PKIX path building failed seen in Polling Status in VNA swagger UI for AWS plugin

Products

• DX NetOps
• CA Virtual Network Assurance

Issue/Introduction

When polling the AWS plugin with VNA, we can see the following errors in Polling Status in the Virtual Network Assurance (VNA) swagger UI for the AWS plugin:

Unable to execute HTTP request: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

Environment

Virtual Network  Assurance all versions.

Cause

Missing intermediate certificate

Resolution

Add the following intermediate cert into the cacerts keystore of the JDK you are using with VNA:

File:

https://www.amazontrust.com/repository/Amazon-RSA-2048-M01.pem

Using

keytool -importcert -file <filename> -alias <alias> -keystore <path/to/cacarts>