Gradle rejects the SDK repository (insecure HTTP)

  • Updated

Symptom

The build fails when resolving the SDK, with an error about an insecure protocol — Gradle refuses to use the Market Pay Maven repository because it's served over HTTP rather than HTTPS. The message names the repository URL and the word "insecure."

Cause

The Market Pay Maven repository is served over HTTP on a non-standard port (public.novelpay.pl:8088). Modern Gradle blocks plain-HTTP repositories by default to prevent accidental insecure downloads, so it must be told explicitly that this repository is allowed.

Fix

Add allowInsecureProtocol = true to each Market Pay maven { … } block in settings.gradle:

maven {
    url = "http://public.novelpay.pl:8088/repository/novelpay-android-release/"
    credentials {
        username "$MAVEN_LOGIN"
        password "$MAVEN_PASSWORD"
    }
    allowInsecureProtocol = true
}

If the build then fails on FAIL_ON_PROJECT_REPOS, comment out the repositoriesMode.set(RepositoriesMode.FAIL_ON_PROJECT_REPOS) line in the same dependencyResolutionManagement block — it conflicts with declaring these repositories.

Verify

Re-sync. The dependency pl.novelpay.sdk:client-client:1.3.2 should now resolve. If it instead fails with a 401, the repository is reachable but your credentials are wrong — see Troubleshooting: Maven 401.

Related

  • Quickstart — step 1 sets up the repositories correctly.
  • Troubleshooting: Maven 401 — the next error you may hit after this one.

Was this article helpful?

0 out of 0 found this helpful