在https上使用安全的maven存储库

Question

我阅读了文档,但我无法弄清楚是什么问题.

我配置我的POM来声明存储库:

<repositories>
    <repository>
        <id>snmp4j</id>
        <url>https://oosnmp.net/dist</url>
    </repository>
</repositories>

    <dependency>
        <groupId>org.snmp4j</groupId>
        <artifactId>snmp4j</artifactId>
        <version>2.2.2</version>
    </dependency>

然后我用Firefox导出证书.单击Lock - > More Information - > View Certificate - > Details - > Export ... - > snmp4j.crt

然后我将公钥导入我的信任库

keytool -importcert -file snmp4j.crt -keystore trust.jks -alias "snmp4j"

我配置了maven选项

-Xmx512m -XX:MaxPermSize=128m -Djavax.net.ssl.trustStore=k:\home\ssl\trust.jks -Djavax.net.debug=ssl:handshake:data

但是当我运行该mvn compile命令时,不会下载依赖项.至少我应该看到SSL调试跟踪.

Answer 1

您的存储库URL错误.尝试https://oosnmp.net/dist/release

<project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd">
<modelVersion>4.0.0</modelVersion>
<groupId>org.someorg</groupId>
<artifactId>ai</artifactId>
<version>9.9.9-SNAPSHOT</version>
<packaging>jar</packaging>
<repositories>
    <repository>
        <id>snmp4j</id>
        <url>https://oosnmp.net/dist/release</url>
    </repository>
</repositories> 
<dependencies>
    <dependency>
        <groupId>org.snmp4j</groupId>
        <artifactId>snmp4j</artifactId>
        <version>2.2.2</version>
    </dependency>
</dependencies>
</project>