{"action":"created","issue":{"url":"https://api.github.com/repos/Triple-T/gradle-play-publisher/issues/455","repository_url":"https://api.github.com/repos/Triple-T/gradle-play-publisher","labels_url":"https://api.github.com/repos/Triple-T/gradle-play-publisher/issues/455/labels{/name}","comments_url":"https://api.github.com/repos/Triple-T/gradle-play-publisher/issues/455/comments","events_url":"https://api.github.com/repos/Triple-T/gradle-play-publisher/issues/455/events","html_url":"https://github.com/Triple-T/gradle-play-publisher/issues/455","id":381541883,"node_id":"MDU6SXNzdWUzODE1NDE4ODM=","number":455,"title":"Problem with SSL-certificates when using behind corporate http(s)-proxy","user":{"login":"NiciDieNase","id":572893,"node_id":"MDQ6VXNlcjU3Mjg5Mw==","avatar_url":"https://avatars0.githubusercontent.com/u/572893?v=4","gravatar_id":"","url":"https://api.github.com/users/NiciDieNase","html_url":"https://github.com/NiciDieNase","followers_url":"https://api.github.com/users/NiciDieNase/followers","following_url":"https://api.github.com/users/NiciDieNase/following{/other_user}","gists_url":"https://api.github.com/users/NiciDieNase/gists{/gist_id}","starred_url":"https://api.github.com/users/NiciDieNase/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/NiciDieNase/subscriptions","organizations_url":"https://api.github.com/users/NiciDieNase/orgs","repos_url":"https://api.github.com/users/NiciDieNase/repos","events_url":"https://api.github.com/users/NiciDieNase/events{/privacy}","received_events_url":"https://api.github.com/users/NiciDieNase/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":1,"created_at":"2018-11-16T10:34:29Z","updated_at":"2018-12-13T08:52:08Z","closed_at":null,"author_association":"NONE","body":"### Describe the bug\r\n\r\nThis could possibly be related to #31 \r\n\r\nWe are running our build in a corporate environment behind a http(s)-proxy. The proxy is configured via gradle.properties (systemProp.http(s).proxyHost, etc.). \r\nWe have also configured a custom trust store via the systemProp.javax.net.ssl.trustStore-property that includes our internal (self-signed) CA that the https-proxy is using.\r\n\r\nNevertheless the release fails with a javax.net.ssl.SSLHandshakeException.\r\n\r\nWhen running with systemProp.javax.net.debug=ssl we get the following:\r\n\r\n> 10:29:38.055 [INFO] [org.gradle.api.internal.tasks.execution.SkipUpToDateTaskExecuter] Up-to-date check for task ':_ourProject_:publishStoreReleaseApk' took 0.004 secs. It is not up-to-date because:\r\n  No history is available.\r\n10:29:38.055 [DEBUG] [org.gradle.api.internal.tasks.execution.OutputDirectoryCreatingTaskExecuter] Ensuring directory exists for property outputDir (OUTPUT) at _directory redacted_\r\n10:29:38.055 [DEBUG] [org.gradle.api.internal.tasks.execution.ExecuteActionsTaskExecuter] Executing actions for task ':_ourProject_:publishStoreReleaseApk'.\r\n10:29:38.056 [DEBUG] [org.gradle.internal.progress.DefaultBuildOperationExecutor] Build operation 'Execute publishApks for :_ourProject_:publishStoreReleaseApk' started\r\n10:29:38.056 [INFO] [org.gradle.api.internal.changedetection.changes.RebuildIncrementalTaskInputs] All input files are considered out-of-date for incremental task ':_ourProject_:publishStoreReleaseApk'.\r\n10:29:38.086 [QUIET] [system.out] adding as trusted cert:\r\n10:29:38.086 [QUIET] [system.out]   Subject: CN=Starfield Root Certificate Authority - G2, O=\"Starfield Technologies, Inc.\", L=Scottsdale, ST=Arizona, C=US\r\n10:29:38.086 [QUIET] [system.out]   Issuer:  CN=Starfield Root Certificate Authority - G2, O=\"Starfield Technologies, Inc.\", L=Scottsdale, ST=Arizona, C=US\r\n10:29:38.086 [QUIET] [system.out]   Algorithm: RSA; Serial number: 0x0\r\n10:29:38.086 [QUIET] [system.out]   Valid from Tue Sep 01 02:00:00 CEST 2009 until Fri Jan 01 00:59:59 CET 2038\r\n10:29:38.086 [QUIET] [system.out]\r\n10:29:38.086 [QUIET] [system.out] adding as trusted cert:\r\n10:29:38.086 [QUIET] [system.out]   Subject: CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US\r\n10:29:38.086 [QUIET] [system.out]   Issuer:  CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US\r\n10:29:38.086 [QUIET] [system.out]   Algorithm: RSA; Serial number: 0x83be056904246b1a1756ac95991c74a\r\n10:29:38.086 [QUIET] [system.out]   Valid from Fri Nov 10 01:00:00 CET 2006 until Mon Nov 10 01:00:00 CET 2031\r\n10:29:38.086 [QUIET] [system.out]\r\n10:29:38.086 [QUIET] [system.out] adding as trusted cert:\r\n10:29:38.086 [QUIET] [system.out]   Subject: CN=Equifax Secure eBusiness CA-1, O=Equifax Secure Inc., C=US\r\n10:29:38.086 [QUIET] [system.out]   Issuer:  CN=Equifax Secure eBusiness CA-1, O=Equifax Secure Inc., C=US\r\n10:29:38.086 [QUIET] [system.out]   Algorithm: RSA; Serial number: 0x4\r\n10:29:38.086 [QUIET] [system.out]   Valid from Mon Jun 21 06:00:00 CEST 1999 until Sun Jun 21 06:00:00 CEST 2020\r\n10:29:38.086 [QUIET] [system.out]\r\n10:29:38.086 [QUIET] [system.out] adding as trusted cert:\r\n10:29:38.086 [QUIET] [system.out]   Subject: CN=thawte Primary Root CA, OU=\"(c) 2006 thawte, Inc. - For authorized use only\", OU=Certification Services Division, O=\"thawte, Inc.\", C=US\r\n10:29:38.086 [QUIET] [system.out]   Issuer:  CN=thawte Primary Root CA, OU=\"(c) 2006 thawte, Inc. - For authorized use only\", OU=Certification Services Division, O=\"thawte, Inc.\", C=US\r\n\r\nThe list of 'adding as trusted cert' continues, but definitly does not include our internal CA.\r\n\r\nTo me this looks like, as if for the playstore upload not the keystore defined in gradle.preferences is used but another one is created which does not include the same certificates.\r\n\r\nI would greatly appreciate any help or hints to what could be the cause of this.\r\n\r\n### To Reproduce\r\nrun\r\n`/gradlew --debug publishApkStoreRelease`\r\nwith the environment and config described above (which I realize is propably not that simple)\r\n\r\n#### Versions\r\n\r\n - Gradle Play Publisher: same behavior with 1.2.2 and 2.0.0-rc2\r\n - Gradle Wrapper (if applicable): 4.4\r\n - Android Gradle Plugin (if applicable): 3.1.1\r\n\r\n### Expected behavior\r\n\r\nPlugin works normally when using an https-proxy with a custom CA included in a custom trust store.\r\n\r\n### Additional context\r\n\r\n"},"comment":{"url":"https://api.github.com/repos/Triple-T/gradle-play-publisher/issues/comments/446889444","html_url":"https://github.com/Triple-T/gradle-play-publisher/issues/455#issuecomment-446889444","issue_url":"https://api.github.com/repos/Triple-T/gradle-play-publisher/issues/455","id":446889444,"node_id":"MDEyOklzc3VlQ29tbWVudDQ0Njg4OTQ0NA==","user":{"login":"NiciDieNase","id":572893,"node_id":"MDQ6VXNlcjU3Mjg5Mw==","avatar_url":"https://avatars0.githubusercontent.com/u/572893?v=4","gravatar_id":"","url":"https://api.github.com/users/NiciDieNase","html_url":"https://github.com/NiciDieNase","followers_url":"https://api.github.com/users/NiciDieNase/followers","following_url":"https://api.github.com/users/NiciDieNase/following{/other_user}","gists_url":"https://api.github.com/users/NiciDieNase/gists{/gist_id}","starred_url":"https://api.github.com/users/NiciDieNase/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/NiciDieNase/subscriptions","organizations_url":"https://api.github.com/users/NiciDieNase/orgs","repos_url":"https://api.github.com/users/NiciDieNase/repos","events_url":"https://api.github.com/users/NiciDieNase/events{/privacy}","received_events_url":"https://api.github.com/users/NiciDieNase/received_events","type":"User","site_admin":false},"created_at":"2018-12-13T08:52:08Z","updated_at":"2018-12-13T08:52:08Z","author_association":"NONE","body":"I got the plugin to work behind our proxy, but I haven't tested yet if these changes affect anything else."}}
{"actor":{"display_login":"NiciDieNase"}}