Getting "sun.security.validator.ValidatorException: PKIX path building failed:" error while calling HTTPS service even after uploading the client certificate in Admin console.

Hi,

Am calling an external HTTPS service through integration object and while executing the integration object am getting the below error

Failed to connect to 13.92.186.254:9443/.../token" detail: "sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

I have uploaded the client certificate (Admin console -> Client Certificates) which I have received from the target system but even after uploading the client certificate in Appian, while triggering the service am getting the above error.

Can anyone help me understand, after uploading the Client Certificate in Appian do I need to pass any of the reference of the uploaded certificate (Serial Number, Thumbprint) with the REST call request.

Any help is much appreciated.

 

Regards,

Balaji.R

 

  Discussion posts and replies are publicly visible

Parents Reply Children
  • 0
    A Score Level 1
    in reply to Aditya
    Hi AdityaU,

    Thanks for the response, I understood from the response that I need to obtain a certificate from the target system which is signed from trusted authority and not self signed. From the link you provided I understood importing of the certificate to the JDK truststore is not possible as am using Appian cloud environment where running keytool command is not possible.

    I'll speak with the respective target system team and ask for certificate authorized from trusted authority. i'll keep you posted with the updates. Thanks.


    Regards,
    Balaji.R
  • 0
    A Score Level 1
    in reply to rp_balaji
    Hi AdityaU,

    Is it possible to load a *.pfx certificate into Appian, because I checked with certificate team which generates the certificate and I understand the *.pem certificate file will always be self signed and the *.pfx which they generate on top of the *.pem file will be signed from trusted authority.

    Please let me know if you have any suggestion for the above.


    Regards,
    Balaji.R
  • 0
    Certified Lead Developer
    in reply to rp_balaji
    Hi Balaji,

    Appian supports only .pem certificates. What you can do is obtain a .pfx certificate and then convert it into a .pem certificate(you will get a lot of options online to convert) and then check if it works out.