DRAFT KB-XXXX Email polling fails with "PKIX path validation failed" error

Symptoms

Polling the email server fails with the following error observed in the <JBOSS_HOME>\standalone\log\server.log:

ERROR com.appiancorp.ra.emailpoller.MailActivation - An error occurred while
attempting to open the mailbox; no mail will be Fetched. javax.mail.MessagingException:
sun.secur1ty.va idator.Va1idatorException: PKIX path vaiidation Faiied:
java.security.cert.CertPathVa1idatorException: Path does not chain with any of the trust anchors; nestedexception is: javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path validation failed

Cause

An SSL certificate was updated on the email server but this certificate was not updated on the Appian side.

Action

Update the certificate in Appian by importing into the trusted keystore of the JDK.

Run the following commands to import the certificates into the Java Keystore:

cd <JAVA_HOME>/bin
keytool -import -alias <webserver.example.com> -file <CERT_NAME>.crt -keystore "<JAVA_HOME>/jre/lib/security/cacerts"

Affected Versions

This article applies to all versions of Appian.

Last Reviewed: September 2018