bazelbuild/bazel

Bazel Build on JAVA still ignores system cacert

Open

#16,223 创建于 2022年9月6日

在 GitHub 查看
 (3 评论) (0 反应) (0 负责人)Java (4,465 fork)batch import
P3help wantedteam-OSStype: bug

仓库指标

Star
 (25,384 star)
PR 合并指标
 (平均合并 22天 20小时) (30 天内合并 77 个 PR)

描述

Description of the bug:

I tried installing bazel build from source and it fails with: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to the requested target.

We are using a self-signed certficate from our firewall and it is already installed on Ubuntu trusted store as well as it can be seen in java cacerts. Screen Shot 2022-08-30 at 3 58 12 PM Screen Shot 2022-08-30 at 2 42 36 PM

However, after applying this workaround: https://github.com/bazelbuild/bazel/issues/5741 the issue is resolved. Is there already a proper solution to this one or is self-signed certificate not advisable?

What's the simplest, easiest way to reproduce this bug? Please provide a minimal example if possible.

  1. A machine with ubuntu
  2. Have a self-signed certificate from firewall
  3. Build bazel from source using bazel version 4.2.1 or 5.1.1

Which operating system are you running Bazel on?

Ubuntu 20.04

What is the output of bazel info release?

No response

If bazel info release returns development version or (@non-git), tell us how you built Bazel.

I used this one as guide to build bazel: https://github.com/grpc/grpc/blob/master/BUILDING.md

What's the output of git remote get-url origin; git rev-parse master; git rev-parse HEAD ?

No response

Have you found anything relevant by searching the web?

No response

Any other information, logs, or outputs that you want to share?

No response

贡献者指南