SSL Certificate

changyao.yeo
changyao.yeo LSEG
in Refinitiv Data Platform

Hi there,


Client has upgraded their docker base image and run into the following error while accessing News on RDP endpoint.


Caused by: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

They need below SSL Certificates for configuration in Docker Image,

End point : https://api.refinitiv.com

  • Root
  • Intermediate
  • Main Certificate

They are asking if we are able to share above mentioned SSL certificates.


Tagged:

Best Answer

  • Jirapongse
    Jirapongse ✭✭✭✭✭
    Answer ✓

    @changyao.yeo

    Thank you for reaching out to us.

    The error indicates that the application was unable to find certificates when connecting to the server https://api.refinitiv.com.

    According to the SSLShopper website, the certificate is issued by COMODO.
    1718270676461.png

    The client needs to make sure that the COMODO certificate is in the Java key store file used by the application.

Answers

  • Pannem.Chandramouli
    Pannem.Chandramouli Newcomer

    Hi Jirapongse,

    As suggested we tried to add three SSL certificates into java key store as below,

    1718687910422.png

    But still facing same issue i.e.,

    Caused by: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

    As per earlier response screenshot had 4 SSL certificates from COMODO but we could find only three, please advise.


    Regards,

    Venkat

  • Jirapongse
    Jirapongse ✭✭✭✭✭

    @Pannem.Chandramouli

    The error is obvious that Java couldn't find valid certification path to requested target. How did the application work before upgrading the docker base image?

    You can use the -Djavax.net.debug=all JVM option to verify the key store file and certification path.

    Moreover, according to this discussion, the problem can also be resolved by the company's IT support team.

Categories