[ https://issues.apache.org/jira/browse/WAGON-452?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16427476#comment-16427476 ]
Michael Osipov edited comment on WAGON-452 at 4/5/18 7:18 PM: -------------------------------------------------------------- Fixed with [f4afca512adc1697b96ecc710fc8025e91cff4d4|https://gitbox.apache.org/repos/asf?p=maven-wagon.git;a=commit;h=f4afca512adc1697b96ecc710fc8025e91cff4d4]. was (Author: michael-o): Fixed with [f4afca512adc1697b96ecc710fc8025e91cff4d4|https://gitbox.apache.org/repos/asf?p=maven-scm.git;a=commit;h=f4afca512adc1697b96ecc710fc8025e91cff4d4]. > RelaxedTrustStrategy does not handle multiple certificates > ---------------------------------------------------------- > > Key: WAGON-452 > URL: https://issues.apache.org/jira/browse/WAGON-452 > Project: Maven Wagon > Issue Type: Bug > Components: wagon-http, wagon-http-lightweight > Affects Versions: 2.10 > Reporter: VĂtor Teixeira > Assignee: Michael Osipov > Priority: Major > Labels: easyfix, maven, security > Fix For: 3.0.1 > > Original Estimate: 24h > Remaining Estimate: 24h > > On org.apache.maven.wagon.providers.http.RelaxedTrustStrategy exception > handling is missing. > With maven.wagon.http.ssl.ignore.validity.dates=true the following exception > is thrown: > sun.security.validator.ValidatorException: PKIX path validation failed: > java.security.cert.CertPathValidatorException: timestamp check failed: > NotAfter: Tue Dec 29 23:59:59 GMT 2015 -> [Help 1] -- This message was sent by Atlassian JIRA (v7.6.3#76005)