search

docker-library / openjdk

Docker Official Image packaging for EA builds of OpenJDK from Oracle
http://openjdk.java.net
MIT License
1.14k stars 471 forks source link

Dockerfile of /openjdk/11/jdk/buster breaks on crt not trusted #461

Closed paul-bormans closed 3 years ago

paul-bormans commented 3 years ago

When building /openjdk/11/jdk/buster i got following errors:

+ wget --progress=dot:giga -O openjdk.tgz https://github.com/AdoptOpenJDK/openjdk11-upstream-binaries/releases/download/jdk-11.0.11%2B9/OpenJDK11U-jdk_x64_linux_11.0.11_9.tar.gz
--2021-06-22 07:06:37--  https://github.com/AdoptOpenJDK/openjdk11-upstream-binaries/releases/download/jdk-11.0.11%2B9/OpenJDK11U-jdk_x64_linux_11.0.11_9.tar.gz
Resolving github.com (github.com)... 140.82.121.4
Connecting to github.com (github.com)|140.82.121.4|:443... connected.
HTTP request sent, awaiting response... 302 Found
Location: https://github-releases.githubusercontent.com/177164466/48e99980-a2d3-11eb-80ab-0b56ba825b72?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAIWNJYAX4CSVEH53A%2F20210622%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20210622T070559Z&X-Amz-Expires=300&X-Amz-Signature=08c05d05fd9f5cc4013c2f6cd2bf39e6890b57e96beb5de1533e885ff6d19826&X-Amz-SignedHeaders=host&actor_id=0&key_id=0&repo_id=177164466&response-content-disposition=attachment%3B%20filename%3DOpenJDK11U-jdk_x64_linux_11.0.11_9.tar.gz&response-content-type=application%2Foctet-stream [following]
--2021-06-22 07:06:37--  https://github-releases.githubusercontent.com/177164466/48e99980-a2d3-11eb-80ab-0b56ba825b72?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAIWNJYAX4CSVEH53A%2F20210622%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20210622T070559Z&X-Amz-Expires=300&X-Amz-Signature=08c05d05fd9f5cc4013c2f6cd2bf39e6890b57e96beb5de1533e885ff6d19826&X-Amz-SignedHeaders=host&actor_id=0&key_id=0&repo_id=177164466&response-content-disposition=attachment%3B%20filename%3DOpenJDK11U-jdk_x64_linux_11.0.11_9.tar.gz&response-content-type=application%2Foctet-stream
Resolving github-releases.githubusercontent.com (github-releases.githubusercontent.com)... 146.112.48.193, 146.112.48.1, 146.112.48.17, ...
Connecting to github-releases.githubusercontent.com (github-releases.githubusercontent.com)|146.112.48.193|:443... connected.
ERROR: The certificate of ‘github-releases.githubusercontent.com’ is not trusted.
ERROR: The certificate of ‘github-releases.githubusercontent.com’ doesn't have a known issuer.

Using the version from this commit (currently latest/master) https://github.com/docker-library/openjdk/commit/2bff20bd81e3ce1172d3adefcfb5cb994c8e0e4d

yosifkit commented 3 years ago

Unable to reproduce. Working fine on our builders and on github actions just a few minutes ago:

+ wget --progress=dot:giga -O openjdk.tgz https://github.com/AdoptOpenJDK/openjdk11-upstream-binaries/releases/download/jdk-11.0.11%2B9/OpenJDK11U-jdk_x64_linux_11.0.11_9.tar.gz
--2021-06-22 21:00:41--  https://github.com/AdoptOpenJDK/openjdk11-upstream-binaries/releases/download/jdk-11.0.11%2B9/OpenJDK11U-jdk_x64_linux_11.0.11_9.tar.gz
Resolving github.com (github.com)... 192.30.255.113
Connecting to github.com (github.com)|192.30.255.113|:443... connected.
HTTP request sent, awaiting response... 302 Found
Location: https://github-releases.githubusercontent.com/177164466/48e99980-a2d3-11eb-80ab-0b56ba825b72?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAIWNJYAX4CSVEH53A%2F20210622%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20210622T210041Z&X-Amz-Expires=300&X-Amz-Signature=bb5bb6e7c3ed74c780219d0754d64b71700bb36a931002c6f51ab74086a27755&X-Amz-SignedHeaders=host&actor_id=0&key_id=0&repo_id=177164466&response-content-disposition=attachment%3B%20filename%3DOpenJDK11U-jdk_x64_linux_11.0.11_9.tar.gz&response-content-type=application%2Foctet-stream [following]
--2021-06-22 21:00:41--  https://github-releases.githubusercontent.com/177164466/48e99980-a2d3-11eb-80ab-0b56ba825b72?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAIWNJYAX4CSVEH53A%2F20210622%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20210622T210041Z&X-Amz-Expires=300&X-Amz-Signature=bb5bb6e7c3ed74c780219d0754d64b71700bb36a931002c6f51ab74086a27755&X-Amz-SignedHeaders=host&actor_id=0&key_id=0&repo_id=177164466&response-content-disposition=attachment%3B%20filename%3DOpenJDK11U-jdk_x64_linux_11.0.11_9.tar.gz&response-content-type=application%2Foctet-stream
Resolving github-releases.githubusercontent.com (github-releases.githubusercontent.com)... 185.199.110.154, 185.199.109.154, 185.199.111.154, ...
Connecting to github-releases.githubusercontent.com (github-releases.githubusercontent.com)|185.199.110.154|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 196525142 (187M) [application/octet-stream]
Saving to: ‘openjdk.tgz’
paul-bormans commented 3 years ago

Thanks for the quick comment/reply.

I think the issue is caused by fact that i run from a corporate network with fw and some dns hooks... I could (i should) run a simple test to clone it on my own device and build there; probably will work there.

For me ok to close.

Paul