Maven Central与Shibboleth仓库拆分后镜像配置及证书问题求助

核心问题梳理 #

• Maven Central与Shibboleth仓库拆分，无法通过单一镜像统一拉取依赖
• C:\Users\user\.m2\settings.xml中<mirror>节点的mirrorOf属性缺失，触发8个配置错误
• 尝试直接配置仓库、指定mirrorOf=central、Nexus自动解析均失败，同时出现PKIX证书信任错误：

Non-resolvable import POM: Could not transfer artifact group.id:artifact.id:version.id from/to nexus (nexus.website): company.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

分步解决方案 #

1. 修复mirrorOf缺失的配置错误 #

每个<mirror>必须通过mirrorOf明确匹配目标仓库，针对多仓库拆分场景，需按仓库组分别配置镜像，避免单一镜像覆盖所有源：

<settings>
  <mirrors>
    <!-- 匹配Maven Central仓库 -->
    <mirror>
      <id>central-mirror</id>
      <mirrorOf>central</mirrorOf>
      <url>你的Central镜像地址</url>
    </mirror>
    <!-- 匹配Shibboleth专属仓库 -->
    <mirror>
      <id>shibboleth-mirror</id>
      <mirrorOf>shibboleth</mirrorOf>
      <url>你的Shibboleth镜像地址</url>
    </mirror>
  </mirrors>

  <!-- 声明原始仓库ID，确保镜像能正确匹配 -->
  <profiles>
    <profile>
      <id>repo-profiles</id>
      <activation>
        <activeByDefault>true</activeByDefault>
      </activation>
      <repositories>
        <repository>
          <id>central</id>
          <url>https://repo1.maven.org/maven2/</url>
          <releases><enabled>true</enabled></releases>
          <snapshots><enabled>false</enabled></snapshots>
        </repository>
        <repository>
          <id>shibboleth</id>
          <url>https://shibboleth.net/nexus/content/repositories/releases/</url>
          <releases><enabled>true</enabled></releases>
          <snapshots><enabled>false</enabled></snapshots>
        </repository>
      </repositories>
    </profile>
  </profiles>
</settings>

2. 解决PKIX证书信任错误 #

证书错误源于JDK信任库未包含Nexus服务器的根证书，需手动导入：

• 导出证书：用浏览器访问nexus.website，导出站点根证书（格式选DER或PEM）
• 用keytool导入到JDK信任库：

keytool -import -alias nexus-cert -file /path/to/nexus-cert.cer -keystore $JAVA_HOME/jre/lib/security/cacerts

默认信任库密码为changeit，执行后重启Maven即可生效。

3. 替代方案：直接配置多仓库优先级 #

若镜像配置始终存在问题，可跳过镜像，直接在settings.xml中声明所有仓库，让Maven按顺序解析：

<profiles>
  <profile>
    <id>direct-repos</id>
    <activeByDefault>true</activeByDefault>
    <repositories>
      <repository>
        <id>central</id>
        <url>https://repo1.maven.org/maven2/</url>
        <releases><enabled>true</enabled></releases>
        <snapshots><enabled>false</enabled></snapshots>
      </repository>
      <repository>
        <id>shibboleth</id>
        <url>https://shibboleth.net/nexus/content/repositories/releases/</url>
        <releases><enabled>true</enabled></releases>
        <snapshots><enabled>false</enabled></snapshots>
      </repository>
    </repositories>
    <pluginRepositories>
      <!-- 同步配置插件仓库 -->
      <pluginRepository>
        <id>central</id>
        <url>https://repo1.maven.org/maven2/</url>
      </pluginRepository>
      <pluginRepository>
        <id>shibboleth</id>
        <url>https://shibboleth.net/nexus/content/repositories/releases/</url>
      </pluginRepository>
    </pluginRepositories>
  </profile>
</profiles>

内容的提问来源于stack exchange，提问作者Zach