AnsweredAssumed Answered

PKIX path building failed error on Form Validation

Question asked by Tim Willemstein on Jun 12, 2018
Latest reply on Jun 15, 2018 by Tim Willemstein
  • Comment • 2

Hi Community,

 

We have been using JSP validation on our forms since version 6.9. However after our upgrade to version 7.0.2 P05HF03. we keep receiving the following error when form validation is executed:

 

Exception on external validation of form https://xxxx.xxxx.xxxx:8443/aveksa/custom/jsp/validateCreatexxxyyyy.jsp
javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

 

At first we thought that this might due to fact that we didn't have the certificate chain from our signed server certificate in the cacerts. But after importing the chain and restarting the server we still have the same errors for the form validation.

 

We also noticed that the same issue occurs when using the 'Drown Down Select with Web Services' with an internal RSA IGL webservice call.

 

Is there anything we might be missing or has anyone else experienced the same issue?

 

Kind regards, Tim

Jayson Abrams
Jayson Abrams Jun 13, 2018 11:53 AM
Correct Answer

Hello Tim,

 

I found that there are 2-3 cacert stores that you need to add this to. Sometimes doing the java_home store won't cover it.

 

i.e. 

 

  • ./home/oracle/fulfillment-handlers/security/cacerts
  • ./usr/lib/jvm/java-1.8.0-openjdk-1.8.0.0.x86_64/jre/lib/security/cacerts

 

if you run the following command on your server it should show you the locations of cacerts. But you should only need to add it to JAVA HOME and /home/oracle locations.

 

find ./ -name '*cacerts*'

 

Hope this helps

See the reply in context
No one else had this question

Outcomes