DSS REST API SSL handshake error

Options
pradeep.balasubramanian
pradeep.balasubramanian Newcomer
in DSS

We are currently trying to connect to the DSS REST API and encounter the following error.


"javax.net.ssl.SSLHandshakeException:
sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException:
unable to find valid certification path to requested target"


The
team was successful in connecting to the REST API in a standalone
program. But when the application was deployed using a JBoss server the
error was encountered. While searching in the Q&A of the developers
forum, it was mentioned that the issue could be due to the SSL
certificate.
Where can we get the latest SSL certificate for the DSS REST API?

Tagged:

Best Answer

  • Gurpreet
    Gurpreet admin
    Answer ✓

    Hello @pradeep.balasubramanian, this is probably due to old version of Java being used in your application server. The DSS website link is https://hosted.datascope.reuters.com/DataScope/ and it is signed by "DigiCert SHA2 Secure Server CA" certificate authority.

    Once you open the website in the browser, you can view connection properties and download the certificate and import it into your keystore file.

    image

    There is an option to import the certificate into a new keystore for use with JBOSS, or to add it into the JRE default keystore for use with all applications:

    keytool -import -trustcacerts -keystore $JAVA_HOME/jre/lib/security/cacerts -storepass changeit -alias Root -import -file DigiCertRootCA.pem

    Please see this article for additional help in understanding Java Security. You can also enable network logging using this property:

    <code>-Djavax.net.debug=all

Answers

Categories