| Author |
Message
|
| chris boehnke |
 Posted: Mon Aug 18, 2014 1:23 pm Post subject: SSL error |
 |
|
Partisan
Joined: 25 Jul 2006
Posts: 369
|
Hi,
I am having issue calling a webservice hosted on WAS thru message broker.
Message broker has the public cert installed. We are getting the below error.
Can someone throw light on this.
| Quote: |
| javax.net.ssl.SSLHandshakeException: com.ibm.jsse2.util.h: PKIX path building failed: java.security.cert.CertPathBuilderException: unable to find valid certification path to requested target |
|
|
| Back to top |
|
 |
| Vitor |
| Posted: Tue Aug 19, 2014 4:33 am Post subject: Re: SSL error |
|
|
Grand High Poobah
Joined: 11 Nov 2005
Posts: 26093
Location: Texas, USA
|
| chris boehnke wrote: |
| Message broker has the public cert installed. |
What about the rest of the SSL set up? Trust stores and so forth?
_________________
Honesty is the best policy.
Insanity is the best defence. |
|
| Back to top |
|
|
| fjb_saper |
| Posted: Tue Aug 19, 2014 4:58 am Post subject: Re: SSL error |
|
|
Grand High Poobah
Joined: 18 Nov 2003
Posts: 20756
Location: LI,NY
|
| chris boehnke wrote: |
Hi,
I am having issue calling a webservice hosted on WAS thru message broker.
Message broker has the public cert installed. We are getting the below error.
Can someone throw light on this.
| Quote: |
| javax.net.ssl.SSLHandshakeException: com.ibm.jsse2.util.h: PKIX path building failed: java.security.cert.CertPathBuilderException: unable to find valid certification path to requested target |
|
Well it looks to me that you may have installed the public cert but you did not add the signer certs up until the root CA into the truststore. It will not work without them. 
_________________
MQ & Broker admin |
|
| Back to top |
|
|
| chris boehnke |
| Posted: Thu Aug 21, 2014 5:21 pm Post subject: |
|
|
Partisan
Joined: 25 Jul 2006
Posts: 369
|
On broker end both root and intermediary certs are imported.
The issue was on application server. They were using self signed certs. |
|
| Back to top |
|
|
| fjb_saper |
| Posted: Fri Aug 22, 2014 4:14 am Post subject: |
|
|
Grand High Poobah
Joined: 18 Nov 2003
Posts: 20756
Location: LI,NY
|
Use vmarg -Djavax.net.debug="all" and verify that the truststore being loaded is actually the one you expect to be loaded...
_________________
MQ & Broker admin |
|
| Back to top |
|
|
|
|
