the trustAnchors parameter must be non-empty for

Andrew John Hughes gnu_andrew at
Mon Nov 23 05:45:10 UTC 2009

2009/11/23 Michael Franz <mvfranz at>:
> Hi,
> I did a new fclone of the bsd repo today.  When running the build I get the
> following error:
> java.lang.RuntimeException: Unexpected error:
> the trustAnchors parameter
> must be non-empty
> I tried to download the zip file using wget and get the following error:
> --2009-11-22 23:53:14--
> Resolving
> Connecting to||:443... connected.
> ERROR: cannot verify's certificate, issued by
> `/C=US/O=Equifax/OU=Equifax Secure Certificate Authority':
>   Unable to locally verify the issuer's authority.
> To connect to insecurely, use `--no-check-certificate'.
> Unable to establish SSL connection.
> Is anyone else having problems downloading?
> Michael

I also see this on standard JDK7 trees, as reported on build-dev back
in October:

to no response.

CCing this to build-dev as well as this is a general issue, not BSD-specific.

As a workaround, you can use ALT_DROPS_DIR to point the build to a
directory containing the downloaded tarballs.  Downloading using wget
works fine.
IcedTea avoids this issue in this manner by consolidating these
downloads with the downloads of the other OpenJDK tarballs before the
OpenJDK build begins.
Andrew :-)

Free Java Software Engineer
Red Hat, Inc. (

Support Free Java!
Contribute to GNU Classpath and the OpenJDK

PGP Key: 94EFD9D8 (
Fingerprint: F8EF F1EA 401E 2E60 15FA  7927 142C 2591 94EF D9D8

More information about the build-dev mailing list