Summary
The Nexus Outreach feature provides the content displayed on your Nexus Welcome page . These are important messages direct from Sonatype. The Outreach feature is enabled by default.
Periodically your NXRM instance will request a 'page bundle' of messages from Sonatype servers. The exact URLs that Nexus uses to download the messages may change periodically.
If there is a problem downloading these messages you may notice a nexus.log WARN message similar to the following:
admin com.sonatype.nexus.plugins.outreach.internal.outreach.SonatypeOutreach - Could not download page bundle
Avoiding Could not download page bundle messages
The WARN log message will contain additional text that will help explain the root cause of the failure.
"connect timed out" or other socket related errors
Implies that the socket connection that NXRM is trying to establish to Sonatype servers is completely failing.
Options to resolve include:
- adjust firewall software or HTTP proxy server to allow access to the remote host mentioned
- when using an HTTP proxy server, and internet connections are till allowed without using it, possibly add the remote host mentioned as a "non-proxy" hostname in the NXRM HTTP proxy settings
- disable outreach feature
"PKIX path building failed"
Implies that NXRM is able to connect to the mentioned remote host, but for some reason does not trust the SSL/TLS server certificate that is being returned:
Options to resolve include:
- explicitly add the remote host mentioned ssl certificate to the NXRM outbound certificate truststore
Due https://issues.sonatype.org/browse/NEXUS-13908, NXRM 3 users should use the keytool method - override the URL in the Outreach capability to be a plain http:// URL, instead of the https:// URL ( https://issues.sonatype.org/browse/NEXUS-18271 )
- disable outreach feature
Remote Sites That NXRM Outreach Feature May Connect With
Content for Outreach is only downloaded from Sonatype owned servers by your NXRM instance. Web browsers using the NXRM UI do not need to access these servers.
To prevent the connection errors, requests to the following URLs should be allowed through your NXRM firewall and the TLS server certificates should be trusted by NXRM:
- http://links.sonatype.com and https://links.sonatype.com
- http://download.sonatype.com and https://download.sonatype.com
- http://sonatype-download.global.ssl.fastly.net and https://sonatype-download.global.ssl.fastly.net
Depending on the version of NXRM being used, the exact URLs used may vary.
As of 2.14.12 and 3.15.0, new installs come configured with https:// URLs:
https://issues.sonatype.org/browse/NEXUS-18271
How to Disable Outreach
Disabling this feature is a last resort.
You may decide to avoid receiving messages on your Nexus welcome page entirely. Or you know that your Nexus instance will never be able to have access to the required remote hosts.
In those cases, the outreach feature can be disabled.
Disabling Outreach in Repository Manager 3
To disable outbound Outreach requests in NXRM 3:
- Signin to your NXRM instance as an Administrator.
- Open
Administration
->System
->Capabilities
. Select theOutreach Management
capability. - Click the
Disable
button. Your changes are immediately saved.
Disabling Outreach in Repository Manager 2
To disable outbound Outreach requests in NXRM 2:
- Signin to your NXRM instance as an Administrator.
- Open
Administration
->Capabilities
. Select theOutreach Management
capability. - Uncheck the
Enable
checkbox. ClickSave
.
0 Comments