AnsweredAssumed Answered

javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed

Question asked by venkatakishorebabu.bellam on Feb 21, 2017
Latest reply on Feb 21, 2017 by venkatakishorebabu.bellam

We have a New SHA256 SSL Certificate, 

I am using below to add a root SSL Certificate 

/usr/java/jdk1.8.0_60/jre/bin/keytool -importcert -trustcacerts -keystore /usr/java/jdk1.8.0_60/jre/lib/security/cacerts -file /usr/java/jdk1.8.0_60/jre/lib/security/<CertificateName>.crt

 

We are seeing below error even after we add the SSL Cert

 

Feb 21, 2017 9:58:40 AM EST FINE [com.noelios.restlet.ext.net.HttpUrlConnectionCall sendRequest] An error occurred during the communication with the remote HTTP server.
javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
at sun.security.ssl.Alerts.getSSLException(Alerts.java:192)
at sun.security.ssl.SSLSocketImpl.fatal(SSLSocketImpl.java:1949)
at sun.security.ssl.Handshaker.fatalSE(Handshaker.java:302)
at sun.security.ssl.Handshaker.fatalSE(Handshaker.java:296)
at sun.security.ssl.ClientHandshaker.serverCertificate(ClientHandshaker.java:1506)
at sun.security.ssl.ClientHandshaker.processMessage(ClientHandshaker.java:216)
at sun.security.ssl.Handshaker.processLoop(Handshaker.java:979)
at sun.security.ssl.Handshaker.process_record(Handshaker.java:914)
at sun.security.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:1062)
at sun.security.ssl.SSLSocketImpl.performInitialHandshake(SSLSocketImpl.java:1375)
at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1403)
at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1387)
at sun.net.www.protocol.https.HttpsClient.afterConnect(HttpsClient.java:559)
at sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.connect(AbstractDelegateHttpsURLConnection.java:185)
at sun.net.www.protocol.https.HttpsURLConnectionImpl.connect(HttpsURLConnectionImpl.java:153)
at com.noelios.restlet.ext.net.HttpUrlConnectionCall.sendRequest(HttpUrlConnectionCall.java:180)
at com.noelios.restlet.http.HttpClientConverter.commit(HttpClientConverter.java:109)
at com.noelios.restlet.http.HttpClientHelper.handle(HttpClientHelper.java:88)
at org.restlet.Client.handle(Client.java:120)
at org.restlet.Uniform.handle(Uniform.java:106)
at com.boomi.restlet.client.ClientUtil.handle(ClientUtil.java:41)
at com.boomi.container.core.StatusReporter.sendStatusUpdate(StatusReporter.java:163)
at com.boomi.container.core.StatusReporter.runImpl(Unknown Source)
at com.boomi.container.core.StatusReporter.access$000(Unknown Source)
at com.boomi.container.core.StatusReporter$1.run(StatusReporter.java:80)
at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:511)
at com.boomi.util.concurrent.CancellableFutureTask.run(CancellableFutureTask.java:160)
at com.boomi.util.ExecutorUtil$NamedRunnable.run(ExecutorUtil.java:666)
at com.boomi.util.ExecutorUtil$CCLRunnable.run(ExecutorUtil.java:720)
at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142)
at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617)
at java.lang.Thread.run(Thread.java:745)
Caused by: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
at sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:387)
at sun.security.validator.PKIXValidator.engineValidate(PKIXValidator.java:292)
at sun.security.validator.Validator.validate(Validator.java:260)
at sun.security.ssl.X509TrustManagerImpl.validate(X509TrustManagerImpl.java:324)
at sun.security.ssl.X509TrustManagerImpl.checkTrusted(X509TrustManagerImpl.java:229)
at sun.security.ssl.X509TrustManagerImpl.checkServerTrusted(X509TrustManagerImpl.java:124)
at sun.security.ssl.ClientHandshaker.serverCertificate(ClientHandshaker.java:1488)
... 27 more
Caused by: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
at sun.security.provider.certpath.SunCertPathBuilder.build(SunCertPathBuilder.java:146)
at sun.security.provider.certpath.SunCertPathBuilder.engineBuild(SunCertPathBuilder.java:131)
at java.security.cert.CertPathBuilder.build(CertPathBuilder.java:280)
at sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:382)
... 33 more

 

Please suggest what we are missing

Outcomes