1

I'm trying to install Saros (http://www.saros-project.org/) in Eclipse Neon but have repeatedly received the following error details: 

An error occurred while collecting items to be installed
session context was:(profile=epp.package.jee, phase=org.eclipse.equinox.internal.p2.engine.phases.Collect, operand=, action=).
Unable to read repository at http://downloads.sourceforge.net/dpp/de.fu_berlin.inf.dpp_14.10.31.jar?use_mirror=dfn.
sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
Unable to read repository at http://downloads.sourceforge.net/dpp/de.fu_berlin.inf.dpp.core_0.1.0.jar?use_mirror=dfn.
sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
Unable to read repository at http://downloads.sourceforge.net/dpp/de.fu_berlin.inf.dpp.whiteboard_14.10.31.jar?use_mirror=dfn.
sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

I've tried all of the solutions I can find, all of which appear to be collectively posted on this page: What to do about Eclipse's "No repository found containing: ..." error messages? but nothing appears to change.

My computer is running MacOS Sierra and my version of Eclipse is Eclipse Java EE IDE for Web Developers Version: Neon.2 Release (4.6.2)

Any other recommendations for what I could try next?

Thank you!

Community
  • 1
  • 1
hmowilliams
  • 21
  • 1
  • 6
  • delete .p2 in your home dir. It may work – bichito Feb 12 '17 at 18:08
  • @efekctive Thanks for the suggestion! Unfortunately, that didn't work either. Same error message still appears. :( – hmowilliams Feb 12 '17 at 18:30
  • The error message indicates an SSL problem (can't find a cert, or the cert isn't trusted), but the URL referenced is HTTP. Where is that URL obtained from? If it's something that you have typed in, try changing to **HTTPS** – Mads Hansen Feb 12 '17 at 18:37
  • Sorry. Given the info pointed out by @MadsHansen, it seems that if you are using the eclipse internal update, you have no control over the mismatch. Dropping files in the eclipse dirs may work but who knows – bichito Feb 12 '17 at 19:12
  • @MadsHansen, I'm not sure where that URL came from. It doesn't look like anything I've typed in. – hmowilliams Feb 12 '17 at 23:01

1 Answers1

3

In December 2016, Sourceforge introduced automatic forwarding to HTTPS servers (even if the URLs are entered with HTTP) which used "Let's Encrypt" certificates. Older Java versions (below Java 8u101 and Java 7u111) did not recognize "Let's Encrypt"'s root certificate and this results in said error message (no "valid certification path").

But: As of now, Sourceforge seems to have switched to "GeoTrust" certificates, which should pose no problem, even for older Java versions.

So the first thing to check: Try to install Saros again. Do you still get certificate errors?

If the problem persists from some reason, you have two options:

  1. Easy way: Install Saros not from the update site, but as a dropin instead of using the update site. There is a How-To on the project website: Instructions for installing Saros as a dropin

  2. Uncertain way: You could try to find out which certificate authority (CA) issued the certificates used by the HTTPS server you get forwarded to. (E.g. type one of the HTTP URLs from the error message into your web browser, wait until you get redirected to an HTTPS URL, and check the certificate information -- usually a green lock icon next to your address bar.) If you have the CA's name, there might be website explaining how to add its root certificate to your Java setup (similar to this one, which gives some hints for the "Let's Encrypt" case).

Update (2017-03-31):

I heard from others that the problem with Sourceforge still persists for them. As an alternative to installing Saros as a dropin (option 1 above), you can also use our secondary Eclipse update site which is hosted on Heroku: https://get-saros.herokuapp.com/eclipse

Franz Zieris
  • 484
  • 3
  • 11
  • Oh, whoops, I misunderstood the question. I thought you were saying "This is the problem, see [this link] for a solution which happens to be our tool", but the question is about a misconfigured (if I understand correctly?) tool, which is yours. I'll be deleting my comment, since it's irrelevant; feel free to delete yours, too. – Nic Mar 04 '17 at 17:35
  • @FranzZieris the problem with your answer is the presence of these links to external sources that triggered the SmokeDetector bot on the [SOCVR](http://chat.stackoverflow.com/rooms/41570/so-close-vote-reviewers) chat. I think your answer contains enough information to help anyone skilled in the art to find and test the possible solution. Anyway a bit of explaining the various options could help to make this an excellent answer. – Steve Mar 04 '17 at 17:37
  • @Steve Thanks for the tip! – Franz Zieris Mar 04 '17 at 18:18