title: Is there a durable solution to SSL certificate validation for Eclipse plugins?
body: <p>Each time I want to install a new plugin from Eclipse marketplace or an update site, I have the error message 'PKIX path building failed' and I had some degree of success solving this issue by downloading the certificate manually from Chrome and installing it to the JDK's cacerts file with the keystore command. This ended up having like 30+ certificates downloaded and installed manually.
  We can see that this solution is not durable :</p>
  <ol>
  <li>For some plugins, the URL references another location, which references another one, which can end up in downloading and installing 2-3 certificates for 1 single plugin</li>
  <li>For Eclipse marketplace, the certificate seems to be valid only one day. If I download it and install it one day, I have to redo the same thing the next day or I get 'PKIX path building failed'.</li>
  </ol>
  <p>I had a look at this answer :
  <a href="https://stackoverflow.com/a/53214663/8315843">https://stackoverflow.com/a/53214663/8315843</a></p>
  <p>Peter suggests to input the full path of cacerts to the eclipse.ini file as well as the keystore password :</p>
  <pre><code>-Djavax.net.ssl.trustStore=c:/full/path/to/cacerts
  -Djavax.net.ssl.trustStorePassword=changeit
  </code></pre>
  <p>I tried that solution.
  In fact I expected that because I gave a password, I would have an automatic certificate validation but this is not the case. Instead I got the same error message 'PKIX path building failed' again and I had to rerun the keystore command manually after re-downloading the certificate manually.</p>
  <p>Any suggestions ?</p>