Reference issue 36816596
After upgrading Spectrum to 25.4.3 the webapp fails to launch.
We get a generic popup
webapp: problem with starting the application. please check the logs for more details.
We see this message in the webtomcat catalina.out
<SPECROOT>/webtomcat/logs/catalina.out
2026-02-25 13:03:53,128 INFO [Webswing Process Handler] (SwingProcessImpl.java:197) [oneclickwebapp_anonym_74d5cd594fd4_1772042632013] Caused by: javax.net.ssl.SSLHandshakeException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
Spectrum :: All Supported Versions
The
<Connector></Connector>
Value defined in the
<SPECROOT>/webtomcat/conf/server.xml
Includes an entry for the keystore, but does not contain an entry for the truststore
Edit the "vmArgs" line in the file
<SPECROOT>/webtomcat/bin/webswing-apps.config
And add
-Djavax.net.ssl.trustStore=${SPECROOT}/custom/keystore/cacerts -Djavax.net.ssl.trustStorePassword=changeit
E.G.
Change:
"vmArgs" : "-Xmx1024m -Djavaws.cfg.jauthenticator=true -DbrowserIp=${clientIp} -Dsun.awt.noerasebackground=true -Dwebswing.swingSystemSelectionEnabled=false -Duser.timezone=${clientTimeZone} -Dtomcat.server.xml=${SPECROOT}/tomcat/conf/server.xml --add-opens=java.base/javax.crypto=ALL-UNNAMED",
To:
"vmArgs" : "-Xmx1024m -Djavaws.cfg.jauthenticator=true -DbrowserIp=${clientIp} -Dsun.awt.noerasebackground=true -Dwebswing.swingSystemSelectionEnabled=false -Duser.timezone=${clientTimeZone} -Dtomcat.server.xml=${SPECROOT}/tomcat/conf/server.xml -Djavax.net.ssl.trustStore=${SPECROOT}/custom/keystore/cacerts -Djavax.net.ssl.trustStorePassword=changeit --add-opens=java.base/javax.crypto=ALL-UNNAMED",
Restart webtomcat
<SPECROOT>/webtomcat/bin/stopWebTomcat.sh
<SPECROOT>/webtomcat/bin/startWebTomcat.sh