Fork me on GitHub
#cursive
<
2018-07-25
>
manutter5119:07:05

A few weeks ago I started getting errors with Cursive’s built-in lein deps functionality and also with the repo indexing for http://repo1.maven.org and clojars. I fixed it at the command line by manually adding the Kaspersky CA cert to the cacerts file for Java, but IntelliJ is still unhappy. Just curious if anyone else is seeing that? The error is

sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

manutter5119:07:20

I can get to http://maven.org and http://clojars.org just fine via the browser, so I don’t think it’s a proxy/firewall issue

cfleming21:07:41

@manutter51 Have you changed the JDK you’re using to run IntelliJ? I used to see that error a lot when running the IDE with JDK6 was still a thing.

manutter5121:07:45

Yeah, I upgraded to Java 1.8.0_181 and added it in as the current JDK in IntelliJ

manutter5121:07:16

What was weird was this just suddenly started happening out of the blue, no changes to the installed Java, to the IDE, or to any plugin.

manutter5121:07:37

or wait, I take that back, I think I did get a Java security update just before it happened.

manutter5121:07:49

What’s suspicious to me is that the cert it’s unhappy about is a Kaspersky cert, and I know there’s some politics happening around that.

manutter5121:07:23

but then I’d think a lot of people would be seeing similar problems

cfleming21:07:25

But did you change the JDK that’s used to actually run IntelliJ? If you go to About IntelliJ IDEA, there’s an option there to copy your setup - can you paste that here?

manutter5121:07:42

Ah, hmm, let me check…

manutter5121:07:58

Hmm, it won’t let me copy, but it’s saying the JRE is 1.8.0_152

manutter5121:07:39

IntelliJ IDEA 2018.2 (Ultimate Edition)
Build #IU-182.3684.101, built on July 24, 2018
Licensed to Mark Nutter
Subscription is active until September 25, 2018
JRE: 1.8.0_152-release-1248-b8 x86_64
JVM: OpenJDK 64-Bit Server VM by JetBrains s.r.o
macOS 10.13.6

manutter5121:07:49

I figured out how the copy thing worked 🙂

cfleming21:07:55

Ok, so you’re still using the Jetbrains one.

manutter5121:07:08

Is there a way to change that?

cfleming21:07:19

There is, but you don’t want to do that 🙂

cfleming21:07:52

Actually, you could try it to see if it fixes your problem.

manutter5121:07:55

That’s actually a fresh install of IntelliJ btw — I thought I’d give that a try just for grins

cfleming21:07:55

Hmm, there used to be an action to do that but I can’t find it now.

cfleming21:07:49

Ah, yeah, open the action finder and search for “Switch boot JDK”

cfleming21:07:07

Make sure it’s a JDK 8, but you could try a different one.

manutter5121:07:57

Ok — where’s the action finder?

manutter5121:07:13

oh there it is

manutter5121:07:09

looks like that’s working 😄 Thanks a ton

cfleming21:07:11

Huh, that’s very strange. I don’t understand why that’s happening, but I’m glad it’s working for you 🙂

manutter5121:07:21

It probably has something to do with the fact that I manually installed the missing cert in my system install of Java, with keytool

cfleming21:07:06

Oh right, I guess if you installed it in the JetBrains JRE that should make that work too.

manutter5121:07:10

but why the problem arose in the first place, just for me...? 🤷

cfleming21:07:23

That I don’t know.