Build error due to java.security.cert.CertPathValidatorException

[Stuart Swerdloff]

I need to be able to edit within sequences (nested with some depth). 

Same need more or less as in "Modify RT Plan Tags".

I downloaded dicombrowser_linux_1_7_5-SNAPSHOT.deb and installed from that (Ubuntu 20.04)

Sequences don't show at all.

I'm trying to build the Sequencesupport branch (my area is RT).

That failed in several places.

So I dropped back to the "master" branch:

That failed in a much more specific place and I think it means the certificate is out of date:

NotAfter: Sat Sep 12 00:00:00 NZST 2020 -> [Help 1]

Full error below.

[ERROR] Failed to execute goal on project DicomBrowser: Could not resolve dependencies for project org.nrg:DicomBrowser:jar:1.7.0b5: Failed to collect dependencies at org.nrg:DicomEdit:jar:3.0.2: Failed to read artifact descriptor for org.nrg:DicomEdit:jar:3.0.2: Could not transfer artifact org.nrg:DicomEdit:pom:3.0.2 from/to org.nrg.maven.artifacts.release (https://nrgxnat.artifactoryonline.com/nrgxnat/libs-release): Transfer failed for https://nrgxnat.artifactoryonline.com/nrgxnat/libs-release/org/nrg/DicomEdit/3.0.2/DicomEdit-3.0.2.pom: PKIX path validation failed: java.security.cert.CertPathValidatorException: validity check failed: NotAfter: Sat Sep 12 00:00:00 NZST 2020 -> [Help 1]

 I'm not familiar with maven, and my Java is rusty. Even if Sequencesupport isn't fully functional, if I can get the Sequencesupport branch to build, I might be able to help.

My DICOM skills are not rusty.  And a build tool and package manager is something I can pick up...

So... is there in fact a Certificate problem?  Can that be addressed?

Thank You,

Stuart

[Matthew Wolkenmuth]

--
You received this message because you are subscribed to the Google Groups "DicomBrowser users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to dicombrowser-us...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/dicombrowser-users/23912451-9c09-43fd-876a-c92f5a59d74en%40googlegroups.com.

[Herrick, Rick]

Unfortunately the inability to display or edit sequences is a known issue in DicomBrowser. I don’t know what the state of the Sequencesupport branch is, but the security error is easily fixed: change nrgxnat.artifactoryonline.com to nrgxnat.jfrog.io in the repository URLs (I’ve actually made this change and pushed it to the git repo, so if you just pull you should get the updated build). With that change made, the build is still failing due to unresolved references in the version of DicomEdit 4 being referenced. I’m not sure what those references are. The work on the Sequencesupport branch was done by an intern at Agfa so I’m not sure what the status of that is.

 

So the certificate problem is addressed and I can’t tell you much about the remaining errors without spending time poking at the code, and unfortunately I don’t have enough time to cover my current tasks!

 

-- 

Rick Herrick

Sr. Programmer/Analyst

Neuroinformatics Research Group

Washington University School of Medicine

Phone: +1 (314) 273-1645

 

From: dicombrow...@googlegroups.com <dicombrow...@googlegroups.com>
Date: Friday, December 4, 2020 at 9:39 PM
To: dicombrow...@googlegroups.com <dicombrow...@googlegroups.com>
Subject: Re: Build error due to java.security.cert.CertPathValidatorException

* External Email - Caution *

To view this discussion on the web visit https://groups.google.com/d/msgid/dicombrowser-users/CAF8uv95xR4Kka02VcNVP81cKMgn95OOX5a-qaKsS4PMfC2aCRQ%40mail.gmail.com.

 

---

The materials in this message are private and may contain Protected Healthcare Information or other information of a sensitive nature. If you are not the intended recipient, be advised that any unauthorized use, disclosure, copying or the taking of any action in reliance on the contents of this information is strictly prohibited. If you have received this email in error, please immediately notify the sender via telephone or return mail.

[Stuart Swerdloff]

Thank you.

I manually updated the url for those jars, and the exception went away.

I ran in to further build errors (more below)

The TLDR; 

is there a stub library (jar) for ui.jar ?

Or a pointer to said "repository copy"

The details:

I didn't specify previously exactly where I was pulling from:

git remote -v

origin <me at bitbucket>/xnatdcm/dicombrowser.git (fetch)

origin <me at bitbucket>/xnatdcm/dicombrowser.git (push)

I didn't create a fork, so I think I should be getting directly from the true upstream/origin

 

I did try a git fetch and a git pull, but that didn't update my pom.xml file.

Not sure why.

nor did I specify that I am building on Ubuntu-20.04 (in a virtual machine, using VMWare Fusion on a MacBook Pro running MacOS 10.15.7 (Catalina, latest)).

The build errors I received were about:

AppleJavaExtensions-1.4.jar (found online, downloaded, used mvn install:install-file)

Same for dcm4che-net-2.0.25.jar , dcm4che-core-2.0.25.jar ( I tried providing the <repository/> info but mvn tried to download every version of those and it was just churning)

Similar for DicomDB-browser-1.7.0.jar, but it had some additional timestamp information in the name online.

I eliminated the additional stuff in the name, used mvn install:install-file and that worked out.

DicomUtils is *not* at 1.7.0, even though that was what was listed in the pom.xml

Searching for a jar found DicomUtils-1.4.0 (with some timestamp information)

See: https://nrgxnat.jfrog.io/nrgxnat/libs-snapshot/org/nrg/DicomUtils/

all I found underneath that was: 1.4.0-SNAPSHOT/

When I went to the source:

https://bitbucket.org/xnatdcm/dicom-utils/commits/f37300ab24a421c86cdb402e0ffec0ba70c45373

<artifactId>DicomUtils</artifactId>

- <version>1.4.0-SNAPSHOT</version>

+ <version>1.4.0</version>

So I downloaded the jar that was at 1.4.0 plus latest timestamp, edited the name down to 1.4.0, used mv install:install-file, and edited

the pom.xml at the top of dicombrowser to specify 1.4.0 for dicomutils.

I think the pom is not quite in sync with the jfrog archives (naming and versions).

I have one remaining build failure, com.apple.ui.jar ...

[ERROR] Failed to execute goal on project DicomBrowser: Could not resolve dependencies for project org.nrg:DicomBrowser:jar:1.7.0b5: Could not find artifact com.apple:ui:jar:1 at specified path /usr/lib/jvm/java-11-openjdk-amd64/lib/rt.jar -> [Help 1]

I have noted that the pom.xml states:

        <!-- Apple library for Mac-specific GUI -->

        <!-- Use a repository copy to compile against on non-Macs, -->

        <!-- but don't include it in the assembly for runtime -->

        <!-- what used to be in ui.jar has been merged into rt.jar -->

        <dependency>

            <groupId>com.apple</groupId>

            <artifactId>ui</artifactId>

            <version>1</version>

            <scope>system</scope>

            <systemPath>${java.home}/lib/rt.jar</systemPath>

        </dependency>

I tried (in a terminal on my host Mac):

cd /

sudo find . -depth -name ui.jar -print

other than a handful of No such file or directory for what are probably links with invalid destination (e.g. System/Volumes/Data/.Spotlight-V100: No such file or directory)

no joy.

Given that I'm not *trying* to build on the Mac, is there a stub library (jar) for ui.jar ?

Or a pointer to said "repository copy"

I have OpenJDK 13.0.2 on my Mac (I tried installing the Oracle flavour, but it's not obvious where it installed itself and the JCP isn't showing up).

I have OpenJDK 11.0.9 on Ubuntu

Thank You,

Stuart