Results 1 to 3 of 3

Thread: ValidatorException: PKIX path building failed

  1. #1
    hellin_zhang is offline Member
    Join Date
    Jul 2011
    Posts
    13
    Rep Power
    3

    Default ValidatorException: PKIX path building failed

    No error, in windows; but under the CentOS5.5_64 , follow....
    THANK YOU!
    --------------------------------------------------------------------------
    # keytool -import -v -file mail.mydomain.com.cer -keypass changeit -keystore cacerts -

    storepass changeit -alias mail.mydomain.com

    # java -jar zimbra-agent.jar
    log4j:WARN No appenders could be found for logger (zimbra.misc).
    log4j:WARN Please initialize the log4j system properly.
    log4j:WARN See Apache log4j 1.2 - Frequently Asked Technical Questions for more info.
    Exception in thread "main" com.zimbra.common.zclient.ZClientException: invoke

    sun.security.validator.ValidatorException: PKIX path building failed:

    sun.security.provider.certpath.SunCertPathBuilderE xception: unable to find valid

    certification path to requested target, server: mail.mydomain.com
    ExceptionId:main:1314864446450:afc3bcb9344192c3
    Code:zclient.IO_ERROR
    at com.zimbra.common.zclient.ZClientException.IO_ERRO R(ZClientException.java:45)
    at com.zimbra.cs.account.soap.SoapProvisioning.invoke (SoapProvisioning.java:326)
    at com.zimbra.cs.account.soap.SoapProvisioning.soapAd minAuthenticate

    (SoapProvisioning.java:274)
    at com.zimbra.client.domain.DomainServiceImpl.<init>( DomainServiceImpl.java:26)
    at com.zimbra.client.domain.DomainServiceImpl.<init>( DomainServiceImpl.java:33)
    at com.zimbra.client.Test.main(Test.java:24)
    Caused by: javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException:

    PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderE xception:

    unable to find valid certification path to requested target
    at com.sun.net.ssl.internal.ssl.Alerts.getSSLExceptio n(Alerts.java:174)
    at com.sun.net.ssl.internal.ssl.SSLSocketImpl.fatal(S SLSocketImpl.java:1623)
    at com.sun.net.ssl.internal.ssl.Handshaker.fatalSE(Ha ndshaker.java:198)
    at com.sun.net.ssl.internal.ssl.Handshaker.fatalSE(Ha ndshaker.java:192)
    at com.sun.net.ssl.internal.ssl.ClientHandshaker.serv erCertificate

    (ClientHandshaker.java:1074)
    at com.sun.net.ssl.internal.ssl.ClientHandshaker.proc essMessage

    (ClientHandshaker.java:128)
    at com.sun.net.ssl.internal.ssl.Handshaker.processLoo p(Handshaker.java:529)
    at com.sun.net.ssl.internal.ssl.Handshaker.process_re cord(Handshaker.java:465)
    at com.sun.net.ssl.internal.ssl.SSLSocketImpl.readRec ord(SSLSocketImpl.java:884)
    at com.sun.net.ssl.internal.ssl.SSLSocketImpl.perform InitialHandshake

    (SSLSocketImpl.java:1120)
    at com.sun.net.ssl.internal.ssl.SSLSocketImpl.writeRe cord(SSLSocketImpl.java:623)
    at com.sun.net.ssl.internal.ssl.AppOutputStream.write (AppOutputStream.java:59)
    at java.io.BufferedOutputStream.flushBuffer(BufferedO utputStream.java:65)
    at java.io.BufferedOutputStream.flush(BufferedOutputS tream.java:123)
    at java.io.FilterOutputStream.flush(FilterOutputStrea m.java:123)
    at org.apache.commons.httpclient.methods.StringReques tEntity.writeRequest

    (StringRequestEntity.java:146)
    at org.apache.commons.httpclient.methods.EntityEnclos ingMethod.writeRequestBody

    (EntityEnclosingMethod.java:499)
    at org.apache.commons.httpclient.HttpMethodBase.write Request

    (HttpMethodBase.java:2114)
    at org.apache.commons.httpclient.HttpMethodBase.execu te(HttpMethodBase.java:1096)
    at org.apache.commons.httpclient.HttpMethodDirector.e xecuteWithRetry

    (HttpMethodDirector.java:398)
    at org.apache.commons.httpclient.HttpMethodDirector.e xecuteMethod

    (HttpMethodDirector.java:171)
    at org.apache.commons.httpclient.HttpClient.executeMe thod(HttpClient.java:397)
    at com.zimbra.common.soap.SoapHttpTransport.invoke(So apHttpTransport.java:243)
    at com.zimbra.common.soap.SoapHttpTransport.invoke(So apHttpTransport.java:164)
    at com.zimbra.common.soap.SoapTransport.invoke(SoapTr ansport.java:397)
    at com.zimbra.common.soap.SoapTransport.invoke(SoapTr ansport.java:360)
    at com.zimbra.cs.account.soap.SoapProvisioning.invoke (SoapProvisioning.java:322)
    ... 4 more
    Caused by: sun.security.validator.ValidatorException: PKIX path building failed:

    sun.security.provider.certpath.SunCertPathBuilderE xception: unable to find valid

    certification path to requested target
    at sun.security.validator.PKIXValidator.doBuild(PKIXV alidator.java:325)
    at sun.security.validator.PKIXValidator.engineValidat e(PKIXValidator.java:219)
    at sun.security.validator.Validator.validate(Validato r.java:218)
    at com.sun.net.ssl.internal.ssl.X509TrustManagerImpl. validate

    (X509TrustManagerImpl.java:126)
    at com.sun.net.ssl.internal.ssl.X509TrustManagerImpl. checkServerTrusted

    (X509TrustManagerImpl.java:209)
    at com.sun.net.ssl.internal.ssl.X509TrustManagerImpl. checkServerTrusted

    (X509TrustManagerImpl.java:249)
    at com.sun.net.ssl.internal.ssl.ClientHandshaker.serv erCertificate

    (ClientHandshaker.java:1053)
    ... 26 more
    Caused by: sun.security.provider.certpath.SunCertPathBuilderE xception: unable to find valid

    certification path to requested target
    at sun.security.provider.certpath.SunCertPathBuilder. engineBuild

    (SunCertPathBuilder.java:174)
    at java.security.cert.CertPathBuilder.build(CertPathB uilder.java:238)
    at sun.security.validator.PKIXValidator.doBuild(PKIXV alidator.java:320)
    ... 32 more

  2. #2
    hellin_zhang is offline Member
    Join Date
    Jul 2011
    Posts
    13
    Rep Power
    3

    Default zcs-7.1.1_GA_3196.RHEL5_64

    zcs-7.1.1_GA_3196.RHEL5_64
    ---------------------------------------------------------
    private final SoapProvisioning mSoapProv ;
    public User()throws ServiceException{
    try {
    mSoapProv = new SoapProvisioning();
    mSoapProv.soapSetURI("https://mail.mydomain.com:7071/service/admin/soap/");
    mSoapProv.soapAdminAuthenticate("admin", "admin123");
    } catch (ServiceException ex) {
    ZimbraLog.test.error("Unable to create SOAP Provisioning.", ex);
    throw ex;
    }
    }

  3. #3
    billbrasky66 is offline Starter Member
    Join Date
    Sep 2011
    Posts
    1
    Rep Power
    3

    Default

    You're probably using a self-signed SSL certificate OR the CA that issued your SSL certificate is not in the default Java registry. I recently ran into a similar issue, see this:

    SSL - atmos-java - Java connector for EMC Atmos Cloud Storage Service - Google Project Hosting

    There might also be a way to disable certificate validation.

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Similar Threads

  1. Replies: 7
    Last Post: 02-13-2013, 02:36 AM
  2. Replies: 48
    Last Post: 09-18-2012, 08:49 AM
  3. Install Zimbra 6.0.8 x64 on Debian Lenny Fail
    By Titi974 in forum Installation
    Replies: 6
    Last Post: 10-21-2010, 05:47 AM
  4. Problem with Mail Server - Need help!
    By joeleo in forum Installation
    Replies: 2
    Last Post: 03-04-2008, 12:03 PM
  5. My Zimbra server down ... please help :)
    By frankb in forum Administrators
    Replies: 2
    Last Post: 12-12-2007, 11:29 AM

Tags for this Thread

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •