- Posts: 2
- Thank you received: 1
- Home>
- Forum>
- Support>
- Application Programming Interface>
- Invalid SSL certificate
Invalid SSL certificate
- ONERA_Toulouse
- Topic Author
- Offline
- New Member
-
Less
More
7 years 10 months ago #81
by ONERA_Toulouse
Invalid SSL certificate was created by ONERA_Toulouse
Hi all !
I had some SSL certificate problems I found the solution so I post it here.
The SSL certificate seems to be considerate invalid by Java.
When i made request on API an exception occurs :
sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
I have read something about this and it appear that Let's Encrypt (the certification authority) is considered untrusty by JAVA.
To resolve this problem you must get the SSL certificate from Opensky-network.org with your browser
and go to your JDK installation folder and locate the keytool binary.
Type the following comand to add the opensky certificate to you trustStore.
If a password is asked, type "changeit" by default.
I had some SSL certificate problems I found the solution so I post it here.
The SSL certificate seems to be considerate invalid by Java.
When i made request on API an exception occurs :
sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
I have read something about this and it appear that Let's Encrypt (the certification authority) is considered untrusty by JAVA.
To resolve this problem you must get the SSL certificate from Opensky-network.org with your browser
and go to your JDK installation folder and locate the keytool binary.
Type the following comand to add the opensky certificate to you trustStore.
If a password is asked, type "changeit" by default.
keytool -import -alias example -keystore C:\Program Files (x86)\Java\jre1.6.0_22\lib\security\cacerts -file example.der
The following user(s) said Thank You: schaefer
7 years 10 months ago #113
by dhj1965
Replied by dhj1965 on topic Invalid SSL certificate
Hi,
the letsencrypt.org CA is supported by JAVA jre versions 7u111+ and 8u101+
Your solution works fine, but your version 6u22 (taken from your keytool file path) is yery old and should not be used anymore for security reasons...
Best...
Detlev
the letsencrypt.org CA is supported by JAVA jre versions 7u111+ and 8u101+
Your solution works fine, but your version 6u22 (taken from your keytool file path) is yery old and should not be used anymore for security reasons...
Best...
Detlev
