Trust Certificate for spring-enterprise-subscription connection when conneting with Sonatype Nexus Repository manager.

Products

• Developer Support only for Spring Enterprise
• VMware Tanzu Platform Spring
• Developer Support for Spring

Issue/Introduction

Cannot download the artifacts or jar file from spring enterprise repository to the local artifactory in Sonatype Nexus. 

You can get below error :

[ERROR] Failed to execute goal on project temp: Could not collect dependencies for project org.example:temp:jar:1.0-SNAPSHOT
[ERROR] Failed to read artifact descriptor for org.springframework.security:spring-security-oauth2-client:jar:5.7.18
[ERROR]   Caused by: The following artifacts could not be resolved: org.springframework.security:spring-security-oauth2-client:pom:5.7.18 (absent): Could not transfer artifact org.springframework.security:spring-security-oauth2-client:pom:5.7.18 from/to spring-enterprise-subscription 

Cause

Certificate missing for spring enterprise artifactory.

Resolution

Add the spring enterprise certificate to the truststore in Sonatype Nexus Repository Manager.

To grab the certificate you need to have active spring enterprise subscription and entitlement for VMware Tanzu Spring. 

Spring Enterprise Subscription repository url : https://packages.broadcom.com/artifactory/spring-enterprise/

1. Login with your valid credentials. Guide to login here.
   
   
2. One you are able to access the repository on your browser you need to click on the below icon 
   
   
3. Navigate through the connection is secure option.
   
   
   
   
   
   
4.  Click on valid certificate 
   
   
   
   
   
5. This will open the certificate viewer page on your browser and then click on Details to download the certificate.
   
   
   
   
   
   
6. Click on the certificate hierarchy to get the Root CA and tehn export and it should get downloaded in the local. 
   
   
   
   
   Once the certificate is download the you can use this in the truststore when configuring the spring enterprise repository in Sonatype nexus.
   
   
   
   
   
   
   
   
   

 

Additional Information

Alternate way to grab the Digicert Global Root CA in case you don't see the Digicert Global Root certificate from your browser.

Digicert Global Root CA Serial number : 08:3B:E0:56:90:42:46:B1:A1:75:6A:C9:59:91:C7:4A

• Follow to get the Digicert Global Root certificate for packages.broadcom.com/artifactory/spring-enterprise/ from Digicert site.
• To Download the certificate from Digicert site click on this link --> digicertRootCA it will download the Root CA.
  
  
• Once download then you can use it in your Sonatype Nexus Repository manager truststore.