nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

Alfresco auth-rest SDK of ACS gives the error while downloading artifacts

om_bijawat

I am using Alfresco SDK in my spring boot project, after adding the auth-rest dependency in my pom.xml I tried to download the artifacts, it gives me error
javax.net.ssl|ERROR|01|main|2021-09-08 23:03:49.559 IST|TransportContext.java:341|Fatal (CERTIFICATE_UNKNOWN): PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target (
"throwable" : {
sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

Below is the dependency added in pom.xml file
<dependency>
<groupId>org.alfresco</groupId>
<artifactId>alfresco-auth-rest-api</artifactId>
<version>5.0.4-SNAPSHOT</version>
</dependency>
Thanks

Find more posts tagged with

Alfresco Content Services

Accepted answers

abhinavmishra14

Try this and see if it works for you:

https://github.com/abhinavmishra14/InstallCert#readme

java InstallCert artifacts.alfresco.com:443

All the instructions are documented on the github repo.

abhinavmishra14

Pom file doesn't seem to have an issue, it is related to the certificate installed on your local environment. Unless you resolve it, it wont work.

Did you installed the alfresco certificate correctly to your java11 installation path, e.g if using jdk-11.0.4.: C:\Program Files\Java\jdk-11.0.4\lib\security\cacerts (C:\Program Files\Java\jdk-11.x.x\lib\security\cacerts) ?

Additionally you can open the url https://artifacts.alfresco.com/nexus/content/groups/public/ in browser and see if certificate is valid:

After you save the file, launch a command prompt. Open the command prompt as administrator and navigate to the folder where you saved the certificate: e.g.: C:\Users\alfresco222User\Desktop (File is available as C:\Users\alfresco222User\Desktop\alf-pub-repo-cert.cer)

Run the following command to install the cert, default password is "changeit" and provide "yes" when prompted:

C:\Users\alfresco222User\Desktop>keytool -import -alias alf-pub-repo-cert -keystore "C:\Program Files\Java\jdk-11.0.4\lib\security\cacerts" -file alf-pub-repo-cert.cer
Warning: use -cacerts option to access cacerts keystore

Enter keystore password:

Owner: CN=*.alfresco.com, O=Hyland Software, L=Westlake, ST=Ohio, C=US
Issuer: CN=Entrust Certification Authority - L1K, OU="(c) 2012 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US
Serial number: 3054263214bb29f7fe01cd0b8984c73f
Valid from: Thu Jul 15 09:10:47 EDT 2021 until: Fri Jul 15 09:10:47 EDT 2022
Certificate fingerprints:
         SHA1: E7:15:72:3E:C3:86:A7:D3:24:74:11:29:3B:AC:9D:FC:11:B6:66:99
         SHA256: F4:1A:E3:1E:24:D6:A7:27:BD:F3:08:52:A0:7B:54:A6:E3:1E:3F:40:FA:7E:9C:6E:1F:34:38:6B:26:32:70:77
Signature algorithm name: SHA256withRSA
Subject Public Key Algorithm: 2048-bit RSA key
Version: 3

Extensions:

#1: ObjectId: 1.3.6.1.4.1.11129.2.4.2 Criticality=false
0000: 04 82 01 6C 01 6A 00 77   00 56 14 06 9A 2F D7 C2  ...l.j.w.V.../..
0010: EC D3 F5 E1 BD 44 B2 3E   C7 46 76 B9 BC 99 11 5C  .....D.>.Fv....\
0020: C0 EF 94 98 55 D6 89 D0   DD 00 00 01 7A AA 4A 85  ....U.......z.J.
0030: B4 00 00 04 03 00 48 30   46 02 21 00 B9 E1 7E B6  ......H0F.!.....
0040: A6 05 68 06 3C CB 42 32   1B 78 23 EA 6A 41 A4 94  ..h.<.B2.x#.jA..
0050: 89 FC 16 3A 4C ED AA 60   55 45 36 83 02 21 00 FB  ...:L..`UE6..!..
0060: F2 42 5D 61 C9 C1 88 5C   7C D3 12 80 9B 93 11 55  .B]a...\.......U
0070: DD 84 ED 0F C1 CF 25 11   07 AE 26 09 5C 15 A4 00  ......%...&.\...
0080: 77 00 DF A5 5E AB 68 82   4F 1F 6C AD EE B8 5F 4E  w...^.h.O.l..._N
0090: 3E 5A EA CD A2 12 A4 6A   5E 8E 3B 12 C0 20 44 5C  >Z.....j^.;.. D\
00A0: 2A 73 00 00 01 7A AA 4A   85 A6 00 00 04 03 00 48  *s...z.J.......H
00B0: 30 46 02 21 00 EE FC F7   90 73 B5 CC DF E8 9D BE  0F.!.....s......
00C0: 6F 0E D0 27 4F 04 6D 2F   07 4A A1 1D AF 0C BE DB  o..'O.m/.J......
00D0: C4 50 07 EA 0D 02 21 00   87 2E 38 7D 93 D1 73 83  .P....!...8...s.
00E0: 56 8B AA 27 45 B2 7B CA   8B 3B 78 48 41 FD 50 3A  V..'E....;xHA.P:
00F0: 49 E2 DF DD B8 26 62 DF   00 76 00 46 A5 55 EB 75  I....&b..v.F.U.u
0100: FA 91 20 30 B5 A2 89 69   F4 F3 7D 11 2C 41 74 BE  .. 0...i....,At.
0110: FD 49 B8 85 AB F2 FC 70   FE 6D 47 00 00 01 7A AA  .I.....p.mG...z.
0120: 4A 85 AF 00 00 04 03 00   47 30 45 02 21 00 EC 51  J.......G0E.!..Q
0130: 6C 39 5B 7F A2 A5 98 61   83 38 4A E3 9F 88 94 22  l9[....a.8J...."
0140: 97 88 4F 58 2A 85 96 0F   7B 37 67 62 17 1A 02 20  ..OX*....7gb...
0150: 55 87 19 A2 50 31 5D B5   38 BF B3 10 92 18 84 0D  U...P1].8.......
0160: B3 19 A5 DB 25 5F 96 00   1F 4C 85 1A 61 58 22 8C  ....%_...L..aX".


#2: ObjectId: 1.3.6.1.5.5.7.1.1 Criticality=false
AuthorityInfoAccess [
  [
   accessMethod: ocsp
   accessLocation: URIName: http://ocsp.entrust.net
,
   accessMethod: caIssuers
   accessLocation: URIName: http://aia.entrust.net/l1k-chain256.cer
]
]

#3: ObjectId: 2.5.29.35 Criticality=false
AuthorityKeyIdentifier [
KeyIdentifier [
0000: 82 A2 70 74 DD BC 53 3F   CF 7B D4 F7 CD 7F A7 60  ..pt..S?.......`
0010: C6 0A 4C BF                                        ..L.
]
]

#4: ObjectId: 2.5.29.19 Criticality=true
BasicConstraints:[
  CA:false
  PathLen: undefined
]

#5: ObjectId: 2.5.29.31 Criticality=false
CRLDistributionPoints [
  [DistributionPoint:
     [URIName: http://crl.entrust.net/level1k.crl]
]]

#6: ObjectId: 2.5.29.32 Criticality=false
CertificatePolicies [
  [CertificatePolicyId: [2.16.840.1.114028.10.1.5]
[PolicyQualifierInfo: [
  qualifierID: 1.3.6.1.5.5.7.2.1
  qualifier: 0000: 16 1B 68 74 74 70 73 3A   2F 2F 77 77 77 2E 65 6E  ..https://www.en
0010: 74 72 75 73 74 2E 6E 65   74 2F 72 70 61           trust.net/rpa

]]  ]
  [CertificatePolicyId: [2.23.140.1.2.2]
[]  ]
]

#7: ObjectId: 2.5.29.37 Criticality=false
ExtendedKeyUsages [
  serverAuth
  clientAuth
]

#8: ObjectId: 2.5.29.15 Criticality=true
KeyUsage [
  DigitalSignature
  Key_Encipherment
]

#9: ObjectId: 2.5.29.17 Criticality=false
SubjectAlternativeName [
  DNSName: *.alfresco.com
  DNSName: alfresco.com
]

#10: ObjectId: 2.5.29.14 Criticality=false
SubjectKeyIdentifier [
KeyIdentifier [
0000: C8 2D 66 9E B1 68 76 ED   AE C8 05 59 07 E5 6A 9F  .-f..hv....Y..j.
0010: C5 85 38 4A                                        ..8J
]
]

Trust this certificate? [no]:  yes
Certificate was added to keystore

All comments

abhinavmishra14

Checkout these threads:

https://hub.alfresco.com/t5/alfresco-content-services-forum/ssl-certificate-expired-on-https-artifacts-alfresco-co-api/m-p/309094#M25330

https://hub.alfresco.com/t5/alfresco-content-services-forum/cannot-build-an-alfresco-sdk-4-2-project/m-p/309082/highlight/true#M25323

It SSL certificate for https://artifacts.alfresco.com was expired. but now it is renewed.

It does download the jar files during build correctly now.

https://artifacts.alfresco.com/nexus/content/groups/public-snapshots/org/alfresco/alfresco-auth-rest-api/5.0.4-SNAPSHOT/

Can you share the full build log, it should point out to some artifacts?

something like:

[ERROR] Non-resolvable import POM: Could not transfer artifact org.alfresco:....................

om_bijawat

Plase see below the full build log :

[ERROR] [ERROR] Some problems were encountered while processing the POMs:
[FATAL] Non-resolvable parent POM for com.alresco.poc:ClientPOC:0.0.1-SNAPSHOT: org.alfresco:alfresco-java-sdkom:5.0.4 was not found in https://artifacts.alfresco.com/nexus/content/groups/public during a previous attempt. This failure was cached in the local repository and resolution is not reattempted until the update interval of alfresco-public has elapsed or updates are forced and 'parent.relativePath' points at wrong local POM @ line 6, column 14

[ERROR] The build could not read 1 project -> [Help 1]
[ERROR]
[ERROR] The project com.alresco.poc:ClientPOC:0.0.1-SNAPSHOT (D:\workspace\ClientPOC\pom.xml) has 1 error
[ERROR] Non-resolvable parent POM for com.alresco.poc:ClientPOC:0.0.1-SNAPSHOT: org.alfresco:alfresco-java-sdkom:5.0.4 was not found in https://artifacts.alfresco.com/nexus/content/groups/public during a previous attempt. This failure was cached in the local repository and resolution is not reattempted until the update interval of alfresco-public has elapsed or updates are forced and 'parent.relativePath' points at wrong local POM @ line 6, column 14 -> [Help 2]
[ERROR]
[ERROR] To see the full stack trace of the errors, re-run Maven with the -e switch.
[ERROR] Re-run Maven using the -X switch to enable full debug logging.
[ERROR]
[ERROR] For more information about the errors and possible solutions, please read the following articles:
[ERROR] [Help 1] http://cwiki.apache.org/confluence/display/MAVEN/ProjectBuildingException
[ERROR] [Help 2] http://cwiki.apache.org/confluence/display/MAVEN/UnresolvableModelException

om_bijawat

Even I faced the same issue with alfresco-java-rest-api artifacts also, please see the details below :

[ERROR] Failed to execute goal on project ClientPOC: Could not resolve dependencies for project com.alresco.poc:ClientPOC:jar:0.0.1-SNAPSHOT: Could not transfer artifact org.alfresco:alfresco-java-rest-api:jar:5.0.3-SNAPSHOT from/to alfresco-public (https://artifacts.alfresco.com/nexus/content/groups/public😞 transfer failed for https://artifacts.alfresco.com/nexus/content/groups/public/org/alfresco/alfresco-java-rest-api/5.0.3-SNAPSHOT/alfresco-java-rest-api-5.0.3-SNAPSHOT.jar: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target -> [Help 1]

Thanks

abhinavmishra14

Try this and see if it works for you:

https://github.com/abhinavmishra14/InstallCert#readme

java InstallCert artifacts.alfresco.com:443

All the instructions are documented on the github repo.