Getting the 'PKIX path building failed' exception with java help over HTTPS

["Goel, Rajesh" <ra...@ipolicynetworks.com>]

Getting the following exception (PKIX path building failed) when running
the java help server side demo over the Https.

 

The Environment is:

 

Java Help version: 2.05

Java Version: 1.5.0_19-b02, mixed mode, sharing)

Tomcat Version: 6.x (have tried on 5.5.x, it is also not working on it)

Using the following connector in server.xml:

            <Connector
protocol="org.apache.coyote.http11.Http11NioProtocol"

           port="8443" minSpareThreads="5" maxSpareThreads="75"

           enableLookups="true" disableUploadTimeout="true" 

           acceptCount="100"  maxThreads="200"

           scheme="https" secure="true" SSLEnabled="true"

           keystoreFile="${user.home}/.keystore" keystorePass="changeit"

           clientAuth="false" sslProtocol="TLS"/>

 

 

 

HTTP Status 500 - 

 

------------------------------------------------------------------------
--------

 

type Exception report

 

message 

 

description The server encountered an internal error () that prevented
it from fulfilling this request.

 

exception 

 

org.apache.jasper.JasperException: java.lang.RuntimeException: Could not
parse

Got an IOException (sun.security.validator.ValidatorException: PKIX path
building failed:
sun.security.provider.certpath.SunCertPathBuilderException: unable to
find valid certification path to requested target)

Parsing failed for null

 
org.apache.jasper.servlet.JspServletWrapper.handleJspException(JspServle
tWrapper.java:522)

 
org.apache.jasper.servlet.JspServletWrapper.service(JspServletWrapper.ja
va:416)

 
org.apache.jasper.servlet.JspServlet.serviceJspFile(JspServlet.java:342)

 
org.apache.jasper.servlet.JspServlet.service(JspServlet.java:267)

            javax.servlet.http.HttpServlet.service(HttpServlet.java:717)

 

 

root cause 

 

java.lang.RuntimeException: Could not parse

Got an IOException (sun.security.validator.ValidatorException: PKIX path
building failed:
sun.security.provider.certpath.SunCertPathBuilderException: unable to
find valid certification path to requested target)

Parsing failed for null

 
javax.help.tagext.ValidateTag.createHelpSet(ValidateTag.java:155)

 
javax.help.tagext.ValidateTag.validateHelpSet(ValidateTag.java:123)

 
javax.help.tagext.ValidateTag.doStartTag(ValidateTag.java:82)

            org.apache.jsp.index_jsp._jspService(index_jsp.java:87)

 
org.apache.jasper.runtime.HttpJspBase.service(HttpJspBase.java:70)

            javax.servlet.http.HttpServlet.service(HttpServlet.java:717)

 
org.apache.jasper.servlet.JspServletWrapper.service(JspServletWrapper.ja
va:374)

 
org.apache.jasper.servlet.JspServlet.serviceJspFile(JspServlet.java:342)

 
org.apache.jasper.servlet.JspServlet.service(JspServlet.java:267)

            javax.servlet.http.HttpServlet.service(HttpServlet.java:717)

 

 

note The full stack trace of the root cause is available in the Apache
Tomcat/6.0.20 logs.

 

 

Thanks & Regards,

 

Rajesh Goel | iPolicy Networks | Tech Mahindra

Tel: Office: +91-120-256-7001 | Extn: 1216

Email: ragoel@iPolicyNetworks.com

 



"DISCLAIMER: 
This message is proprietary to iPolicy Networks-Security Products division of Tech Mahindra Limited and is intended solely for the use of the individuals to whom it is addressed. It may contain privileged or confidential information and should not be circulated or used for any purpose other than for what is intended. If you have received this message in error, please notify the originator immediately. If you are not the intended recipient, you are notified that you are strictly prohibited from using, copying, altering, or disclosing the contents of this message. iPolicy Networks-Security Products division of Tech Mahindra Limited accepts no responsibility for loss or damage arising from the use of the information transmitted by this email including damage from virus."

Re: Getting the 'PKIX path building failed' exception with java help over HTTPS

[Christopher Schultz <ch...@christopherschultz.net>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Rajesh,

On 8/4/2009 7:38 AM, Goel, Rajesh wrote:
> Getting the following exception (PKIX path building failed) when running
> the java help server side demo over the Https.
> 
> Java Version: 1.5.0_19-b02, mixed mode, sharing)

I'll assume that these are correct:

>            keystoreFile="${user.home}/.keystore" keystorePass="changeit"

[snip]

> Got an IOException (sun.security.validator.ValidatorException: PKIX path
> building failed:
> sun.security.provider.certpath.SunCertPathBuilderException: unable to
> find valid certification path to requested target)

Are you using a self-signed SSL certificate or something like that? I
don't recognize this particular message, but it could be due to a
self-signed certificate, or if the server is using one of those
new-fangled EV certs (which require not one but /two/ intermediate certs).

> Parsing failed for null

That doesn't look good. ^^^^

Can you post more of your server.xml configuration? I'm suspicious about
that NULL up there. Also, which exact version of TC 6.x are you using?

- -chris
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAkp4ZXsACgkQ9CaO5/Lv0PBhogCgiikkpkReebJGBXp/Vxj+KXOM
D8cAoJEkNtj10kIU1bU49EflZhSbkO9g
=sneh
-----END PGP SIGNATURE-----

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org