Uploaded image for project: 'Dev - Nexus Repo'
  1. Dev - Nexus Repo
  2. NEXUS-7999

Nexus running OpenJDK 1.8.0_25 fails to connect to central via https

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: Closed
    • Priority: Minor
    • Resolution: Won't Fix
    • Affects Version/s: 2.11.1
    • Fix Version/s: None
    • Component/s: Maven, SSL
    • Labels:
      None

      Description

      When Nexus is running with OpenJDK 1.8.0_25 a proxy of https://repo1.maven.org/maven2/ fails to work. The exception thrown is:

      2015-01-23 09:38:24,113-0600 WARN [proxy-3-thread-1] anonymous org.sonatype.nexus.proxy.maven.maven2.M2Repository - Remote peer of proxy repository "Central" [id=central] threw a org.sonatype.nexus.proxy.RemoteStorageException exception. Connection/transport problems occured while connecting to remote peer of the repository. Auto-blocking this repository to prevent further connection-leaks and known-to-fail outbound connections until administrator fixes the problems, or Nexus detects remote repository as healthy. - Cause(s): Transport error while executing GET method [repositoryId="central", requestPath="/", remoteUrl="https://repo1.maven.org/maven2/"] > java.lang.RuntimeException: java.security.NoSuchAlgorithmException: EC AlgorithmParameters not available > java.security.NoSuchAlgorithmException: EC AlgorithmParameters not available > EC AlgorithmParameters not available

      This is because OpenJDK does not ship with Elliptic Curve Cryptography.

      Workarounds:

      1) Use Oracle Java
      2) Use the http URL for central: http://repo1.maven.org/maven2/
      3) Install ECC into OpenJDK

      The last option requires copying both sunec.jar and either libsunec.so or sunec.dll from an Oracle Java into the appropriate spot in OpenJDK:

      http://armoredbarista.blogspot.co.uk/2013/10/how-to-use-ecc-with-openjdk.html

      Obviously this last workaround is untested, and I can't recommend it.

        Attachments

          Issue Links

            Activity

              People

              Assignee:
              Unassigned Unassigned
              Reporter:
              rseddon Rich Seddon
              Last Updated By:
              Peter Lynch Peter Lynch
              Votes:
              1 Vote for this issue
              Watchers:
              5 Start watching this issue

                Dates

                Created:
                Updated:
                Resolved:
                Date of First Response:

                  tigCommentSecurity.panel-title