-
Notifications
You must be signed in to change notification settings - Fork 1.6k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
[gu] does not seem to use the default truststore #2585
Comments
Looking at another issue, I noticed the
That worked! Now I've got more questions:
|
|
Thanks, how about the other two questions? Is there a way to make the Gradle Graal plugin work behind firewall, with custom CA? |
No.
See #1999 |
Thank you! |
For anybody having the same problem, here is a workaround by intercepting the tasks.named('extractGraalTooling') { t ->
doFirst { // touch file, so the task will not try to install it
def out = (t.outputDirectory as DirectoryProperty ).get().asFile.canonicalPath
file("$out/bin/native-image").with { File ni ->
ni.parentFile.mkdirs()
ni.text = ""
}
}
doLast { // patch the cacerts and install native-image ourselves passing '--jvm'
def defaultCacerts = System.getProperty("java.home") + "/lib/security/cacerts"
def cacerts = System.getProperty("javax.net.ssl.trustStore", defaultCacerts)
def out = (t.outputDirectory as DirectoryProperty ).get().asFile.canonicalPath
file("$out//jre/lib/security/cacerts").bytes=file(cacerts).bytes
project.exec {
executable "$out/bin/gu"
args "--jvm", "install", "--no-progress", "--force", "--replace", "native-image"
}
}
} |
@ddimtirov I am facing a similar issue... $gu install native-image I am trying install it mac through commandline. Where can I find the extractGraalTooling task file to make this change ? |
Closed by accident (fat fingers, small buttons) |
I thought I'll demo Graalvm to my colleagues. I picked the best combination Micronaut with Graalvm to showcase the power. Work arounds are just hacks and doesn't work for all. My request to the authors, most tech companies have their firewalls and proxies before every request over internet. So please fix these issues. PS: there's no issue in my local machine but it's not behind proxy. Thanks! |
Is this still true for By doing the following: Where And then doing: But still get: Is there still no way to pass these as environment variables? |
Describe the issue
I need
gu
to download artifacts from internal caching proxy, that has a certificate issued by the company CA and not traceable to any public CA. Even when I specify the custom trust store, GY complains with:Steps to reproduce the issue
Please include both build steps as well as run steps
graalvm-ce-java8-20.1.0-amd64.tar.gz
from Nexusgu install native-image
it fails with cert errorRunning this reproduces the error:
It also appears that
gu
does not pick theJAVA_TOOL_OPTIONS
.I have tried to copy the
cacerts
in$GRADLE_USER_HOME/caches/com.palantir.graal/20.1.0/8/graalvm-ce-java8-20.1.0/jre/lib/security/
, but nothing changes.Describe GraalVM and your environment:
The text was updated successfully, but these errors were encountered: