DSS REST API SSL handshake error

We are currently trying to connect to the DSS REST API and encounter the following error.

"javax.net.ssl.SSLHandshakeException:
sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException:
unable to find valid certification path to requested target"

The
team was successful in connecting to the REST API in a standalone
program. But when the application was deployed using a JBoss server the
error was encountered. While searching in the Q&A of the developers
forum, it was mentioned that the issue could be due to the SSL
certificate.
Where can we get the latest SSL certificate for the DSS REST API?

Find more posts tagged with

ssl

dss

dss-rest-api

datascope-select

Accepted answers

Gurpreet

Hello @pradeep.balasubramanian, this is probably due to old version of Java being used in your application server. The DSS website link is https://hosted.datascope.reuters.com/DataScope/ and it is signed by "DigiCert SHA2 Secure Server CA" certificate authority.

Once you open the website in the browser, you can view connection properties and download the certificate and import it into your keystore file.

There is an option to import the certificate into a new keystore for use with JBOSS, or to add it into the JRE default keystore for use with all applications:

keytool -import -trustcacerts -keystore $JAVA_HOME/jre/lib/security/cacerts -storepass changeit -alias Root -import -file DigiCertRootCA.pem

Please see this article for additional help in understanding Java Security. You can also enable network logging using this property:

<code>-Djavax.net.debug=all

All comments

Gurpreet

Once you open the website in the browser, you can view connection properties and download the certificate and import it into your keystore file.

There is an option to import the certificate into a new keystore for use with JBOSS, or to add it into the JRE default keystore for use with all applications:

keytool -import -trustcacerts -keystore $JAVA_HOME/jre/lib/security/cacerts -storepass changeit -alias Root -import -file DigiCertRootCA.pem

Please see this article for additional help in understanding Java Security. You can also enable network logging using this property:

<code>-Djavax.net.debug=all

pradeep.balasubramanian

Thanks @Gurpreet

The solution works.

EXPLORE OUR SITES