting insecure (i.e. http) connections in favor of https and related
secure. I’m wonder if this has the side effect that ssl/https requiring ca
root/trusted/keystone is more prevalent now causing more dependency on secure
communications.
Maybe at install or first startup can do some preparation steps including
checking on network proxy and related security session for initial setup, then
if subsequent network calls if network is not good due to security purposes
then maybe can cause a dialog to allow adding the certs as applicable to a
share or app specific cert key store
(1)[https://mail.openjdk.java.net/pipermail/jdk-dev/2020-May/004305.html
(2)
|https://mail.openjdk.java.net/pipermail/jdk-dev/2020-May/004305.html]https://support.sonatype.com/hc/en-us/articles/360041287334-Central-501-HTTPS-Required
> Netbeans 11.3 does not report clearly certificate problems downloading javafx
> and nb-javac
> ------------------------------------------------------------------------------------------
>
> Key: NETBEANS-3810
> URL: https://issues.apache.org/jira/browse/NETBEANS-3810
> Project: NetBeans
> Issue Type: Bug
> Components: platform - Autoupdate
> Affects Versions: 11.3
> Environment: Windows 2016 server, Intel Xeon, 48G RAM.
> Network includes a proxy server with deep packet inspection and certificate
> rewriting.
> Reporter: Michele Costabile
> Assignee: Michele Costabile
> Priority: Minor
> Labels: documentation, newbie
> Fix For: 11.3
>
> Attachments: Netbeans-11.3_bug.PNG, Netbeans-11.3_plugin-problem.PNG,
> Netbeans-11.3_plugin.PNG
>
>
> NetBeans cannot get past installation of JavaFX and nb-javac on my
> installation behind a company firewall. This problem was also in 11.2, but it
> did not stop the IDE from working. It just kept on quietly asking for
> nb-javac installation.
> 11.3, on the other hand does not seem to get past this problem. It keeps on
> asking for installation of javafx and nb-javac and "Loading projects" never
> comes to an end.
> I tested my proxy setting in options and I have a green light with system
> settings and also with manual settings.
> In any case I have never been able to install nb-javac and could not find
> instructions on how to install manually the plugin.
> Note that my proxy has deep packet inspection and can create problems with
> certificate verification on SSL.
>
> EDIT: the request for installation is not an infinite loop. It appears to be
> once for every open project. Hitting cancel more times, the progress bar in
> the status bar eventually gets to 100%, but all the projects are reported
> broken.
>
> EDIT: as you can see from the comments below, it was really a problem with
> certificates. When you are behind a proxy with deep inspection, certificates
> are manipulated in such a way that you have to trust your company root
> certificate to avoid failure in trust chains.
> This becomes a NetBeans installation problem because:
> * Differently from other IDEs, NetBeans delegates everything to JDK, so it
> requires that the trust problem is solved in the JDK, not in the IDE
> preferences. The user should be able to find instructionsto resolve the
> problem
> * In 11.2 the IDE did not enter a loop waiting for nb'javac installation to
> validate projects. It just gave up, causing less problems
> * "Test connection" in proxy settings did not report certificate problems. A
> full https connection should be tested
> * The dialog box of nb-javac installation does not report certificate
> problems, it rather dies without warning and the installation is stuck with a
> progress bar at 100% and no notification other than "cannot resolve external
> references ..." This hides the problem
>
>
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscr...@netbeans.apache.org
For additional commands, e-mail: commits-h...@netbeans.apache.org
For further information about the NetBeans mailing lists, visit:
https://cwiki.apache.org/confluence/display/NETBEANS/Mailing+lists
