Plugin endevor eclipse https error while adding Endevor repository
Article ID: 121305
Updated On:
Products
Issue/Introduction
Trying to add a repository with the Endevor Eclipse plugin using the SSL port to connect to the Endevor Web Services fails with SSL handshake message
Plugin endevor eclipse https error while adding endevor repository, error
javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed:
sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
at sun.security.ssl.Alerts.getSSLException(Alerts.java:192)
...
The same operation works fine if using the non-SSL port to connect to the Endevor Web Services
Also, connecting to the Endevor Web services SSL port using the web browser from the same machine works fine
Environment
Component: ENDBAS
Resolution
This error means that the Java VM where the Eclipse platform runs is missing the certificates needed to trust the Tomcat instance that runs the Web Services in order to establish a SSL connection. However, the certificates are available in the Windows certificate store so that the web browser may connect to the port via SSL.
The simplest way to fix the issue is to have the JVM use the Windows trust store, which is the same used by the web browser.
There are two options to override the default trustStoreType for the JVM:
1 - Only for the particular JVM running the Eclipse IDE
This is done by editing the Eclipse configuration file.
- For the Eclipse IDE, the file name is eclipse.ini.
- For the IBM Explorer for z/OS (z/OS Explorer), the file is zosexplorer.ini.
You need to add the following line at the end of the file, at any place after the '-vmargs' line which starts the parameters passed to the JVM
-Djavax.net.ssl.trustStoreType=Windows-ROOT
2 - As a global default for all the JVMs running in the Windows box
Open the Java Control Panel. Click "Java" tab and then "View..." button. Add the following runtime parameter, either on User level or System level:
-Djavax.net.ssl.trustStoreType=Windows-ROOT
Feedback
