Forum: System Workbench for STM32

Error message while updating Workbench

Posted by fxrb on 2019-09-20 19:29

Hello,

While trying to update the System Workbench in my Eclipse 4.9.0 I experience the following error message:

Unable to read repository at http://ac6-tools.com/Eclipse-updates/org.openstm32.system-workbench.update-site-v2/compositeContent.xml.Question
sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

The location the update should be downloaded from is http://ac6-tools.com/Eclipse-updates/org.openstm32.system-workbench.update-site-v2Question (which is the URL recommended by the documentation).

I suspect the error message being the result of the certificate used for the URL above. This certificate is new (valid since September 18. 2019, two days ago). The CN of this certificate is www.ac6.frQuestion and not www.ac6-tools.com.Question The domain www.ac6-tools.comQuestion which is used for the software update is “only” part of the certificates alternative names. Might this be the problem?

Fact is, I never experienced any problem installing or updating the software before.

regards, Felix

Reads: 5428
Link

Posted by dirker on 2019-09-23 16:55

Same problem here.

Solved this by mirroring the update repository locally using wget. You have to disable error checking for wget, too, otherwise it would complain about the certificate:

 
wget --no-check-certificate --recursive --no-clobber --page-requisites --adjust-extension --convert-links --restrict-file-names=windows --domains www.ac6-tools.com --no-parent "https://www.ac6-tools.com/Eclipse-updates/org.openstm32.system-workbench.update-site-v2/"


The used the local update repository as an update site: 

xxxxxxxxxx
 
file:c:\temp\org.openstm32.system-workbench.update-site-v2\



Hopefully this helps someone until the issue is resolved.

Link

Posted by dautrevaux on 2019-09-24 11:08 France

Hi everybody,

You may have noticed that OpenSTM32.org is now accessed in HTTPS; this had an adverse effect on updates as it seems the Java virtual machine was not know the Sectigo root certificate (Comodo, who provides our certificate has changed name less that a year ago and it seema that in some cases root certificates were not updated...)

To correct this, we temporarily switched back the Eclipse update sites (and only these) to be accessible in plain HTTP mode, so updates shoudl work again seamlessly.

Please accept our apologies for the inconvenience,

Bernard (Ac6)

Link