Error "PKIX path building failed..." calling external endpoints from Clarity

Products

• Clarity PPM On Premise
• Clarity PPM SaaS

Issue/Introduction

It is possible to use Gel Scripts to call REST APIs of third-party systems to integrate with Clarity. But when attempting to do this for certain URLs, an error such as the following is thrown.

avax.net.ssl.SSLHandshakeException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

How do you resolve this?

Environment

Version: 15.9.0

Cause

This issue can be caused due to an invalid certificate chain, of the third-party system being called from Clarity.

Resolution

1. The certificate chain can be verified using a website such as SSL Server Test.
2. Look specifically at the "Chain Issues" section. It should be set to "None" for a successful integration to take place.