# Remote https repository with TLS client certificate loaded in Nexus JVM keystore not trusted

**URL:** <https://community.sonatype.com/t/remote-https-repository-with-tls-client-certificate-loaded-in-nexus-jvm-keystore-not-trusted/1934>\
**Category:** Sonatype Nexus Repository\
**Created:** [May 29, 2019, 12:43pm UTC](https://community.sonatype.com/t/remote-https-repository-with-tls-client-certificate-loaded-in-nexus-jvm-keystore-not-trusted/1934 "2019-05-29T12:43:37Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![speckmeier](https://avatars.discourse-cdn.com/v4/letter/s/ea666f/32.png) [@speckmeier](https://community.sonatype.com/u/speckmeier)\
**Post date:** [May 29, 2019, 12:43pm UTC](https://community.sonatype.com/t/remote-https-repository-with-tls-client-certificate-loaded-in-nexus-jvm-keystore-not-trusted/1934/1 "2019-05-29T12:43:37Z")

</div>

Hi,

I have a problem to access an https remote repository that requires a client certificate. I’m using version OSS 3.15.2-01. The SSL server certificate is added to our nexus trust store. The client certificate is on our nexus machine and is added via -D parameter (-Djavax.net.ssl.keyStore, -Djavax.net.ssl.keyStoreType, -Djavax.net.ssl.keyStorePassword).

I found the following exception in the log: **java.io.IOException: Received fatal alert: handshake\_failure**.

With enabled ssl-debugging I found the following problem:  
2019-05-29 12:32:32,096+0000 INFO [qtp1794954214-340] admin sun.security.ssl.HandshakeMessage - \*\*\* ServerHelloDone  
2019-05-29 12:32:32,097+0000 INFO [qtp1794954214-340] admin **sun.security.ssl.ClientHandshaker - Warning: no suitable certificate found - continuing without client authentication**  
2019-05-29 12:32:32,097+0000 INFO [qtp1794954214-340] admin sun.security.ssl.HandshakeMessage - \*\*\* Certificate chain  
**2019-05-29 12:32:32,097+0000 INFO [qtp1794954214-340] admin sun.security.ssl.HandshakeMessage - \<.Empty\>**  
2019-05-29 12:32:32,098+0000 INFO [qtp1794954214-340] admin sun.security.ssl.HandshakeMessage - \*\*\*

It seems Nexus don’t find the client certificate. Any ideas how to solve the problem?

It seems it’s the same problem like in [NEXUS-12488](https://issues.sonatype.org/browse/NEXUS-12488).