Unable to download deployment package via url

[pintify]

I've launched a docker container with Kura 5.4 and configured the keystore for some urls but when I try to download a deployment package it is unable to download it.
If I do it through Kapua:

2024-01-17T08:41:38,322 [pool-15-thread-1] INFO  o.e.k.c.d.d.i.DownloadImpl - Download exception
org.eclipse.kura.KuraException: An internal error occurred. {0}
        at org.eclipse.kura.core.deployment.download.impl.HttpDownloadCountingOutputStream.startWork(HttpDownloadCountingOutputStream.java:156)
        at org.eclipse.kura.core.deployment.download.impl.DownloadImpl.incrementalDownloadFromURL(DownloadImpl.java:191)
        at org.eclipse.kura.core.deployment.download.impl.DownloadImpl.downloadDeploymentPackageInternal(DownloadImpl.java:113)
        at org.eclipse.kura.core.deployment.CloudDeploymentHandlerV2.lambda$0(CloudDeploymentHandlerV2.java:576)
        at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:511)
        at java.util.concurrent.FutureTask.run(FutureTask.java:266)
        at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)
        at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)
        at java.lang.Thread.run(Thread.java:750)
Caused by: java.util.concurrent.ExecutionException: org.eclipse.kura.KuraConnectException: "Connection failed. javax.net.ssl.SSLException: Unexpected error: java.security.InvalidAlgorithmParameterException: the trustAnchors parameter must be non-empty"
        at java.util.concurrent.FutureTask.report(FutureTask.java:122)
        at java.util.concurrent.FutureTask.get(FutureTask.java:192)
        at org.eclipse.kura.core.deployment.download.impl.HttpDownloadCountingOutputStream.startWork(HttpDownloadCountingOutputStream.java:154)
        ... 8 more
Caused by: org.eclipse.kura.KuraConnectException: "Connection failed. javax.net.ssl.SSLException: Unexpected error: java.security.InvalidAlgorithmParameterException: the trustAnchors parameter must be non-empty"
        at org.eclipse.kura.core.deployment.download.impl.HttpDownloadCountingOutputStream$1.call(HttpDownloadCountingOutputStream.java:131)
        at org.eclipse.kura.core.deployment.download.impl.HttpDownloadCountingOutputStream$1.call(HttpDownloadCountingOutputStream.java:1)
        ... 4 more

I cannot launch it directly from the web because the server has basic authentication.

The same configuration, certificates and installation URL works perfectly on a raw installation in Kura 5.3. Is it possible is there some relevant change from raw to docker installation or from 5.3 to 5.4 that may affect this?

[pintify]

The problem happens also in kura 5.3 (docker version still). By the way, the certificate needed for such download is properly listed in security tab, so I cannot think of a reason for the empty trustanchor issue...

[pintify]

Alright, it seems to be something from 5.2.0 to 5.3.0 in docker build, because I've switched to version 5.2.0 on docker and now it works like a charm. No other change on configuration, certificates, etc. made (it's mounted with volumes).

[pintify]

Never mind, I found the issue, it seems I was using the folder /etc/ssl/certs/java as volume and that meant to overwrite containers default cacerts. I'm not sure how running the version 5.2.0 rebuilt that (probably some first run execution to install ca-certificates or something like that) but it solved the issue creating the file. Now all versions work again as the cacerts is already present. I'll redo the deployment procedure.