question

Upvotes
Accepted
11 2 1 4

SSL Certificate

Hi there,


Client has upgraded their docker base image and run into the following error while accessing News on RDP endpoint.


Caused by: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

They need below SSL Certificates for configuration in Docker Image,

End point : https://api.refinitiv.com

  • Root
  • Intermediate
  • Main Certificate

They are asking if we are able to share above mentioned SSL certificates.


rdp
icon clock
10 |1500

Up to 2 attachments (including images) can be used with a maximum of 512.0 KiB each and 1.0 MiB total.

Upvotes
Accepted
81.2k 266 53 76

@changyao.yeo

Thank you for reaching out to us.

The error indicates that the application was unable to find certificates when connecting to the server https://api.refinitiv.com.

According to the SSLShopper website, the certificate is issued by COMODO.
1718270676461.png

The client needs to make sure that the COMODO certificate is in the Java key store file used by the application.


1718270676461.png (262.1 KiB)
icon clock
10 |1500

Up to 2 attachments (including images) can be used with a maximum of 512.0 KiB each and 1.0 MiB total.

Upvotes
1 0 0 0

Hi Jirapongse,

As suggested we tried to add three SSL certificates into java key store as below,

1718687910422.png

But still facing same issue i.e.,

Caused by: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

As per earlier response screenshot had 4 SSL certificates from COMODO but we could find only three, please advise.


Regards,

Venkat


1718687910422.png (47.9 KiB)
icon clock
10 |1500

Up to 2 attachments (including images) can be used with a maximum of 512.0 KiB each and 1.0 MiB total.

Upvotes
81.2k 266 53 76

@Pannem.Chandramouli

The error is obvious that Java couldn't find valid certification path to requested target. How did the application work before upgrading the docker base image?

You can use the -Djavax.net.debug=all JVM option to verify the key store file and certification path.

Moreover, according to this discussion, the problem can also be resolved by the company's IT support team.

icon clock
10 |1500

Up to 2 attachments (including images) can be used with a maximum of 512.0 KiB each and 1.0 MiB total.

Write an Answer

Hint: Notify or tag a user in this post by typing @username.

Up to 2 attachments (including images) can be used with a maximum of 512.0 KiB each and 1.0 MiB total.