search cancel

Datadriven service fails in SSL enabled environment

book

Article ID: 106133

calendar_today

Updated On:

Products

CA Application Test CA Continuous Application Insight (PathFinder) Service Virtualization

Issue/Introduction

A known-good virtual service was converted to data-driven. When used we receive the message
javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

in both the vse log and inspection view 

Environment

Any supported DevTest releases.

SSL enabled for registry web connections (API on port 1505 by default)

Cause

When executing a data-driven virtual service, the VSE will contact the Registry's API to obtain data. 

This API is accessed over SSL, and the VSE does not trust the certificate presented. 

Resolution

The truststore used for this connection is the cacerts located in DEVTEST_HOME/jre/lib/security.

In order to trust this connection, the relevant root and intermediate certificates should be added to this file.

Should a self-signed certificate be used, this should be added in lieu of the above.