ageorge (IKON Science Ltd) asked a question.
Recreate javax.net.ssl.SSLHandshakeException: PKIX path building failed
Hello,
We have a client who is getting javax.net.ssl.SSLHandshakeException: PKIX path building failed: when attempting to connect to a cloud license server. My problem is, we cannot recreate the issue internally. We have a couple of recommended options to attempt to fix the issue - option 1: add the Revenera SSL certificate to the host computer; option 2: add the SSL certificate to the application JRE - but we cannot test either option.
Does anyone have a suggestion on how we can recreate this problem please?
Thanks.
Expand Post
Assuming you are using a Java XT kit: the issue is that Java sources root certificates from the trust store that comes as part of that Java installation. This means that if your end customers are running an old installation of Java then they won't have suitable certificates, and which is why you are unable to reproduce.
The simplest and best answer would be for the customer to update their Java installation which should include new certificates.
The alternative would be for them to manually add the necessary root certificate to their Java trust store using the keytool utility with the -importcert option.
Hope that helps.