[cas-user] error when I run mvmn - the trustAnchors parameter must be non-empty

[Jennifer LaVoie]

I am following this amazing document

https://dacurry-tns.github.io/deploying-apereo-cas/introduction_overview.html (thank you so much for this)

But I am hitting  a snag here

https://dacurry-tns.github.io/deploying-apereo-cas/building_server_ldap_authentication_overview.html

I have added the correct lines to the pom.xml, but when I run mvnm clean package, I get the following error

[INFO] Scanning for projects...

[INFO] 

[INFO] ------------------------------------------------------------------------

[INFO] Building cas-overlay 1.0

[INFO] ------------------------------------------------------------------------

Downloading from central: https://repo.maven.apache.org/maven2/org/apache/maven/plugins/maven-clean-plugin/2.5/maven-clean-plugin-2.5.pom

[INFO] ------------------------------------------------------------------------

[INFO] BUILD FAILURE

[INFO] ------------------------------------------------------------------------

[INFO] Total time: 0.820 s

[INFO] Finished at: 2018-05-02T09:40:12-04:00

[INFO] Final Memory: 9M/208M

[INFO] ------------------------------------------------------------------------

[ERROR] Plugin org.apache.maven.plugins:maven-clean-plugin:2.5 or one of its dependencies could not be resolved: Failed to read artifact descriptor for org.apache.maven.plugins:maven-clean-plugin:jar:2.5: Could not transfer artifact org.apache.maven.plugins:maven-clean-plugin:pom:2.5 from/to central (https://repo.maven.apache.org/maven2): java.lang.RuntimeException: Unexpected error: java.security.InvalidAlgorithmParameterException: the trustAnchors parameter must be non-empty -> [Help 1]

[ERROR] 

[ERROR] To see the full stack trace of the errors, re-run Maven with the -e switch.

[ERROR] Re-run Maven using the -X switch to enable full debug logging.

[ERROR] 

[ERROR] For more information about the errors and possible solutions, please read the following articles:

[ERROR] [Help 1] http://cwiki.apache.org/confluence/display/MAVEN/PluginResolutionException

I do have a self signed cert in my jre/lib/security/cacerts, so I am not sure I understand the error.

Any help or advice would be appreciated

Jen

--
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
---
You received this message because you are subscribed to the Google Groups "CAS Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email to cas-user+u...@apereo.org.
To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/bb74c4d6-c426-4915-808d-472d25dae8ce%40apereo.org.

[Jennifer LaVoie]

Here is the section I added to my pom.xml

 <dependency>

                    <groupId>org.apereo.cas</groupId>

                    <artifactId>cas-server-support-ldap</artifactId>

                    <version>${cas.version}</version>

    </dependency>

To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/9ba45297-1809-417c-8327-ff294075a51d%40apereo.org.

[David Curry]

Hi Jennifer,

When you first run "mvnw" it tries to download and install Maven for you. This seems to be a problem with that process; it's failing to download one of the Maven plug-ins.

I can think of a couple of reasons for this... one would be that it was just a transient thing with the Maven repo and it should work for you after waiting a little while, and another would be either you have an old, out-of-date version of Maven already installed, or are somehow using an old, out-of-date version of Java?

--Dave

--

DAVID A. CURRY, CISSP
DIRECTOR OF INFORMATION SECURITY
INFORMATION TECHNOLOGY

71 FIFTH AVE., 9TH FL., NEW YORK, NY 10003
+1 212 229-5300 x4728 • david...@newschool.edu

To unsubscribe from this group and stop receiving emails from it, send an email to cas-user+unsubscribe@apereo.org.

To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/bb74c4d6-c426-4915-808d-472d25dae8ce%40apereo.org.

--
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
---
You received this message because you are subscribed to the Google Groups "CAS Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email to cas-user+u...@apereo.org.

To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/CA%2Bd9XAOMona5hwREyTs729Cix70wHcHbn%2BPnLCc3NnQ5Mw0zMg%40mail.gmail.com.

[Jennifer LaVoie]

Hi Dave

thanks for your insight.  I am not sure what is happening...my maven is 3.5.2 and it worked a few days ago to install cas...This is very frustrating...I really appreciate this community

To unsubscribe from this group and stop receiving emails from it, send an email to cas-user+u...@apereo.org.
To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/bb74c4d6-c426-4915-808d-472d25dae8ce%40apereo.org.

--
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
---
You received this message because you are subscribed to the Google Groups "CAS Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email to cas-user+u...@apereo.org.

To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/ae0ee746-b039-4848-8e45-5dd867624c18%40apereo.org.

[David Curry]

Perhaps something got corrupted. You could try removing the Maven cache:

rm -rf $HOME/.m2

and then re-run "./mvnw clean package" and let it re-download everything.

--Dave

--

DAVID A. CURRY, CISSP
DIRECTOR OF INFORMATION SECURITY
INFORMATION TECHNOLOGY

71 FIFTH AVE., 9TH FL., NEW YORK, NY 10003
+1 212 229-5300 x4728 • david...@newschool.edu

To unsubscribe from this group and stop receiving emails from it, send an email to cas-user+unsubscribe@apereo.org.

To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/ae0ee746-b039-4848-8e45-5dd867624c18%40apereo.org.

--
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
---
You received this message because you are subscribed to the Google Groups "CAS Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email to cas-user+u...@apereo.org.

To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/CA%2Bd9XAO67B9m3xyHG_2JyRf30P%2BbLzHw6weTPvJV4Rkam7xNZQ%40mail.gmail.com.

[Jennifer LaVoie]

Thanks.  Will try that after this dumb meeting I am stuck in

To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/ae0ee746-b039-4848-8e45-5dd867624c18%40apereo.org.

--
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
---
You received this message because you are subscribed to the Google Groups "CAS Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email to cas-user+u...@apereo.org.
To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/CA%2Bd9XAO67B9m3xyHG_2JyRf30P%2BbLzHw6weTPvJV4Rkam7xNZQ%40mail.gmail.com.

--
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
---
You received this message because you are subscribed to the Google Groups "CAS Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email to cas-user+u...@apereo.org.

To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/CA%2Bwv1vE%2BV-7qbrLsykDFbx1ro6x77Ar-a3-B9HTV6id4N4Ap4w%40mail.gmail.com.

[Jennifer LaVoie]

Ok I did try that

i was able to delete no problem

but when I re run I get the same error

Downloading https://repository.apache.org/content/repositories/releases/org/apache/maven/apache-maven/3.5.2/apache-maven-3.5.2-bin.zip

Exception in thread "main" javax.net.ssl.SSLException: java.lang.RuntimeException: Unexpected error: java.security.InvalidAlgorithmParameterException: the trustAnchors parameter must be non-empty

at sun.security.ssl.Alerts.getSSLException(Alerts.java:208)

at sun.security.ssl.SSLSocketImpl.fatal(SSLSocketImpl.java:1959)

at sun.security.ssl.SSLSocketImpl.fatal(SSLSocketImpl.java:1916)

at sun.security.ssl.SSLSocketImpl.handleException(SSLSocketImpl.java:1899)

at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1420)

at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1397)

at sun.net.www.protocol.https.HttpsClient.afterConnect(HttpsClient.java:559)

at sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.connect(AbstractDelegateHttpsURLConnection.java:185)

at sun.net.www.protocol.http.HttpURLConnection.getInputStream0(HttpURLConnection.java:1564)

at sun.net.www.protocol.http.HttpURLConnection.getInputStream(HttpURLConnection.java:1492)

at sun.net.www.protocol.https.HttpsURLConnectionImpl.getInputStream(HttpsURLConnectionImpl.java:263)

at org.apache.maven.wrapper.DefaultDownloader.downloadInternal(DefaultDownloader.java:84)

at org.apache.maven.wrapper.DefaultDownloader.download(DefaultDownloader.java:68)

at org.apache.maven.wrapper.Installer.createDist(Installer.java:69)

at org.apache.maven.wrapper.WrapperExecutor.execute(WrapperExecutor.java:149)

at org.apache.maven.wrapper.MavenWrapperMain.main(MavenWrapperMain.java:48)

Caused by: java.lang.RuntimeException: Unexpected error: java.security.InvalidAlgorithmParameterException: the trustAnchors parameter must be non-empty

at sun.security.validator.PKIXValidator.<init>(PKIXValidator.java:91)

at sun.security.validator.Validator.getInstance(Validator.java:179)

at sun.security.ssl.X509TrustManagerImpl.getValidator(X509TrustManagerImpl.java:312)

at sun.security.ssl.X509TrustManagerImpl.checkTrustedInit(X509TrustManagerImpl.java:171)

at sun.security.ssl.X509TrustManagerImpl.checkTrusted(X509TrustManagerImpl.java:184)

at sun.security.ssl.X509TrustManagerImpl.checkServerTrusted(X509TrustManagerImpl.java:124)

at sun.security.ssl.ClientHandshaker.serverCertificate(ClientHandshaker.java:1496)

at sun.security.ssl.ClientHandshaker.processMessage(ClientHandshaker.java:216)

at sun.security.ssl.Handshaker.processLoop(Handshaker.java:1026)

at sun.security.ssl.Handshaker.process_record(Handshaker.java:961)

at sun.security.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:1072)

at sun.security.ssl.SSLSocketImpl.performInitialHandshake(SSLSocketImpl.java:1385)

at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1413)

... 11 more

Caused by: java.security.InvalidAlgorithmParameterException: the trustAnchors parameter must be non-empty

at java.security.cert.PKIXParameters.setTrustAnchors(PKIXParameters.java:200)

at java.security.cert.PKIXParameters.<init>(PKIXParameters.java:120)

at java.security.cert.PKIXBuilderParameters.<init>(PKIXBuilderParameters.java:104)

at sun.security.validator.PKIXValidator.<init>(PKIXValidator.java:89)

... 23 more

It looks like it it trying to DL a zip file?

Downloading https://repository.apache.org/content/repositories/releases/org/apache/maven/apache-maven/3.5.2/apache-maven-3.5.2-bin.zip

But this is a Redhat box...

To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/ae0ee746-b039-4848-8e45-5dd867624c18%40apereo.org.

--
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
---
You received this message because you are subscribed to the Google Groups "CAS Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email to cas-user+u...@apereo.org.

To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/e41f5232-25bb-485d-9f10-55ec7d6aedef%40apereo.org.

[Riley Wills]

Be careful. Those type of meetings are contagious.

On Wednesday, May 2, 2018 at 1:29:58 PM UTC-5, Jennifer LaVoie wrote:

Thanks.  Will try that after this dumb meeting I am stuck in

--

- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
---
You received this message because you are subscribed to the Google Groups "CAS Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email to cas-user+u...@apereo.org.

To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/71ee1b14-5540-4305-a3b7-26b5994e5982%40apereo.org.

[Riley Wills]

You may examine your environment variables for a MAVEN_OPTS variable (see https://stackoverflow.com/a/40650800/345687).

To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/197bb204-59a1-4fa7-b8f2-c87c5e0b7fb2%40apereo.org.

[David Curry]

Downloading the zip file (even on RedHat is normal).

But you're getting an error from Java. The error has something to do with it being unable to find the keystore that it wants -- probably the certificate authority root certificates it uses to validate SSL certificates (like the one from the Maven repo).

Are you running Java 8?

Do you maybe have more than one version of Java installed and Java 8 is not the default (see the "alternatives" command)?

Do you maybe have JAVA_HOME (or something else) in your environment?

Have you run "yum update all" recently (if not, maybe you should)?

--Dave

--

DAVID A. CURRY, CISSP
DIRECTOR OF INFORMATION SECURITY
INFORMATION TECHNOLOGY

71 FIFTH AVE., 9TH FL., NEW YORK, NY 10003
+1 212 229-5300 x4728 • david...@newschool.edu

To unsubscribe from this group and stop receiving emails from it, send an email to cas-user+unsubscribe@apereo.org.

To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/197bb204-59a1-4fa7-b8f2-c87c5e0b7fb2%40apereo.org.

--
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
---
You received this message because you are subscribed to the Google Groups "CAS Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email to cas-user+u...@apereo.org.

To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/CA%2Bd9XAMd%3DUFfcXnqLPiQ6LUsA-iTfgFF%3DGNPxfmSBBWR8z77uA%40mail.gmail.com.

[Jennifer LaVoie]

They are dreadful

To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/CA%2Bwv1vG5VDb8EM4Upe4rw1SuQ1WVbDL-2fP6OOs%3Dhc%3DC%3DXZ%3Dxg%40mail.gmail.com.

[Jennifer LaVoie]

Thanks David.  I do have cacerts with a self signed cert for Apache tomcat.  I do have latest Java ...this is a fresh install of redhat 7 and fully patched.

I am going to try a couple of things 

Jen

To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/197bb204-59a1-4fa7-b8f2-c87c5e0b7fb2%40apereo.org.

--
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
---
You received this message because you are subscribed to the Google Groups "CAS Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email to cas-user+u...@apereo.org.
To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/CA%2Bd9XAMd%3DUFfcXnqLPiQ6LUsA-iTfgFF%3DGNPxfmSBBWR8z77uA%40mail.gmail.com.

--
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
---
You received this message because you are subscribed to the Google Groups "CAS Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email to cas-user+u...@apereo.org.

To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/CA%2Bwv1vFOPURMFo3oUw1H5yeD5DJ4EF0OfN-HYYsTmwf3NL_gTQ%40mail.gmail.com.