ssl - New Certificate - PKIX path building failed -
i have bought new wildcard ssl certificate our domain our old 1 expire. have installed on our cas server , our application server, getting following stacktrace on our app server:
message: javax.net.ssl.sslhandshakeexception: sun.security.validator.validatorexception: pkix path building failed: sun.security.provider.certpath.suncertpathbuilderexception: unable find valid certification path requested target cause: javax.net.ssl.sslhandshakeexception: sun.security.validator.validatorexception: pkix path building failed: sun.security.provider.certpath.suncertpathbuilderexception: unable find valid certification path requested target trace: org.jasig.cas.client.validation.saml11ticketvalidator.retrieveresponsefromserver(saml11ticketvalidator.java:231) org.jasig.cas.client.validation.abstracturlbasedticketvalidator.validate(abstracturlbasedticketvalidator.java:207)
the certificate identical on both servers.
i think godaddy certificate in jvm had expired, no longer trusted, or had different path new one.
i therefore had import latest certificate bundle godaddy jvm on jetty server.
keytool -import -noprompt -trustcacerts -alias godaddy -file /tmp/gd_bundle-g2-g1.crt -keystore /usr/lib/jvm/oracle-jdk1.7/jre/lib/security/cacerts
Comments
Post a Comment