jsign does not support nonProxyHosts

[blueskyhigh]

Hi,

we are using jsign within a Maven Multi-Module Project. The object sigining certificate is issued with our own PKI. To access the timestamping server we have to use the company's proxy server.
The proxy is configured in settings.xml and all hosts in the local network are excluded in nonProxyHosts. Nevertheless jsign tries to load PKI certificates from the proxy server, and even worse all Maven artifacts in our private Nexus server cannot be resolved, because our proxy returns 403 for local servers.

jsign-maven-plugin reads the proxy host and port from settings.xml, but not nonProxyHosts. SignatureHelper uses these setting swith ProxySelector. So all subsequent http requests for the whole VM are sent to the proxy server.

As a workaround I had to remove the proxy server from settings.xml and set the Java networking properties with system properties.

[ebourg]

Thank you for reporting this issue. Another workaround is to use the Ant task with the maven-antrun-plugin to call Jsign, the Maven proxy settings will be ignored.

[czulehner]

You might also be able to set the proxy and nonProxyHosts at the JAVA_OPTIONS or directly with -D when using java -jar .. That's what I had to do to get it working...

I think, that if you implement a proxy-parameter, it would be good to also implement a nonProxyHost parameter. There are situations, where you need both, e.g. access azure-vault directly, but access a timeserver only via proxy.