Invalid SSL certificate

ONERA_Toulouse
Topic Author
Offline
New Member

7 years 2 months ago #81 by ONERA_Toulouse

Invalid SSL certificate was created by ONERA_Toulouse

Hi all !
I had some SSL certificate problems I found the solution so I post it here.

The SSL certificate seems to be considerate invalid by Java.
When i made request on API an exception occurs :

sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

I have read something about this and it appear that Let's Encrypt (the certification authority) is considered untrusty by JAVA.

To resolve this problem you must get the SSL certificate from Opensky-network.org with your browser
and go to your JDK installation folder and locate the keytool binary.
Type the following comand to add the opensky certificate to you trustStore.
If a password is asked, type "changeit" by default.

keytool -import -alias example -keystore  C:\Program Files (x86)\Java\jre1.6.0_22\lib\security\cacerts -file example.der

The following user(s) said Thank You: schaefer

Please Log in or Create an account to join the conversation.

dhj1965
Offline
New Member

7 years 2 months ago #113 by dhj1965

Replied by dhj1965 on topic Invalid SSL certificate

Hi,

the letsencrypt.org CA is supported by JAVA jre versions 7u111+ and 8u101+

Your solution works fine, but your version 6u22 (taken from your keytool file path) is yery old and should not be used anymore for security reasons...

Best...
Detlev

Please Log in or Create an account to join the conversation.