javax.net.ssl.SSLHandshakeException: java.security.cert.CertificateException: Invalid Server Certificate: server certificate could not be verified

Products

• CA Directory

Issue/Introduction

When trying to access User directory via JXplorer using SSL + user + password , is showing :

 

javax.naming.CommunicationException: simple bind failed: ##.###.##.##.###:1234 [Root exception is javax.net.ssl.SSLHandshakeException: java.security.cert.CertificateException: Invalid Server Certificate: server certificate could not be verified,

and the CA certificate is missing from the certificate chain. raw error: sun.security.validator.ValidatorException: PKIX path building failed:

sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target]

Environment

Release : 14.0

Component : CA Directory

Cause

The current certificate is not trusted

Resolution

1. Launch JXplorer and go to "Security" Menu and Select "Trusted Servers and CAs"

2. "Manage Your Trusted Server Certificates" Windows opens . Click on "Add Certificate" button , browse and Select the certificate .crt file.

3. Validate the Certificate , Check Certification Path and check the “certificate status”.

4. Click on "Ok" button and “Enter the Key Store Password”

Password by default : changeit

5. click on Accept to finish

Additional Information

DXcertgen Tool -- Generate and Work with Certificates