App engine deployment error - SSLHandshakeException: unable to find valid certification path to requested target

[Sandeep Niduvali]

Hi Team,

I get the below exception when I tried to deploy my first 'Guestbook' application. I had completed all local machine testing successfully before the deployment.

Exception message:

--------------------------------------------------------------------------------------------------------------------------------------------------------

javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException:

PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderExce

ption: unable to find valid certification path to requested target

--------------------------------------------------------------------------------------------------------------------------------------------------------

I exported SSL certificate of https://appengine.google.com/ and then imported into my Keystore using the below commend.

--------------------------------------------------------------------------------------------------------------------------------------------------------

keytool -import -keystore "C:\Program Files\Java\jdk1.7.0\jre\lib\security\cacerts" -file "D:\GAE\google.cer" -alias google-app-engine

--------------------------------------------------------------------------------------------------------------------------------------------------------

But the issues still comes. I went through many discussion on the same topic and I could not yet resolve the issue. I tried all possibilities and nothing worked.

Plz help me with some solutions.

Thanks,

Sandeep

[Nick (Cloud Platform Support)]

Hey Sandeep,

This group isn't meant to be used to post specific technical issues. It's more appropriate to post more general discussion of the platform and services here. A thread which might be valid in this group would be one discussing in general how SSL is done on the App Engine deployment servers. However, for your issue, you should definitely post to stackoverflow or serverfault.

Useful information to provide when you post there:

* What OS are you using to develop?
* Can you provide more verbose output from the debug tool?
* Where did you get the advice to manually interact with your trust store?

[Sandeep Niduvali]

Hi Patrice,

Yes I added the SSL Certificate of the site:https://appengine.google.com/ into my 'cacerts'.

I got the steps from a google group and the link is https://groups.google.com/forum/#!topic/google-appengine-java/t-WM-J4T168

My dev environment details are:

OS: Windows 7

JDK and JRE: 1.7.0

I am copying the log from my command prompt. Plz help me to resolve the issue. I have been stuck with the issue for last one week and I cannot proceed due to the issue.

----------------------------------------------------------------------

C:\GAE\guestbook>C:\GAE\guestbook>mvn appengine:update -DproxySet=true -DproxyHo

st=gateway.zscaler.net -DproxyPort=9400 -Djava.home="C:\Program Files\Java\jdk1.

7.0\jre" -Dserver="appengine.google.com" -Dsdk_root="C:\Program Files\Google\app

engine-java-sdk-1.9.26"

'C:\GAE\guestbook' is not recognized as an internal or external command,

operable program or batch file.

C:\GAE\guestbook>mvn appengine:update -DproxySet=true -DproxyHost=gateway.zscale

r.net -DproxyPort=9400 -Djava.home="C:\Program Files\Java\jdk1.7.0\jre" -Dserver

="appengine.google.com" -Dsdk_root="C:\Program Files\Google\appengine-java-sdk-1

.9.26"

[INFO] Scanning for projects...

[INFO]

[INFO] ------------------------------------------------------------------------

[INFO] Building guestbook 1.0-SNAPSHOT

[INFO] ------------------------------------------------------------------------

[INFO]

[INFO] >>> appengine-maven-plugin:1.9.26:update (default-cli) > package @ guestb

ook >>>

[INFO]

[INFO] --- maven-resources-plugin:2.6:resources (default-resources) @ guestbook

---

[INFO] Using 'UTF-8' encoding to copy filtered resources.

[INFO] skip non existing resourceDirectory C:\GAE\guestbook\src\main\resources

[INFO]

[INFO] --- maven-compiler-plugin:3.1:compile (default-compile) @ guestbook ---

[INFO] Nothing to compile - all classes are up to date

[INFO]

[INFO] --- versions-maven-plugin:2.2:display-dependency-updates (default) @ gues

tbook ---

[INFO] artifact javax.servlet:servlet-api: checking for updates from central

[INFO] artifact com.googlecode.objectify:objectify: checking for updates from ce

ntral

[INFO] artifact com.google.appengine:appengine-testing: checking for updates fro

m central

[INFO] artifact com.google.appengine:appengine-api-1.0-sdk: checking for updates

 from central

[INFO] artifact com.google.appengine:appengine-api-stubs: checking for updates f

rom central

[INFO] artifact jstl:jstl: checking for updates from central

[INFO] The following dependencies in Dependencies have newer versions:

[INFO]   com.google.appengine:appengine-api-1.0-sdk .......... 1.9.26 -> 1.9.27

[INFO]   com.google.appengine:appengine-api-stubs ............ 1.9.26 -> 1.9.27

[INFO]   com.google.appengine:appengine-testing .............. 1.9.26 -> 1.9.27

[INFO]   com.googlecode.objectify:objectify .................... 4.0.1 -> 5.1.8

[INFO]   javax.servlet:servlet-api ......................... 2.5 -> 3.0-alpha-1

[INFO]

[INFO]

[INFO] --- versions-maven-plugin:2.2:display-plugin-updates (default) @ guestboo

k ---

[INFO]

[INFO] All plugins with a version specified are using the latest versions.

[INFO]

[WARNING] The following plugins do not have their version specified:

[WARNING]   maven-clean-plugin .......................... (from super-pom) 2.5

[WARNING]   maven-deploy-plugin ......................... (from super-pom) 2.7

[WARNING]   maven-install-plugin ........................ (from super-pom) 2.4

[WARNING]   maven-resources-plugin ...................... (from super-pom) 2.6

[WARNING]   maven-site-plugin ........................... (from super-pom) 3.3

[WARNING]   maven-surefire-plugin .................... (from super-pom) 2.12.4

[INFO]

[INFO] Project defines minimum Maven version as: 3.1.0

[INFO] Plugins require minimum Maven version of: 3.1.0

[INFO] Note: the super-pom from Maven 3.3.3 defines some of the plugin

[INFO]       versions and may be influencing the plugins required minimum Maven

[INFO]       version.

[INFO]

[INFO] No plugins require a newer version of Maven than specified by the pom.

[INFO]

[INFO]

[INFO] --- maven-resources-plugin:2.6:testResources (default-testResources) @ gu

estbook ---

[INFO] Using 'UTF-8' encoding to copy filtered resources.

[INFO] skip non existing resourceDirectory C:\GAE\guestbook\src\test\resources

[INFO]

[INFO] --- maven-compiler-plugin:3.1:testCompile (default-testCompile) @ guestbo

ok ---

[INFO] No sources to compile

[INFO]

[INFO] --- maven-surefire-plugin:2.12.4:test (default-test) @ guestbook ---

[INFO] No tests to run.

[INFO]

[INFO] --- maven-war-plugin:2.4:war (default-war) @ guestbook ---

[INFO] Packaging webapp

[INFO] Assembling webapp [guestbook] in [C:\GAE\guestbook\target\guestbook-1.0-S

NAPSHOT]

[INFO] Processing war project

[INFO] Copying webapp webResources [C:\GAE\guestbook/src/main/webapp/WEB-INF] to

 [C:\GAE\guestbook\target\guestbook-1.0-SNAPSHOT]

[INFO] Copying webapp resources [C:\GAE\guestbook\src\main\webapp]

[INFO] Webapp assembled in [309 msecs]

[INFO] Building war: C:\GAE\guestbook\target\guestbook-1.0-SNAPSHOT.war

[INFO]

[INFO] <<< appengine-maven-plugin:1.9.26:update (default-cli) < package @ guestb

ook <<<

[INFO]

[INFO] --- appengine-maven-plugin:1.9.26:update (default-cli) @ guestbook ---

[INFO]

[INFO] Google App Engine Java SDK - Updating Application

[INFO]

[INFO] Retrieving Google App Engine Java SDK from Maven

[INFO] Updating Google App Engine Application

[INFO] Running -V 1 --oauth2 update C:\GAE\guestbook\target/guestbook-1.0-SNAPSH

OT

********************************************************

The API version in this SDK is no longer supported on the server!

-----------

Latest SDK:

Release: 1.9.27

Timestamp: Tue Aug 18 23:58:24 IST 2015

API versions: [1]

-----------

Your SDK:

Release: 1.9.26

Timestamp: Thu Aug 13 00:00:50 IST 2015

API versions: [1.0]

-----------

Please visit https://developers.google.com/appengine/downloads for the latest SD

K.

********************************************************

Please enter code: 4/fBCCF5GJKBd12qQPpjOKtJBoL_YrzBLFU8TZKha9Szk

javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException:

PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderExce

ption: unable to find valid certification path to requested target

C:\GAE\guestbook>

----------------------------------------------------------------------

[Nick (Cloud Platform Support)]

Hey Sandeep,

That's all great information. Now please include it in your stackoverflow question when you post it. I wish you the best of luck in finding a solution, and remember, this forum isn't meant for 1-on-1 technical support.

Have a nice day!