Pkix Path Building Failed in Eclipse
I'm Working with Liferay and I'm Using Eclipse, and Running a Client/Server Model, Using an Encrypted Socket (Ssl). Currently, My Application Is Running the...
i'm working with Liferay and i'm using eclipse, and running a client/server model, using an encrypted socket (SSL).
Currently, my application is running the client/server connection ok when I run the application in batch mode but when i try to start the server in Eclipse the application is giving me error
javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
at sun.security.ssl.Alerts.getSSLException(Alerts.java:192)
I already use the InstallCert.java and copy the jssecacerts into
%JAVA_HOME%/jdk_version/jre/lib/security
but is still giving me errors. I've also checked the certificate (keytool -v -list) and installed manually in the root CAs trusted. What can be the problem? Thanks!
3 Answers
Please refer this answer for your reference.
No need of passing any VM arguments after you successfully installed certificate of the site which is giving you PKIX error!
But key is to find JRE which is giving you this error! So make sure about 2 things:
- you install certificate to
cacertsfile of JRE which Eclipse is using - certificate is root certificate
Try passing the certifacate path in VM arguments when running in eclipse
-Djavax.net.ssl.trustStore="PATH_TO_jssecacerts"
tried and tested method. if you face this certificate issue with eclipse plugin installation do below steps:
note the url of the plugin site you are facing issue.
hit that url in browser.
go to lock symbol on left side and click to view certificate
go to details and do file export in Base 64.
better to save cert in eclipse directory.
open cmd with administrator
go to jdk directory you are using to run eclipse and find keytool
run below command
keytool -keystore ..\lib\security\cacerts -import -alias example2 -file <path_to_expotrted cert in step 4>use password - changeitgo to eclipse.ini and add below commands -Djavax.net.ssl.trustStore=C:\Program Files\Java\jdk-11\lib\security\cacerts
make sure to restart eclipse after every plugin site certificate added to keystore.
Chloe Bennett explores the intersection of pop culture, streaming entertainment, digital trends, and contemporary lifestyle. Her weekly commentary reaches thousands of culture enthusiasts.
