RA Web Service Job aborting with SSL error "unable to find valid certification path to requested target"

Products

• CA Automic Applications Manager (AM)

Issue/Introduction

When running an RA Web Service SOAP or REST Job, it may fail with the below SSL error:

An error occured - while sending the request
javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

******************************************* End of job log *******************************************

Job Aborted: : sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

Environment

Applications Manager 9.x

Cause

This occurs when the Java environment does not have a proper CA certificate path to the HTTPS server to verify that it is a valid website. 

Resolution

You may need to retrieve the Root and/or intermediary certificates from the HTTPS site, and import them into Java's cacerts file. This should be performed on the Java install and server where the RA Webservice Agent is installed.

Once certificates are available, copy them to the same server as the RA Web Service Agent server and run the following command to import each certificate (once for Root certificate and once for each intermediary certificate):

keytool -import -trustcacerts -keystore path/to/cacerts -storepass changeit  -alias aliasName -file path/to/certificate.cer

 

If needed, refer to your OS admin.