ValidatorException: PKIX path building failed

[hellin_zhang]

No error, in windows; but under the CentOS5.5_64 , follow....
THANK YOU!
--------------------------------------------------------------------------
# keytool -import -v -file mail.mydomain.com.cer -keypass changeit -keystore cacerts -

storepass changeit -alias mail.mydomain.com

# java -jar zimbra-agent.jar
log4j:WARN No appenders could be found for logger (zimbra.misc).
log4j:WARN Please initialize the log4j system properly.
log4j:WARN See Apache log4j 1.2 - Frequently Asked Technical Questions for more info.
Exception in thread "main" com.zimbra.common.zclient.ZClientException: invoke

sun.security.validator.ValidatorException: PKIX path building failed:

sun.security.provider.certpath.SunCertPathBuilderE xception: unable to find valid

certification path to requested target, server: mail.mydomain.com
ExceptionId:main:1314864446450:afc3bcb9344192c3
Code:zclient.IO_ERROR
at com.zimbra.common.zclient.ZClientException.IO_ERRO R(ZClientException.java:45)
at com.zimbra.cs.account.soap.SoapProvisioning.invoke (SoapProvisioning.java:326)
at com.zimbra.cs.account.soap.SoapProvisioning.soapAd minAuthenticate

(SoapProvisioning.java:274)
at com.zimbra.client.domain.DomainServiceImpl.<init>( DomainServiceImpl.java:26)
at com.zimbra.client.domain.DomainServiceImpl.<init>( DomainServiceImpl.java:33)
at com.zimbra.client.Test.main(Test.java:24)
Caused by: javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException:

PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderE xception:

unable to find valid certification path to requested target
at com.sun.net.ssl.internal.ssl.Alerts.getSSLExceptio n(Alerts.java:174)
at com.sun.net.ssl.internal.ssl.SSLSocketImpl.fatal(S SLSocketImpl.java:1623)
at com.sun.net.ssl.internal.ssl.Handshaker.fatalSE(Ha ndshaker.java:198)
at com.sun.net.ssl.internal.ssl.Handshaker.fatalSE(Ha ndshaker.java:192)
at com.sun.net.ssl.internal.ssl.ClientHandshaker.serv erCertificate

(ClientHandshaker.java:1074)
at com.sun.net.ssl.internal.ssl.ClientHandshaker.proc essMessage

(ClientHandshaker.java:128)
at com.sun.net.ssl.internal.ssl.Handshaker.processLoo p(Handshaker.java:529)
at com.sun.net.ssl.internal.ssl.Handshaker.process_re cord(Handshaker.java:465)
at com.sun.net.ssl.internal.ssl.SSLSocketImpl.readRec ord(SSLSocketImpl.java:884)
at com.sun.net.ssl.internal.ssl.SSLSocketImpl.perform InitialHandshake

(SSLSocketImpl.java:1120)
at com.sun.net.ssl.internal.ssl.SSLSocketImpl.writeRe cord(SSLSocketImpl.java:623)
at com.sun.net.ssl.internal.ssl.AppOutputStream.write (AppOutputStream.java:59)
at java.io.BufferedOutputStream.flushBuffer(BufferedO utputStream.java:65)
at java.io.BufferedOutputStream.flush(BufferedOutputS tream.java:123)
at java.io.FilterOutputStream.flush(FilterOutputStrea m.java:123)
at org.apache.commons.httpclient.methods.StringReques tEntity.writeRequest

(StringRequestEntity.java:146)
at org.apache.commons.httpclient.methods.EntityEnclos ingMethod.writeRequestBody

(EntityEnclosingMethod.java:499)
at org.apache.commons.httpclient.HttpMethodBase.write Request

(HttpMethodBase.java:2114)
at org.apache.commons.httpclient.HttpMethodBase.execu te(HttpMethodBase.java:1096)
at org.apache.commons.httpclient.HttpMethodDirector.e xecuteWithRetry

(HttpMethodDirector.java:398)
at org.apache.commons.httpclient.HttpMethodDirector.e xecuteMethod

(HttpMethodDirector.java:171)
at org.apache.commons.httpclient.HttpClient.executeMe thod(HttpClient.java:397)
at com.zimbra.common.soap.SoapHttpTransport.invoke(So apHttpTransport.java:243)
at com.zimbra.common.soap.SoapHttpTransport.invoke(So apHttpTransport.java:164)
at com.zimbra.common.soap.SoapTransport.invoke(SoapTr ansport.java:397)
at com.zimbra.common.soap.SoapTransport.invoke(SoapTr ansport.java:360)
at com.zimbra.cs.account.soap.SoapProvisioning.invoke (SoapProvisioning.java:322)
... 4 more
Caused by: sun.security.validator.ValidatorException: PKIX path building failed:

sun.security.provider.certpath.SunCertPathBuilderE xception: unable to find valid

certification path to requested target
at sun.security.validator.PKIXValidator.doBuild(PKIXV alidator.java:325)
at sun.security.validator.PKIXValidator.engineValidat e(PKIXValidator.java:219)
at sun.security.validator.Validator.validate(Validato r.java:218)
at com.sun.net.ssl.internal.ssl.X509TrustManagerImpl. validate

(X509TrustManagerImpl.java:126)
at com.sun.net.ssl.internal.ssl.X509TrustManagerImpl. checkServerTrusted

(X509TrustManagerImpl.java:209)
at com.sun.net.ssl.internal.ssl.X509TrustManagerImpl. checkServerTrusted

(X509TrustManagerImpl.java:249)
at com.sun.net.ssl.internal.ssl.ClientHandshaker.serv erCertificate

(ClientHandshaker.java:1053)
... 26 more
Caused by: sun.security.provider.certpath.SunCertPathBuilderE xception: unable to find valid

certification path to requested target
at sun.security.provider.certpath.SunCertPathBuilder. engineBuild

(SunCertPathBuilder.java:174)
at java.security.cert.CertPathBuilder.build(CertPathB uilder.java:238)
at sun.security.validator.PKIXValidator.doBuild(PKIXV alidator.java:320)
... 32 more

[hellin_zhang]

zcs-7.1.1_GA_3196.RHEL5_64
---------------------------------------------------------
private final SoapProvisioning mSoapProv ;
public User()throws ServiceException{
try {
mSoapProv = new SoapProvisioning();
mSoapProv.soapSetURI("https://mail.mydomain.com:7071/service/admin/soap/");
mSoapProv.soapAdminAuthenticate("admin", "admin123");
} catch (ServiceException ex) {
ZimbraLog.test.error("Unable to create SOAP Provisioning.", ex);
throw ex;
}
}

[billbrasky66]

You're probably using a self-signed SSL certificate OR the CA that issued your SSL certificate is not in the default Java registry. I recently ran into a similar issue, see this:

SSL - atmos-java - Java connector for EMC Atmos Cloud Storage Service - Google Project Hosting

There might also be a way to disable certificate validation.