mirror of
https://github.com/ysoftdevs/DependencyCheck.git
synced 2026-03-30 05:42:10 +02:00
updated proxy configuration information
This commit is contained in:
@@ -38,7 +38,7 @@ projectName | The name of the project being scanned.
|
|||||||
reportFormat | The report format to be generated (HTML, XML, VULN, ALL). This configuration option has no affect if using this within the Site plugin unless the externalReport is set to true. | HTML
|
reportFormat | The report format to be generated (HTML, XML, VULN, ALL). This configuration option has no affect if using this within the Site plugin unless the externalReport is set to true. | HTML
|
||||||
reportOutputDirectory | The location to write the report(s). Note, this is not used if generating the report as part of a `mvn site` build | 'target'
|
reportOutputDirectory | The location to write the report(s). Note, this is not used if generating the report as part of a `mvn site` build | 'target'
|
||||||
suppressionFile | The file path to the XML suppression file \- used to suppress [false positives](../general/suppression.html) |
|
suppressionFile | The file path to the XML suppression file \- used to suppress [false positives](../general/suppression.html) |
|
||||||
proxyServer | The Proxy Server. |
|
proxyServer | The Proxy Server; see the [proxy configuration](../data/proxy.html) page for more information. |
|
||||||
proxyPort | The Proxy Port. |
|
proxyPort | The Proxy Port. |
|
||||||
proxyUsername | Defines the proxy user name. |
|
proxyUsername | Defines the proxy user name. |
|
||||||
proxyPassword | Defines the proxy password. |
|
proxyPassword | Defines the proxy password. |
|
||||||
|
|||||||
@@ -79,7 +79,8 @@ metaFileName | Sets the name of the file to use for storing the metadata
|
|||||||
|
|
||||||
Proxy Configuration
|
Proxy Configuration
|
||||||
====================
|
====================
|
||||||
Use [Maven's settings](https://maven.apache.org/settings.html#Proxies) to configure a proxy server. If multiple proxies
|
Use [Maven's settings](https://maven.apache.org/settings.html#Proxies) to configure a proxy server. Please see the
|
||||||
|
dependency-check [proxy configuration](../data/proxy.html) page for additional problem solving techniques. If multiple proxies
|
||||||
are configured in the Maven settings file you must tell dependency-check which proxy to use with the following property:
|
are configured in the Maven settings file you must tell dependency-check which proxy to use with the following property:
|
||||||
|
|
||||||
Property | Description | Default Value
|
Property | Description | Default Value
|
||||||
|
|||||||
@@ -9,3 +9,25 @@ to use a proxy to connect to the Internet. See the configuration settings for ea
|
|||||||
|
|
||||||
Note, it may also be possible to use the core [Java proxy](https://docs.oracle.com/javase/8/docs/technotes/guides/net/proxies.html)
|
Note, it may also be possible to use the core [Java proxy](https://docs.oracle.com/javase/8/docs/technotes/guides/net/proxies.html)
|
||||||
system properties instead of the configuration above.
|
system properties instead of the configuration above.
|
||||||
|
|
||||||
|
Certificate Errors
|
||||||
|
------------------
|
||||||
|
In some cases if you setup a proxy the connection may still fail due to certificate
|
||||||
|
errors (see the log file from dependency-check). If you know which cert it's failing
|
||||||
|
on (either your proxy or NVD/CVE) you can either add the certificate itself or the
|
||||||
|
signing chain to your trust store. If you don't have access to modify the system
|
||||||
|
trust store (in $JAVA_HOME/lib/security/cacerts) you can copy it elsewhere and
|
||||||
|
import it using keytool, then specify that trust store on the command line
|
||||||
|
(`mvn -Djavax.net.ssl.trustStore=/path/to/cacerts`) or if you need to always
|
||||||
|
have that set, you can set the environment variable `JAVA_TOOL_OPTIONS` to have
|
||||||
|
`-Djavax.net.ssl.trustStore=/path/to/cacerts`.
|
||||||
|
|
||||||
|
Still failing?
|
||||||
|
--------------
|
||||||
|
In some cases the proxy is configured to block `HEAD` requests. While an attempt
|
||||||
|
is made by dependency-check to identify this situation it does not appear to be
|
||||||
|
100% successful. As such, the last thing to try is to add the property
|
||||||
|
`mvn -Ddownloader.quick.query.timestamp=false`.
|
||||||
|
|
||||||
|
If trying the above and it still fails please open a ticket in the
|
||||||
|
[github repo](https://github.com/jeremylong/DependencyCheck/issues).
|
||||||
@@ -34,7 +34,7 @@ dependencyCheck {
|
|||||||
|
|
||||||
Property | Description | Default Value
|
Property | Description | Default Value
|
||||||
------------------|------------------------------------|------------------
|
------------------|------------------------------------|------------------
|
||||||
server | The proxy server. |
|
server | The proxy server; see the [proxy configuration](../data/proxy.html) page for more information. |
|
||||||
port | The proxy port. |
|
port | The proxy port. |
|
||||||
username | Defines the proxy user name. |
|
username | Defines the proxy user name. |
|
||||||
password | Defines the proxy password. |
|
password | Defines the proxy password. |
|
||||||
|
|||||||
Reference in New Issue
Block a user