"PKIX path building failed" using Gen COM Proxy URL in Java
search cancel

"PKIX path building failed" using Gen COM Proxy URL in Java

book

Article ID: 199091

calendar_today

Updated On:

Products

Gen Gen - Run Time Distributed

Issue/Introduction

After implementing a Gen 8.6 COM Proxy ASP https URL in Java application code received this error when attempting to execute the transaction:

javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

Using previous Gen 7.0 and Gen 8.0 versions of the COM Proxy, http URLs were used successfully. However, in Gen 8.6 it is required to use SSL and thus the https URL is being used.

Environment

Release : 8.6
Component : Gen Run Time, Proxies

Resolution

This error is not related to the COM Proxy itself.
It appears that the IIS website SSL certificate has not been loaded into the Java runtime (JRE) truststore being used by the Java program ("JAVA_HOME\lib\securty\cacerts").
For example: Stack Overflow > Resolving javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed Error?
Problem was resolved by installing the required SSL certificate(s) into the JRE truststore.