Error : Oath flow with Social networking providers.: javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: No trusted certificate found.

Products

• SITEMINDER

Issue/Introduction

Customer configured OAuth Federation partnership with Social networking platforms but while performing  the request flow below error occurred while sending an OAuth message/Request token to the Google acting as IDP for the below use case.

1. Access the below URL.

         https://<server fqdn >/affwebservices/public/oauthtokenconsumer/Stgzayedawd810658359166?AuthzServerID=StgGoogle

2. After verifying the Authorization Server Info, It redirects to Google Login page.
3. User enters the credentials
4. After Successful Authentication from Google, Request redirects to Siteminder along with State Data Cookie values
5. The Siteminder/federation system verifies the authentication response, during the process of Authentication/Authorization, It is sending the OAuth message/request token to Google IDP but the request is failing with below and it is not reaching google.

[08/02/2021][14:43:42][3764][6476][166a7528-1420724c-0a1c918e-521c308d-100203c8-a1][MessageDispatcher.java][dispatchMessage][Dispatcher object thrown unknown exception while processing the message. Message: Connection has been shutdown: javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: No trusted certificate found.]
[08/02/2021][14:43:42][3764][6476][166a7528-1420724c-0a1c918e-521c308d-100203c8-a1][MessageDispatcher.java][dispatchMessage][Exception:
javax.net.ssl.SSLException: Connection has been shutdown: javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: No trusted certificate found
 at sun.security.ssl.SSLSocketImpl.checkEOF(SSLSocketImpl.java:1551)
 at sun.security.ssl.AppInputStream.read(AppInputStream.java:95)
 at java.io.DataInputStream.read(DataInputStream.java:100)

 

Environment

Release : 12.8.04

Component :

Resolution

Below steps followed to fix the issue with the certificate resolution.

1. Added  all the certificates and certificate chain to the JRE certificate store " cacerts" file.

under  java.home\lib\security

2. Fixed the policy store CDS by reimporting all the certificates.