KB-1721 Email polling fails with "PKIX path validation failed" error

Parmida Borhani — Fri, 21 Sep 2018 06:21:54 GMT

Current Revision posted to Appian Knowledge Base by Parmida Borhani on 9/21/2018 6:21:54 AM

This article does not apply to Appian Cloud environments.

Symptoms

Polling the email server fails with the following error observed in the <JBOSS_HOME>\standalone\log\server.log:

ERROR com.appiancorp.ra.emailpoller.MailActivation - An error occurred while
attempting to open the mailbox; no mail will be Fetched. javax.mail.MessagingException:
sun.secur1ty.va idator.Va1idatorException: PKIX path vaiidation Faiied:
java.security.cert.CertPathVa1idatorException: Path does not chain with any of the trust anchors; nestedexception is: javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path validation failed

Cause

A self signed certificate was updated on the email server but no action was taken on the Appian side to trust this certificate.

Action

Update the certificate in Appian by importing into the trusted keystore of the JDK. To do so, follow the Action items outlined in KB-1187.

Affected Versions

This article applies to all versions of Appian.

Last Reviewed: September 2018

Tags: email, infrastructure, Certificates, SSL

DRAFT KB-XXXX Email polling fails with "PKIX path validation failed" error

Parmida Borhani — Fri, 21 Sep 2018 02:21:28 GMT

Revision 7 posted to Appian Knowledge Base by Parmida Borhani on 9/21/2018 2:21:28 AM

This article does not apply to Appian Cloud environments.

Symptoms

Polling the email server fails with the following error observed in the <JBOSS_HOME>\standalone\log\server.log:

ERROR com.appiancorp.ra.emailpoller.MailActivation - An error occurred while
attempting to open the mailbox; no mail will be Fetched. javax.mail.MessagingException:
sun.secur1ty.va idator.Va1idatorException: PKIX path vaiidation Faiied:
java.security.cert.CertPathVa1idatorException: Path does not chain with any of the trust anchors; nestedexception is: javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path validation failed

Cause

A self signed certificate was updated on the email server but no action was taken on the Appian side to trust this certificate.

Action

Update the certificate in Appian by importing into the trusted keystore of the JDK. To do so, follow the Action items outlined in KB-1187.

Affected Versions

This article applies to all versions of Appian.

Last Reviewed: September 2018

Tags: email, infrastructure, Certificates, SSL

DRAFT KB-XXXX Email polling fails with "PKIX path validation failed" error

Tejas Kargutkar — Thu, 20 Sep 2018 15:38:04 GMT

Revision 6 posted to Appian Knowledge Base by Tejas Kargutkar on 9/20/2018 3:38:04 PM

This article does not apply to Appian Cloud environments.

Symptoms

Polling the email server fails with the following error observed in the <JBOSS_HOME>\standalone\log\server.log:

ERROR com.appiancorp.ra.emailpoller.MailActivation - An error occurred while
attempting to open the mailbox; no mail will be Fetched. javax.mail.MessagingException:
sun.secur1ty.va idator.Va1idatorException: PKIX path vaiidation Faiied:
java.security.cert.CertPathVa1idatorException: Path does not chain with any of the trust anchors; nestedexception is: javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path validation failed

Cause

A self signed certificate was updated on the email server but no action was taken on the Appian side to trust this certificate.

Action

Update the certificate in Appian by importing into the trusted keystore of the JDK. To do so, follow the Action items outline in KB-1187.

Affected Versions

This article applies to all versions of Appian.

Last Reviewed: September 2018

Tags: email, infrastructure, emailPolling, SSL

DRAFT KB-XXXX Email polling fails with "PKIX path validation failed" error

Tejas Kargutkar — Wed, 12 Sep 2018 10:51:55 GMT

Revision 5 posted to Appian Knowledge Base by Tejas Kargutkar on 9/12/2018 10:51:55 AM

Symptoms

Polling the email server fails with the following error observed in the <JBOSS_HOME>\standalone\log\server.log:

ERROR com.appiancorp.ra.emailpoller.MailActivation - An error occurred while
attempting to open the mailbox; no mail will be Fetched. javax.mail.MessagingException:
sun.secur1ty.va idator.Va1idatorException: PKIX path vaiidation Faiied:
java.security.cert.CertPathVa1idatorException: Path does not chain with any of the trust anchors; nestedexception is: javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path validation failed

Cause

An SSL certificate was updated on the email server but this certificate was not updated on the Appian side.

Action

Update the certificate in Appian by importing into the trusted keystore of the JDK. To do so, follow the Action items outline in KB-1187.

Affected Versions

This article applies to all versions of Appian.

Last Reviewed: September 2018

Tags: email, infrastructure, emailPolling, SSL

DRAFT KB-XXXX Email polling fails with "PKIX path validation failed" error

Tejas Kargutkar — Fri, 07 Sep 2018 20:24:03 GMT

Revision 1 posted to Appian Knowledge Base by Tejas Kargutkar on 9/7/2018 8:24:03 PM

Symptoms

Polling the email server fails with "PKIX path validation failed" error observed in the <JBOSS_HOME>\standalone\log\server.log:

ERROR com.appiancorp.ra.emai1p011er.Mai1Activation - An error occurred while
attempting to open the mailbox; no mail will be Fetched. javax.mail.MessagingException:
sun.secur1ty.va idator.Va1idatorException: PKIX path vaiidation Faiied:
java.security.cert.CertPathVa1idatorException: Path does not chain with any of the trust anchors; nestedexception is: javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path validation failed

Cause

The SSL certificate was updated on the email server but this certificate was not updated on the Appian side.

Action

Update the certificate in Appian by importing into the trusted keystore of the JDK.

Run the following commands to import the certificates into the Java Keystore:

cd <JAVA_HOME>/bin
keytool -import -alias <webserver.example.com> -file <CERT_NAME>.crt -keystore "<JAVA_HOME>/jre/lib/security/cacerts"

Affected Versions

This article applies to all versions of Appian.

Last Reviewed: September 2018

Tags: email, infrastructure, emailPolling, SSL

DRAFT KB-XXXX Email polling fails with "PKIX path validation failed" error

Tejas Kargutkar — Fri, 07 Sep 2018 16:26:11 GMT

Revision 4 posted to Appian Knowledge Base by Tejas Kargutkar on 9/7/2018 4:26:11 PM

Symptoms

Polling the email server fails with the following error observed in the <JBOSS_HOME>\standalone\log\server.log:

ERROR com.appiancorp.ra.emailpoller.MailActivation - An error occurred while
attempting to open the mailbox; no mail will be Fetched. javax.mail.MessagingException:
sun.secur1ty.va idator.Va1idatorException: PKIX path vaiidation Faiied:
java.security.cert.CertPathVa1idatorException: Path does not chain with any of the trust anchors; nestedexception is: javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path validation failed

Cause

An SSL certificate was updated on the email server but this certificate was not updated on the Appian side.

Action

Update the certificate in Appian by importing into the trusted keystore of the JDK.

Run the following commands to import the certificates into the Java Keystore:

cd <JAVA_HOME>/bin
keytool -import -alias <webserver.example.com> -file <CERT_NAME>.crt -keystore "<JAVA_HOME>/jre/lib/security/cacerts"

Affected Versions

This article applies to all versions of Appian.

Last Reviewed: September 2018

Tags: email, infrastructure, emailPolling, SSL

DRAFT KB-XXXX Email polling fails with "PKIX path validation failed" error

Tejas Kargutkar — Fri, 07 Sep 2018 16:25:38 GMT

Revision 3 posted to Appian Knowledge Base by Tejas Kargutkar on 9/7/2018 4:25:38 PM

Symptoms

Polling the email server fails with the following error observed in the <JBOSS_HOME>\standalone\log\server.log:

ERROR com.appiancorp.ra.emai1p011er.Mai1Activation - An error occurred while
attempting to open the mailbox; no mail will be Fetched. javax.mail.MessagingException:
sun.secur1ty.va idator.Va1idatorException: PKIX path vaiidation Faiied:
java.security.cert.CertPathVa1idatorException: Path does not chain with any of the trust anchors; nestedexception is: javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path validation failed

Cause

An SSL certificate was updated on the email server but this certificate was not updated on the Appian side.

Action

Update the certificate in Appian by importing into the trusted keystore of the JDK.

Run the following commands to import the certificates into the Java Keystore:

cd <JAVA_HOME>/bin
keytool -import -alias <webserver.example.com> -file <CERT_NAME>.crt -keystore "<JAVA_HOME>/jre/lib/security/cacerts"

Affected Versions

This article applies to all versions of Appian.

Last Reviewed: September 2018

Tags: email, infrastructure, emailPolling, SSL

DRAFT KB-XXXX Email polling fails with "PKIX path validation failed" error

Tejas Kargutkar — Fri, 07 Sep 2018 16:25:21 GMT

Revision 2 posted to Appian Knowledge Base by Tejas Kargutkar on 9/7/2018 4:25:21 PM

Symptoms

Polling the email server fails with the following error observed in the <JBOSS_HOME>\standalone\log\server.log:

ERROR com.appiancorp.ra.emai1p011er.Mai1Activation - An error occurred while
attempting to open the mailbox; no mail will be Fetched. javax.mail.MessagingException:
sun.secur1ty.va idator.Va1idatorException: PKIX path vaiidation Faiied:
java.security.cert.CertPathVa1idatorException: Path does not chain with any of the trust anchors; nestedexception is: javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path validation failed

Cause

The SSL certificate was updated on the email server but this certificate was not updated on the Appian side.

Action

Update the certificate in Appian by importing into the trusted keystore of the JDK.

Run the following commands to import the certificates into the Java Keystore:

cd <JAVA_HOME>/bin
keytool -import -alias <webserver.example.com> -file <CERT_NAME>.crt -keystore "<JAVA_HOME>/jre/lib/security/cacerts"

Affected Versions

This article applies to all versions of Appian.

Last Reviewed: September 2018

Tags: email, infrastructure, emailPolling, SSL