How to setup SSL certs for Nexus IQ CLI Installed using linux binary - Sonatype Lifecycle & Repository Firewall - Sonatype Community

How to setup SSL certs for Nexus IQ CLI Installed using linux binary

You have selected 0 posts.

post by hkaur6 on Sep 23, 2024

Hardeep Kaur
hkaur6
Sonatype Customer

I am a beginner to sonatype products, currently exploring lifecycle scanning capabilities. While attempting to scan a code repo using nexus-iq-cli I run into SSL related errors. I am unable to find documentation for resolving this issue. Can someone help point me in the right direction?

Command line:

./nexus-iq-cli -s https://iq-server/ -a : -i

Error Trace:

PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

Error details below:

javax.net.ssl.SSLHandshakeException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

at java.base@17.0.12/sun.security.ssl.Alert.createSSLException(Alert.java:131)
...
Caused by: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

Sonatype CLI - Downloaded latest version from linux here. I don’t have java setup. Is it required?

post by mfrost on Sep 30, 2024

Maura Frost
mfrost
Sonatypers

Hi @hkaur6! As a licensed customer, I would recommend engaging with our support team if you haven’t already. Have your authorized support contact contact us at https://support.sonatype.com/


New & Unread Topics

Topic Replies Views Activity
IQ Firewall: Database update frequency and coverage of new libraries against recent threats 4 39 Jun 9
Batch Deletion of expired waivers 1 26 26d
how to use remote tcp socket instead of local unix socket for nexus iq container image scan for pulling neuvector image from private registry 1 65 Apr 21
Bom scan does not generate a report 3 122 Mar 11
Package Coverage Issue 2 124 Jun 22