ssl - New Certificate - PKIX path building failed -


i have bought new wildcard ssl certificate our domain our old 1 expire. have installed on our cas server , our application server, getting following stacktrace on our app server:

message: javax.net.ssl.sslhandshakeexception: sun.security.validator.validatorexception: pkix path building failed: sun.security.provider.certpath.suncertpathbuilderexception: unable find valid certification path requested target  cause: javax.net.ssl.sslhandshakeexception: sun.security.validator.validatorexception: pkix path building failed: sun.security.provider.certpath.suncertpathbuilderexception: unable find valid certification path requested target  trace: org.jasig.cas.client.validation.saml11ticketvalidator.retrieveresponsefromserver(saml11ticketvalidator.java:231) org.jasig.cas.client.validation.abstracturlbasedticketvalidator.validate(abstracturlbasedticketvalidator.java:207) 

the certificate identical on both servers.

i think godaddy certificate in jvm had expired, no longer trusted, or had different path new one.

i therefore had import latest certificate bundle godaddy jvm on jetty server.

keytool -import -noprompt -trustcacerts -alias godaddy -file /tmp/gd_bundle-g2-g1.crt -keystore /usr/lib/jvm/oracle-jdk1.7/jre/lib/security/cacerts 

Comments

Popular posts from this blog

Hatching array of circles in AutoCAD using c# -

ios - UITEXTFIELD InputView Uipicker not working in swift -

Python Pig Latin Translator -