VSE response throws below error Devtest javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security. provider.certpath.SunCertPathBuilderException: unable to find valid certification

Document ID : KB000046868
Last Modified Date : 14/02/2018
Show Technical Document Details

Problem 

Devtest environment has configured with SSL and enabled with HTTPS communication between Registry and VSE. When we send any request to service in VSE, getting SSLHandshakeException as below

javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.
provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
        at com.sun.net.ssl.internal.ssl.Alerts.getSSLException(Unknown Source)
        at com.sun.net.ssl.internal.ssl.SSLSocketImpl.fatal(Unknown Source)

Environment:  

Registry, EnterpriseDashboard, VSE are configured with SSL protocol and

Enabled HTTPS communication between registry and VSE

Cause: 

   Your trust-tore certificate doesn't seem to "trust" the server certificate for what you're trying to send/receive response.

Resolution:

   You need to include server certificate to truststore and define path for truststore in local.properties file as below

         lisa.net.trustStore=<Path_to_truststore>

         lisa.net.trustStore.password=<truststore_password>

  If you are using default truststore (java truststore), export certificates of both client and server keystore certificates and import these cert files to cacert (<Devtest_home>/jre/lib/securities/cacert)

 

Additional Information:

 More information to enable SSL communication is available at: 

   https://docops.ca.com/devtest-solutions/9-5/en/administering/security/using-ssl-to-secure-communication/use-ssl-with-multiple-certificates