Question
Pegasystems Inc.
US
Last activity: 17 Jul 2017 11:15 EDT
Connect-SOAP in Pega 7.1.7 is calling an external webservice and failing with SSL handshake
Why am I getting this error trying to call an external webservice?
javax.net.ssl.SSLHandshakeException: com.ibm.jsse2.util.j: PKIX path building failed: java.security.cert.CertPathBuilderException: unable to find valid certification path to requested target
at com.ibm.jsse2.o.a(o.java:19)
at com.ibm.jsse2.SSLSocketImpl.a(SSLSocketImpl.java:689)
at com.ibm.jsse2.kb.a(kb.java:271)
at com.ibm.jsse2.kb.a(kb.java:516)
at com.ibm.jsse2.lb.a(lb.java:59)
at com.ibm.jsse2.lb.a(lb.java:274)
at com.ibm.jsse2.kb.s(kb.java:167)
at com.ibm.jsse2.kb.a(kb.java:484)
at com.ibm.jsse2.SSLSocketImpl.a(SSLSocketImpl.java:686)
at com.ibm.jsse2.SSLSocketImpl.h(SSLSocketImpl.java:704)
at com.ibm.jsse2.SSLSocketImpl.a(SSLSocketImpl.java:802)
at com.ibm.jsse2.k.write(k.java:15)
at java.io.BufferedOutputStream.flushBuffer(BufferedOutputStream.java:65)
at java.io.BufferedOutputStream.write(BufferedOutputStream.java:104)
at java.io.FilterOutputStream.write(FilterOutputStream.java:80)
at com.pega.apache.axis2.transport.http.AxisRequestEntity.writeRequest(AxisRequestEntity.java:89)
at com.pega.apache.commons.httpclient.methods.EntityEnclosingMethod.writeRequestBody(EntityEnclosingMethod.java:496)
at com.pega.apache.commons.httpclient.HttpMethodBase.writeRequest(HttpMethodBase.java:1974)
Why am I getting this error trying to call an external webservice?
javax.net.ssl.SSLHandshakeException: com.ibm.jsse2.util.j: PKIX path building failed: java.security.cert.CertPathBuilderException: unable to find valid certification path to requested target
at com.ibm.jsse2.o.a(o.java:19)
at com.ibm.jsse2.SSLSocketImpl.a(SSLSocketImpl.java:689)
at com.ibm.jsse2.kb.a(kb.java:271)
at com.ibm.jsse2.kb.a(kb.java:516)
at com.ibm.jsse2.lb.a(lb.java:59)
at com.ibm.jsse2.lb.a(lb.java:274)
at com.ibm.jsse2.kb.s(kb.java:167)
at com.ibm.jsse2.kb.a(kb.java:484)
at com.ibm.jsse2.SSLSocketImpl.a(SSLSocketImpl.java:686)
at com.ibm.jsse2.SSLSocketImpl.h(SSLSocketImpl.java:704)
at com.ibm.jsse2.SSLSocketImpl.a(SSLSocketImpl.java:802)
at com.ibm.jsse2.k.write(k.java:15)
at java.io.BufferedOutputStream.flushBuffer(BufferedOutputStream.java:65)
at java.io.BufferedOutputStream.write(BufferedOutputStream.java:104)
at java.io.FilterOutputStream.write(FilterOutputStream.java:80)
at com.pega.apache.axis2.transport.http.AxisRequestEntity.writeRequest(AxisRequestEntity.java:89)
at com.pega.apache.commons.httpclient.methods.EntityEnclosingMethod.writeRequestBody(EntityEnclosingMethod.java:496)
at com.pega.apache.commons.httpclient.HttpMethodBase.writeRequest(HttpMethodBase.java:1974)
at com.pega.apache.commons.httpclient.HttpMethodBase.execute(HttpMethodBase.java:994)
at com.pega.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(HttpMethodDirector.java:398)
at com.pega.apache.commons.httpclient.HttpMethodDirector.executeMethod(HttpMethodDirector.java:171)
at com.pega.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397)
at com.pega.apache.axis2.transport.http.AbstractHTTPSender.executeMethod(AbstractHTTPSender.java:629)
at com.pega.apache.axis2.transport.http.HTTPSender.sendViaPost(HTTPSender.java:193)
at com.pega.apache.axis2.transport.http.HTTPSender.send(HTTPSender.java:75)
at com.pega.apache.axis2.transport.http.CommonsHTTPTransportSender.writeMessageWithCommons(CommonsHTTPTransportSender.java:411)
at com.pega.apache.axis2.transport.http.CommonsHTTPTransportSender.invoke(CommonsHTTPTransportSender.java:233)
at com.pega.apache.axis2.engine.AxisEngine.send(AxisEngine.java:445)
at com.pega.apache.axis2.description.OutInAxisOperationClient.send(OutInAxisOperation.java:406)
at com.pega.apache.axis2.description.OutInAxisOperationClient.executeImpl(OutInAxisOperation.java:229)
at com.pega.apache.axis2.client.OperationClient.execute(OperationClient.java:165)
at com.pegarules.generated.activity.ra_action_invokeaxis2_ef847005fcd2daeddbdcbd42305c0be7.step14_circum0(ra_action_invokeaxis2_ef847005fcd2daeddbdcbd42305c0be7.java:3934)
at com.pegarules.generated.activity.ra_action_invokeaxis2_ef847005fcd2daeddbdcbd42305c0be7.perform(ra_action_invokeaxis2_ef847005fcd2daeddbdcbd42305c0be7.java:291)
... 106 more
Caused by:
com.ibm.jsse2.util.j: PKIX path building failed: java.security.cert.CertPathBuilderException: unable to find valid certification path to requested target
at com.ibm.jsse2.util.h.b(h.java:104)
at com.ibm.jsse2.util.h.b(h.java:14)
at com.ibm.jsse2.util.g.a(g.java:3)
at com.ibm.jsse2.pc.a(pc.java:11)
at com.ibm.jsse2.pc.checkServerTrusted(pc.java:18)
at com.ibm.jsse2.pc.b(pc.java:56)
at com.ibm.jsse2.lb.a(lb.java:602)
... 134 more
Caused by:
java.security.cert.CertPathBuilderException: unable to find valid certification path to requested target
at com.ibm.security.cert.PKIXCertPathBuilderImpl.buildCertPath(PKIXCertPathBuilderImpl.java:642)
at com.ibm.security.cert.PKIXCertPathBuilderImpl.engineBuild(PKIXCertPathBuilderImpl.java:357)
at java.security.cert.CertPathBuilder.build(CertPathBuilder.java:258)
at com.ibm.jsse2.util.h.b(h.java:108)
***Updated by moderator: Lochan to close post***
This post has been archived for educational purposes. Contents and links will no longer be updated. If you have the same/similar question, please write a new post.
Accepted Solution
okay. SSL debug helped determine the missing certificates and now the problem is solved.
Infosys
US
We are getting similar error while trying to consume SSL enabled error. Do we have exact steps how to create security profile. Also how to convert .cer file to jks file?
Pegasystems Inc.
AU
Hi Mandar,
I use keystore explorer software for creating keystore files(JKS or PKCS12) and add client certificates to the keystore ( if required ) .