Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bazel Build on JAVA still ignores system cacert #16223

Open
allangdtl opened this issue Sep 6, 2022 · 0 comments
Open

Bazel Build on JAVA still ignores system cacert #16223

allangdtl opened this issue Sep 6, 2022 · 0 comments
Labels
help wanted Someone outside the Bazel team could own this P3 We're not considering working on this, but happy to review a PR. (No assignee) team-OSS Issues for the Bazel OSS team: installation, release processBazel packaging, website type: bug

Comments

@allangdtl
Copy link

Description of the bug:

I tried installing bazel build from source and it fails with:
PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to the requested target.

We are using a self-signed certficate from our firewall and it is already installed on Ubuntu trusted store as well as it can be seen in java cacerts.
Screen Shot 2022-08-30 at 3 58 12 PM
Screen Shot 2022-08-30 at 2 42 36 PM

However, after applying this workaround: #5741 the issue is resolved. Is there already a proper solution to this one or is self-signed certificate not advisable?

What's the simplest, easiest way to reproduce this bug? Please provide a minimal example if possible.

  1. A machine with ubuntu
  2. Have a self-signed certificate from firewall
  3. Build bazel from source using bazel version 4.2.1 or 5.1.1

Which operating system are you running Bazel on?

Ubuntu 20.04

What is the output of bazel info release?

No response

If bazel info release returns development version or (@non-git), tell us how you built Bazel.

I used this one as guide to build bazel:
https://github.com/grpc/grpc/blob/master/BUILDING.md

What's the output of git remote get-url origin; git rev-parse master; git rev-parse HEAD ?

No response

Have you found anything relevant by searching the web?

No response

Any other information, logs, or outputs that you want to share?

No response

@sgowroji sgowroji added type: support / not a bug (process) untriaged team-OSS Issues for the Bazel OSS team: installation, release processBazel packaging, website labels Sep 6, 2022
@meteorcloudy meteorcloudy added P3 We're not considering working on this, but happy to review a PR. (No assignee) help wanted Someone outside the Bazel team could own this type: bug and removed untriaged type: support / not a bug (process) labels Sep 20, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
help wanted Someone outside the Bazel team could own this P3 We're not considering working on this, but happy to review a PR. (No assignee) team-OSS Issues for the Bazel OSS team: installation, release processBazel packaging, website type: bug
Projects
None yet
Development

No branches or pull requests

3 participants