How to resolve repository certificate error in Gradle build

Question

I installed latest version of android studio. I had jdk 8 which was already installed. When I opened android studio, I got below error.

Unable to resolve dependency for ':app@debugUnitTest/compileClasspath': Could not resolve com.android.support:appcompat-v7:26.1.0.

Could not resolve com.android.support:appcompat-v7:26.1.0.
Required by:
    project :app
 > Could not resolve com.android.support:appcompat-v7:26.1.0.
    > Could not get resource 'https://dl.google.com/dl/android/maven2/com/android/support/appcompat-v7/26.1.0/appcompat-v7-26.1.0.pom'.
          > Could not GET 'https://dl.google.com/dl/android/maven2/com/android/support/appcompat-v7/26.1.0/appcompat-v7-26.1.0.pom'.
                   > sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
                               > PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
                                              > unable to find valid certification path to requested target

So I removed JDK 8 and installed JDK 9, added environment variables (in windows 10). Then I restarted my system and started android studio, I still got above error. I even added

repositories {
    maven { url "https://maven.google.com" }
}

to gradle script. But I'm still getting same error. How do I fix this error?

Do you have a valid internet connection? In your android studio preferences -> Build, Execution -> Gradle, is the "Offline Work" turned off? — Henry, Nov 16 '17 at 07:34
Are you behind a Firewall? Are you able to download this file `https://dl.google.com/dl/android/maven2/com/android/support/appcompat-v7/26.1.0/appcompat-v7-26.1.0.pom` on the browser? — Henry, Nov 17 '17 at 01:24
I just opened the link in my browser, after that it worked without errors — Jek, Sep 09 '21 at 18:57

towa · Answer 1 · 2017-11-29T10:40:22.570

21

Below steps may help:

1. Add certificate to keystore-

Import some certifications into Android Studio JDK cacerts from Android Studio’s cacerts.

Android Studio’s cacerts may be located in

{your-home-directory}/.AndroidStudio3.0/system/tasks/cacerts

I used the following import command.

$ keytool -importkeystore -v -srckeystore {src cacerts} -destkeystore {dest cacerts}

2. Add modified cacert path to gradle.properties-

systemProp.javax.net.ssl.trustStore={your-android-studio-directory}\\jre\\jre\\lib\\security\\cacerts
systemProp.javax.net.ssl.trustStorePassword=changeit

Ref : https://www.cresco.co.jp/blog/entry/2014//

edited Nov 29 '17 at 10:40

answered Nov 29 '17 at 05:18

towa

211
1
4

1

you have given such a nice explanation and right answer, sad to see, its still not accepted. thanks – Gokul Kulkarni Sep 16 '19 at 07:20
its really a nice explanation. it worked for me. I just imported certificate in keystore and tis was not working but when i configured gradle.proprties with keystore its start working. Thanks towa – Nilay Tiwari Dec 11 '20 at 07:04
It really worked thanks .. – Pracheer Pancholi Jan 12 '22 at 14:49

Dileep Patel · Answer 2 · 2017-11-16T11:29:12.243

Modify in project level gradle according below

// Top-level build file where you can add configuration options common to all sub-projects/modules.

buildscript {

repositories {
    google()
    jcenter()
}

dependencies {
    classpath 'com.android.tools.build:gradle:3.0.0'


    // NOTE: Do not place your application dependencies here; they belong
    // in the individual module build.gradle files
    }
 }

allprojects {
     repositories {
      google()
      jcenter()
   }
 }

 task clean(type: Delete) {
  delete rootProject.buildDir
}

Then, remove appcompat-v7:26.1.0 dependency from app level gradle then next Go to Android Studio File > Project Structure > app >Dependencies > tap on + > Library Dependencies > add dependenceis as per your requirements then OK.

Also you can try to tap on synchronize project with gradle file

For more please go for below link

https://developer.android.com/studio/build/gradle-plugin-3-0-0.html

Edited

I think your problem is different so please go with below links,

"PKIX path building failed" and "unable to find valid certification path to requested target"

Resolving javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed Error?

https://github.com/appscode-ci/cibox/issues/16

https://www.mkyong.com/webservices/jax-ws/suncertpathbuilderexception-unable-to-find-valid-certification-path-to-requested-target/

Sucheth Shivakumar · Answer 3 · 2019-06-28T06:07:40.667

Your Java is not trusting the link you are using to download library. Before proceeding on to step 2, Try step 1.

Check if your internet is behind any firewall, Your company internet could be blocking the website you are trying to access. connect your PC to your mobile internet and trying building.
Add certificate manually to your jdk cert strore.
- Visit the website for example https://example.com
- download the certificate from browser.
- Find your jdk installation directory.
- add cert manually to cacerts using below command,
- sudo keytool -import -alias shibbolethnet -keystore /Library/Java/JavaVirtualMachines/jdk1.8.0_65.jdk/Contents/Home/jre/lib/security/cacerts -file <downloadedcert.cer>

score 0 · Answer 4 · answered Jan 04 '20 at 17:58

0

You can try changing the path for the Gradle wrapper going to Eclipse > Preferences > Gradle. Choose Local Installation directory instead of Gradle Wrapper.

answered Jan 04 '20 at 17:58

Naveen

830
9
19

score 0 · Answer 5 · answered Dec 29 '20 at 17:42

I installed key for plugins.gradle.org and was able to download the following, https://plugins.gradle.org/m2/org/springframework/boot/spring-boot-gradle-plugin/2.4.1/

However, failed to download https://plugins.gradle.org/m2/org/springframework/boot/spring-boot-gradle-plugin/2.4.1/spring-boot-gradle-plugin-2.4.1.module, which my browser is able to download.

Spent a day and figured out, the url is being redirected, spring-boot-gradle-plugin-2.4.1.module ⟶ https://jcenter.bintray.com/org/springframework/boot/spring-boot-gradle-plugin/2.4.1/spring-boot-gradle-plugin-2.4.1.module

Added jcenter.bintray.com to my keystore and it worked. Twisted world.

score 0 · Answer 6 · answered Jun 23 '22 at 08:13

TL;DR

There are known JDK's with buggy HTTP client that fails during TLS v1.3 (enforced by many servers) with this misleading exception.

Update your JDK to newest possible version.

Long story

Version of JDK might be the cause. As the time progresses and the Internet evolves servers starting to narrow down the set of transport protocols. Some may only offer TLS v1.2 and TLS v1.3. HTTP Clients (including the one in Java) might be buggy.

My experience was that truststore and certificates were OK but as Java HTTP client from OpenJDK 11.0.0 (downloaded from official OpenJDK website) had a bug in TLS v1.3 it always ended up in exception PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target. Which is just exception thrown. Not the real problem.

Solution was to tak the freshest JDK from major version I had to use. It is fixed in 11.0.3 and by the time of writing 11.0.15 was available.

emily · Answer 7 · 2023-07-10T16:30:35.403

0

I was getting this error for a freshly cloned repo with a dependency was used successfully in another repo, so I knew it wasn't a key cert problem. Eventually I was able to resolve it by changing the gradle settings in intelliJ by going to Preferences ->Gradle -> Gradle JVM and setting it to the right JDK I wanted to use (I wanted java 1.8 but it was set to azul 15)

edited Jul 10 '23 at 16:30

answered Jul 05 '23 at 18:56

emily

1
1

Changing the gradle setting in what way? – David Gomes Jul 08 '23 at 13:44
updated my answer for clarity, thanks! – emily Jul 10 '23 at 16:31

score -1 · Answer 8 · answered Nov 16 '17 at 07:36

-1

try replace with

repositories {
    maven { url 'http://repo1.maven.org/maven2' }
}

answered Nov 16 '17 at 07:36

AndyJJ

73
1
8

Added as you suggested, still getting same error. Is that error related to `Trust Store`? – Ajay Kulkarni Nov 16 '17 at 07:41
switching back to http instead of https worked for me behind a corporate firewall although I don't think it a good long term solution. – JesseBoyd Sep 24 '18 at 18:00

How to resolve repository certificate error in Gradle build

8 Answers8

TL;DR

Long story

Linked