I'll probably have some future questions about that - but right now, I'm just trying to launch XNAT for the first time, per instructions at
I get a "Certificate chaining error" related to the Cisco root authority certificate (which does exist on my machine). Details below.
Brief searching seems to indicate that this means there are intermediate certificates that are expected, but do not exist at the moment on my machine. Are there additional configuration steps that I'm missing and are documented somewhere?
A:\dev\DemoDisk\xnat-docker-compose [features/dependency-mgmt ≡]> ./gradlew composeBuild composeUp
Downloading
https://services.gradle.org/distributions/gradle-7.6-all.zipException in thread "main" javax.net.ssl.SSLHandshakeException: com.ibm.jsse2.util.h: PKIX path building failed: java.security.cert.CertPathBuilderException: PKIXCertPathBuilderImpl could not build a valid CertPath.; internal cause is:
java.security.cert.CertPathValidatorException: The certificate issued by CN=Cisco Umbrella Root CA, O=Cisco is not trusted; internal cause is:
java.security.cert.CertPathValidatorException: Certificate chaining error
at com.ibm.jsse2.k.a(k.java:42)
at com.ibm.jsse2.av.a(av.java:688)
at com.ibm.jsse2.D.a(D.java:495)
at com.ibm.jsse2.D.a(D.java:534)
at com.ibm.jsse2.E.a(E.java:151)
at com.ibm.jsse2.E.a(E.java:401)
at com.ibm.jsse2.D.r(D.java:444)
at com.ibm.jsse2.D.a(D.java:399)
at com.ibm.jsse2.av.a(av.java:1006)
at com.ibm.jsse2.av.i(av.java:574)
at com.ibm.jsse2.av.a(av.java:280)
at com.ibm.jsse2.av.startHandshake(av.java:431)
at com.ibm.net.ssl.www2.protocol.https.c.afterConnect(c.java:167)
at com.ibm.net.ssl.www2.protocol.https.d.connect(d.java:62)
at sun.net.www.protocol.http.HttpURLConnection.followRedirect0(HttpURLConnection.java:2741)
at sun.net.www.protocol.http.HttpURLConnection.followRedirect(HttpURLConnection.java:2653)
at sun.net.www.protocol.http.HttpURLConnection.getInputStream0(HttpURLConnection.java:1836)
at sun.net.www.protocol.http.HttpURLConnection.getInputStream(HttpURLConnection.java:1504)
at com.ibm.net.ssl.www2.protocol.https.b.getInputStream(b.java:91)
at org.gradle.wrapper.Download.downloadInternal(Download.java:109)
at org.gradle.wrapper.Download.download(Download.java:89)
at org.gradle.wrapper.Install$1.call(Install.java:83)
at org.gradle.wrapper.Install$1.call(Install.java:63)
at org.gradle.wrapper.ExclusiveFileAccessManager.access(ExclusiveFileAccessManager.java:69)
at org.gradle.wrapper.Install.createDist(Install.java:63)
at org.gradle.wrapper.WrapperExecutor.execute(WrapperExecutor.java:109)
at org.gradle.wrapper.GradleWrapperMain.main(GradleWrapperMain.java:66)
Caused by: com.ibm.jsse2.util.h: PKIX path building failed: java.security.cert.CertPathBuilderException: PKIXCertPathBuilderImpl could not build a valid CertPath.; internal cause is:
java.security.cert.CertPathValidatorException: The certificate issued by CN=Cisco Umbrella Root CA, O=Cisco is not trusted; internal cause is:
java.security.cert.CertPathValidatorException: Certificate chaining error
at com.ibm.jsse2.util.f.a(f.java:156)
at com.ibm.jsse2.util.f.b(f.java:89)
at com.ibm.jsse2.util.e.a(e.java:17)
at com.ibm.jsse2.aD.a(aD.java:90)
at com.ibm.jsse2.aD.a(aD.java:74)
at com.ibm.jsse2.aD.checkServerTrusted(aD.java:117)
at com.ibm.jsse2.E.a(E.java:757)
... 22 more
Caused by: java.security.cert.CertPathBuilderException: PKIXCertPathBuilderImpl could not build a valid CertPath.; internal cause is:
java.security.cert.CertPathValidatorException: The certificate issued by CN=Cisco Umbrella Root CA, O=Cisco is not trusted; internal cause is:
java.security.cert.CertPathValidatorException: Certificate chaining error
at com.ibm.security.cert.PKIXCertPathBuilderImpl.engineBuild(PKIXCertPathBuilderImpl.java:422)
at java.security.cert.CertPathBuilder.build(CertPathBuilder.java:268)
at com.ibm.jsse2.util.f.a(f.java:54)
... 28 more
Caused by: java.security.cert.CertPathValidatorException: The certificate issued by CN=Cisco Umbrella Root CA, O=Cisco is not trusted; internal cause is:
java.security.cert.CertPathValidatorException: Certificate chaining error
at com.ibm.security.cert.BasicChecker.<init>(BasicChecker.java:111)
at com.ibm.security.cert.PKIXCertPathValidatorImpl.engineValidate(PKIXCertPathValidatorImpl.java:220)
at com.ibm.security.cert.PKIXCertPathBuilderImpl.myValidator(PKIXCertPathBuilderImpl.java:749)
at com.ibm.security.cert.PKIXCertPathBuilderImpl.buildCertPath(PKIXCertPathBuilderImpl.java:661)
at com.ibm.security.cert.PKIXCertPathBuilderImpl.buildCertPath(PKIXCertPathBuilderImpl.java:607)
at com.ibm.security.cert.PKIXCertPathBuilderImpl.buildCertPath(PKIXCertPathBuilderImpl.java:607)
at com.ibm.security.cert.PKIXCertPathBuilderImpl.engineBuild(PKIXCertPathBuilderImpl.java:368)
... 30 more
Caused by: java.security.cert.CertPathValidatorException: Certificate chaining error
at com.ibm.security.cert.CertPathUtil.findIssuer(CertPathUtil.java:316)
at com.ibm.security.cert.BasicChecker.<init>(BasicChecker.java:108)
... 36 more