org.apache.cxf.interceptor.Fault: Could not send Message

Daniel C.

unread,

Oct 20, 2016, 11:52:13 AM10/20/16

to Illuminated Cloud Q&A

Hi Scott:

I am trying to generate the off-line table, but I'm getting this error message before the process completes.

Can you let me know if you can provide some feedback? Do you think it's because of permissions? I do not have access to a System Administrator account on my laptop (Windows 7 Enterprise) and I probably have limited Internet access (firewalls and proxies in place).

Thanks for your help.

Regards,

Daniel.

idea_debug.log

Scott

unread,

Oct 20, 2016, 12:05:03 PM10/20/16

to Illuminated Cloud Q&A

Daniel, the core issue seems to be:

Caused by: javax.net.ssl.SSLHandshakeException: SSLHandshakeException invoking https://na35.salesforce.com/services/Soap/m/37.0/00D41000000eY7H: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

Are you on a corporate network using a proxy/firewall that swaps out SSL certs by chance? If so, would you mind checking Settings>Tools>Server Certificates>Accept non-trusted certificates automatically and trying again?

It certainly looks like the cert being presented to the client isn't the one expected based on the SSL endpoint of https://na35.salesforce.com.

Please let me know your findings.

Regards,

Scott Wells

Daniel C.

unread,

Oct 20, 2016, 12:11:59 PM10/20/16

to Illuminated Cloud Q&A

I am on a corporate network. I'm not sure if the swapping is taking place for the SSL certs. I updated the entry you recommended with no avail. I'm still getting the same error. Any other options?

Scott

unread,

Oct 20, 2016, 12:22:02 PM10/20/16

to Illuminated Cloud Q&A

Can you try generating the OST for a connection to another org in another Salesforce instance? It's very possible that the issue is with the certificate chain for that particular instance (na35), though that would seem quite unlikely to me. It seems like that would be causing issues across the board. Another option would be trying to generate the OST against that same connection on a network that isn't behind the corporate firewall/proxy.

What I'm trying to do is minimize the variables and isolate the root cause. In the past when I've seen issues like this, it was almost always a restrictive corporate network and the problem did not occur on, say, a wifi network at a coffee shop. Obviously that's not the desired end state, but it would help us determine that it's a network configuration so that you might be able to check with IT as to what's happening.

Oh, and one other question...did you happen to restart the IDE after changing that setting? That's a core IntelliJ IDEA setting, so I don't know if perhaps they cache something or not. Might be good to see if you see the same issue after a restart with that checkbox selected. My guess is that it won't make a difference, but I'm just trying to think about ways to shorten the time to resolution for you.

Regards,

Scott

Daniel C.

unread,

Oct 20, 2016, 1:42:37 PM10/20/16

to Illuminated Cloud Q&A

Re-starting made the difference! I was able to connect as expected. Thanks Scott!!!! Keep up the great work and thank you again.

Scott

unread,

Oct 20, 2016, 1:44:05 PM10/20/16

to Illuminated Cloud Q&A

Glad to hear. I'll file this under the category of "better to be lucky than good"!