About SSL certificate

28 views
Skip to first unread message

green...@gmail.com

unread,
Apr 24, 2019, 6:00:31 AM4/24/19
to CodenameOne Discussions
Setup tomcat with SSL certificate, via the browser Fireforx and Safari both working perfect, but in the App doesn't work with error below:

javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
[Network Thread] 0:0:0,1 - Exception: javax.net.ssl.SSLHandshakeException - sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
    at sun.security.ssl.Alerts.getSSLException(Alerts.java:192)
    at sun.security.ssl.SSLSocketImpl.fatal(SSLSocketImpl.java:1937)
    at sun.security.ssl.Handshaker.fatalSE(Handshaker.java:302)
    at sun.security.ssl.Handshaker.fatalSE(Handshaker.java:296)

Tried other website which with https  and received same error as above.

Steve Hannah

unread,
Apr 24, 2019, 7:48:52 AM4/24/19
to codenameone...@googlegroups.com
Which JDK are you using?  Some older (even early 1.8.x) versions don't recognize some of the newer certificate authorities.

--
You received this message because you are subscribed to the Google Groups "CodenameOne Discussions" group.
To unsubscribe from this group and stop receiving emails from it, send an email to codenameone-discu...@googlegroups.com.
Visit this group at https://groups.google.com/group/codenameone-discussions.
To view this discussion on the web visit https://groups.google.com/d/msgid/codenameone-discussions/3b6a79bc-e8f7-4d99-a3bc-779692a352bc%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


--
Steve Hannah
Software Developer
Codename One
Message has been deleted

green...@gmail.com

unread,
Apr 25, 2019, 11:02:53 AM4/25/19
to CodenameOne Discussions
openjdk version "11.0.1" 2018-10-16
OpenJDK Runtime Environment 18.9 (build 11.0.1+13)
OpenJDK 64-Bit Server VM 18.9 (build 11.0.1+13, mixed mode)


On Wednesday, April 24, 2019 at 1:48:52 PM UTC+2, Steve Hannah wrote:
Which JDK are you using?  Some older (even early 1.8.x) versions don't recognize some of the newer certificate authorities.

On Wed, Apr 24, 2019 at 3:00 AM <green...@gmail.com> wrote:
Setup tomcat with SSL certificate, via the browser Fireforx and Safari both working perfect, but in the App doesn't work with error below:

javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
[Network Thread] 0:0:0,1 - Exception: javax.net.ssl.SSLHandshakeException - sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
    at sun.security.ssl.Alerts.getSSLException(Alerts.java:192)
    at sun.security.ssl.SSLSocketImpl.fatal(SSLSocketImpl.java:1937)
    at sun.security.ssl.Handshaker.fatalSE(Handshaker.java:302)
    at sun.security.ssl.Handshaker.fatalSE(Handshaker.java:296)

Tried other website which with https  and received same error as above.

--
You received this message because you are subscribed to the Google Groups "CodenameOne Discussions" group.
To unsubscribe from this group and stop receiving emails from it, send an email to codenameone-discussions+unsub...@googlegroups.com.

Shai Almog

unread,
Apr 26, 2019, 12:33:29 AM4/26/19
to CodenameOne Discussions
Which certificate authority signed your certificate?
It's not a self signed certificate by any chance right? If it is this obviously won't work anywhere...

green...@gmail.com

unread,
Apr 26, 2019, 5:54:31 AM4/26/19
to CodenameOne Discussions
issued by: Let's Encrypt Authority X3

Shai Almog

unread,
Apr 27, 2019, 12:08:37 AM4/27/19
to CodenameOne Discussions
I didn't use SSLForFree and I'm not sure about it but I have used letsencrypt and it worked well with our apps/simulator as long as the JDK was 1.8.101 or newer.
I'm guessing the simulator is executed by a different JDK than the one you have installed. I suggest uninstalling older JDKs to make sure that the right JDK is running.
Reply all
Reply to author
Forward
0 new messages