Hello, I am using http query smart service to consume a WSDL, it was

harisha over 9 years ago

Hello,

I am using http query smart service to consume a WSDL, it was working fine, but recently that server have got SSL installed, and the url is changed from http to https, and when i run a instance, I get the below error:

sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

Let me know if we need to import the Client SSL certificate.

Regards,
Harish.

Discussion posts and replies are publicly visible

0 Eduardo Fuentes
Appian Employee
over 9 years ago

It seems your certificate is a self signed certificate and not one from a trusted CA (e.g. Verysign, GoDaddy, etc). If that's the case yes, you need import it.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 harisha over 9 years ago

Eduardo, Okay, I will import the certification and will try it once with http query and will update you accordingly.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 harisha over 9 years ago

Eduardo,

We need to import the SSL cert in PEM format in Admin console?
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 Eduardo Fuentes
Appian Employee
over 9 years ago

I am not sure if you will be able to import it in the admin console given it's a self signed certificate. See if you can transform it to a PEM and import it. If the import fails because it's a self signed cert then you'll have to import it in Java (the JDK) in its cacerts trust store where the application server is running.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 harisha over 9 years ago

When I tried to import the pem file through admin console without password, then it is throwing an error, I have asked the respective team to provide the pem file along with the private key password.
If still that doesnt work, then I will import it in the java jdk.
Let me know your thoughts.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 Eduardo Fuentes
Appian Employee
over 9 years ago

Sounds like a good plan. I agree.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 harisha over 9 years ago

Hello Eduardo,

The SSL for the 3rd party system, is from Internal CA, and it is not a self signed certificate, So do I need to install that cert in the application server and then try integration.

Also, I have requested them if they can provide us the certificate with private key password, But this cert is not a trusted one.

Let me know your thougths.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 Eduardo Fuentes
Appian Employee
over 9 years ago

Yes, basically an internal CA signing the certificate is pretty much the same self-signed certificate. Try importing it on the app server. This only applies for on-premise installations (i.e. NON-Cloud)
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 harisha over 9 years ago

Hello Eduardo,

I have installed the certificate on the server where weblogic is installed, but still see the below error:
Title: Error Calling httpQuery, Message: Failed to connect to vmrchgpttstws01/.../WSLogin.asmx, Details: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

Let me know how can I get this working, As before this SSL implemented it was working fine.

regards,
Harish.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 Eduardo Fuentes
Appian Employee
over 9 years ago

Did you restart Weblogic?
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel