ERROR [xfire.transport.http.HttpChannel] javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requ

[lance_lyons]

Hi,

We are getting  the error.  

ERROR [xfire.transport.http.HttpChannel] javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target.

when trying to login to crowd console.

We dont have any apps connected other than the crowd apps.

this started after we moved a previous working crowd install to a new machine, new url and same db server.

We have configured the crowd properties file to use the new URL that we have crowd.ourcompany.com

we created certs using both openssl and importing into the java keystore

and we created using the recommended  keytool -genkey -alias tomcat -keyalg RSA    approach and importing the resulting certificate into the java keystore.

what am I missing.  We have a cert in the Java key store (%java_home%\lib\security\cacerts file)

we are just trying to login to the crowd console and get this error.

[Bruno Vincent]

Hi,

Did you update ALL crowd.properties and build.properties files as detailed on this page?

crowd_ssl.png

crowd_ssl.png ‏50 KB