Getting error "sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException" while accessing WSO2 URL

Hi All,

We were accessing a third party URL of a WSO2 Identity server (13.92.186.254:9443/.../token) through Appian’s Integration object to get a OAuth token. And while testing the URL we are receiving the below error.

Error Message:

 Failed to connect to xx.xx.xxx.xxx:9443/.../token sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

Can anyone let me know if you have faced this kind of error before.

Regards,

Balaji.R

  Discussion posts and replies are publicly visible

Parents
  • whenever you see an error message that has the keyword "sun.security and PKIS" it has to do with SSL cert not being installed on both the platforms that are trying to do a handshake... please make sure that you install the public SSL cert from the SSO server into Appian by going to admin console in Appian and clicking on Install Certs and adding that cert file. You can get the cert using the openssl tool. Also this is a two way thing. So you have to extract the SSL cert from the jboss server or web server of Appian and merge it into the java_jdk_home/security/lib/cacerts file. You can google up more info on the commands to use to install the cert into the cacerts file
Reply
  • whenever you see an error message that has the keyword "sun.security and PKIS" it has to do with SSL cert not being installed on both the platforms that are trying to do a handshake... please make sure that you install the public SSL cert from the SSO server into Appian by going to admin console in Appian and clicking on Install Certs and adding that cert file. You can get the cert using the openssl tool. Also this is a two way thing. So you have to extract the SSL cert from the jboss server or web server of Appian and merge it into the java_jdk_home/security/lib/cacerts file. You can google up more info on the commands to use to install the cert into the cacerts file
Children