[WAGON-452] RelaxedTrustStrategy does not handle multiple certificates

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.10
• Fix Version/s: 3.1.0
• Component/s: wagon-http, wagon-http-lightweight
• Labels: easyfix maven security
• Assignee: Michael Osipov
• Reporter: Vítor Teixeira
• Created: 11/Mar/16 09:55
• Updated: 05/Apr/18 19:18
• Resolved: 05/Apr/18 19:16

Description

On org.apache.maven.wagon.providers.http.RelaxedTrustStrategy exception handling is missing.

With maven.wagon.http.ssl.ignore.validity.dates=true the following exception is thrown:

sun.security.validator.ValidatorException: PKIX path validation failed: java.security.cert.CertPathValidatorException: timestamp check failed: NotAfter: Tue Dec 29 23:59:59 GMT 2015 -> [Help 1]

Issue Links

• links to: GitHub Pull Request #36
• links to: GitHub Pull Request #36