I am getting "javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target" error

[gayan wins]

Hi Team,

I am getting below error when trying to hit endpoint using restassured using .jks certificate .

"javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target"

This is how i am try to capture the response in RestAssured. I am really new to restassured and looking for your support to get this fixed. i have stored .jks fiile in my local folder.

<<Console>>

javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

at sun.security.ssl.Alerts.getSSLException(Alerts.java:192)

at sun.security.ssl.SSLSocketImpl.fatal(SSLSocketImpl.java:1959)

at sun.security.ssl.Handshaker.fatalSE(Handshaker.java:302)

at sun.security.ssl.Handshaker.fatalSE(Handshaker.java:296)

at sun.security.ssl.ClientHandshaker.serverCertificate(ClientHandshaker.java:1514)

at sun.security.ssl.ClientHandshaker.processMessage(ClientHandshaker.java:216)

at sun.security.ssl.Handshaker.processLoop(Handshaker.java:1026)

at sun.security.ssl.Handshaker.process_record(Handshaker.java:961)

at sun.security.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:1072)

at sun.security.ssl.SSLSocketImpl.performInitialHandshake(SSLSocketImpl.java:1385)

at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1413)

at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1397)

at org.apache.http.conn.ssl.SSLSocketFactory.connectSocket(SSLSocketFactory.java:553)

at org.apache.http.conn.ssl.SSLSocketFactory.connectSocket(SSLSocketFactory.java:412)

at org.apache.http.impl.conn.DefaultClientConnectionOperator.openConnection(DefaultClientConnectionOperator.java:179)

at org.apache.http.impl.conn.ManagedClientConnectionImpl.open(ManagedClientConnectionImpl.java:328)

at org.apache.http.impl.client.DefaultRequestDirector.tryConnect(DefaultRequestDirector.java:612)

at org.apache.http.impl.client.DefaultRequestDirector.execute(DefaultRequestDirector.java:447)

at org.apache.http.impl.client.AbstractHttpClient.doExecute(AbstractHttpClient.java:884)

at org.apache.http.impl.client.CloseableHttpClient.execute(CloseableHttpClient.java:82)

at org.apache.http.impl.client.CloseableHttpClient.execute(CloseableHttpClient.java:55)

at org.apache.http.client.HttpClient$execute$0.call(Unknown Source)

at org.codehaus.groovy.runtime.callsite.CallSiteArray.defaultCall(CallSiteArray.java:48)

at org.codehaus.groovy.runtime.callsite.AbstractCallSite.call(AbstractCallSite.java:113)

at org.codehaus.groovy.runtime.callsite.AbstractCallSite.call(AbstractCallSite.java:133)

at io.restassured.internal.RequestSpecificationImpl$RestAssuredHttpBuilder.doRequest(RequestSpecificationImpl.groovy:2119)

at io.restassured.internal.http.HTTPBuilder.post(HTTPBuilder.java:349)

at io.restassured.internal.http.HTTPBuilder$post$2.call(Unknown Source)

at org.codehaus.groovy.runtime.callsite.CallSiteArray.defaultCall(CallSiteArray.java:48)

at org.codehaus.groovy.runtime.callsite.AbstractCallSite.call(AbstractCallSite.java:113)

at org.codehaus.groovy.runtime.callsite.AbstractCallSite.call(AbstractCallSite.java:133)

at io.restassured.internal.RequestSpecificationImpl.sendRequest(RequestSpecificationImpl.groovy:1269)

at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)

at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)

at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)

at java.lang.reflect.Method.invoke(Method.java:498)

at org.codehaus.groovy.reflection.CachedMethod.invoke(CachedMethod.java:93)

at groovy.lang.MetaMethod.doMethodInvoke(MetaMethod.java:325)

at groovy.lang.MetaClassImpl.invokeMethod(MetaClassImpl.java:1212)

at groovy.lang.MetaClassImpl.invokeMethod(MetaClassImpl.java:1021)

at groovy.lang.MetaClassImpl.invokeMethod(MetaClassImpl.java:812)

at io.restassured.internal.RequestSpecificationImpl.invokeMethod(RequestSpecificationImpl.groovy)

at org.codehaus.groovy.runtime.callsite.PogoInterceptableSite.call(PogoInterceptableSite.java:48)

at org.codehaus.groovy.runtime.callsite.CallSiteArray.defaultCall(CallSiteArray.java:48)

at org.codehaus.groovy.runtime.callsite.AbstractCallSite.call(AbstractCallSite.java:113)

at org.codehaus.groovy.runtime.callsite.AbstractCallSite.call(AbstractCallSite.java:149)

at io.restassured.internal.filter.SendRequestFilter.filter(SendRequestFilter.groovy:30)

at io.restassured.filter.Filter$filter$0.call(Unknown Source)

at org.codehaus.groovy.runtime.callsite.CallSiteArray.defaultCall(CallSiteArray.java:48)

at io.restassured.filter.Filter$filter.call(Unknown Source)

at io.restassured.internal.filter.FilterContextImpl.next(FilterContextImpl.groovy:72)

at io.restassured.filter.time.TimingFilter.filter(TimingFilter.java:56)

at io.restassured.filter.Filter$filter.call(Unknown Source)

at org.codehaus.groovy.runtime.callsite.CallSiteArray.defaultCall(CallSiteArray.java:48)

at io.restassured.filter.Filter$filter.call(Unknown Source)

at io.restassured.internal.filter.FilterContextImpl.next(FilterContextImpl.groovy:72)

at com.pnc.mblapi.automation.util.RestAPICookieFilter.filter(RestAPICookieFilter.java:40)

at io.restassured.filter.Filter$filter.call(Unknown Source)

at org.codehaus.groovy.runtime.callsite.CallSiteArray.defaultCall(CallSiteArray.java:48)

at org.codehaus.groovy.runtime.callsite.AbstractCallSite.call(AbstractCallSite.java:113)

at org.codehaus.groovy.runtime.callsite.AbstractCallSite.call(AbstractCallSite.java:141)

at io.restassured.internal.filter.FilterContextImpl.next(FilterContextImpl.groovy:72)

at io.restassured.filter.FilterContext$next.call(Unknown Source)

at org.codehaus.groovy.runtime.callsite.CallSiteArray.defaultCall(CallSiteArray.java:48)

at org.codehaus.groovy.runtime.callsite.AbstractCallSite.call(AbstractCallSite.java:113)

at org.codehaus.groovy.runtime.callsite.AbstractCallSite.call(AbstractCallSite.java:133)

at io.restassured.internal.RequestSpecificationImpl.applyPathParamsAndSendRequest(RequestSpecificationImpl.groovy:1722)

at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)

at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)

at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)

at java.lang.reflect.Method.invoke(Method.java:498)

at org.codehaus.groovy.reflection.CachedMethod.invoke(CachedMethod.java:93)

at groovy.lang.MetaMethod.doMethodInvoke(MetaMethod.java:325)

at groovy.lang.MetaClassImpl.invokeMethod(MetaClassImpl.java:1212)

at groovy.lang.MetaClassImpl.invokeMethod(MetaClassImpl.java:1021)

at groovy.lang.MetaClassImpl.invokeMethod(MetaClassImpl.java:812)

at io.restassured.internal.RequestSpecificationImpl.invokeMethod(RequestSpecificationImpl.groovy)

at org.codehaus.groovy.runtime.callsite.PogoInterceptableSite.call(PogoInterceptableSite.java:48)

at org.codehaus.groovy.runtime.callsite.PogoInterceptableSite.callCurrent(PogoInterceptableSite.java:58)

at org.codehaus.groovy.runtime.callsite.CallSiteArray.defaultCallCurrent(CallSiteArray.java:52)

at org.codehaus.groovy.runtime.callsite.AbstractCallSite.callCurrent(AbstractCallSite.java:154)

at org.codehaus.groovy.runtime.callsite.AbstractCallSite.callCurrent(AbstractCallSite.java:182)

at io.restassured.internal.RequestSpecificationImpl.applyPathParamsAndSendRequest(RequestSpecificationImpl.groovy:1728)

at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)

at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)

at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)

at java.lang.reflect.Method.invoke(Method.java:498)

at org.codehaus.groovy.reflection.CachedMethod.invoke(CachedMethod.java:93)

at groovy.lang.MetaMethod.doMethodInvoke(MetaMethod.java:325)

at groovy.lang.MetaClassImpl.invokeMethod(MetaClassImpl.java:1212)

at groovy.lang.MetaClassImpl.invokeMethod(MetaClassImpl.java:1021)

at groovy.lang.MetaClassImpl.invokeMethod(MetaClassImpl.java:812)

at io.restassured.internal.RequestSpecificationImpl.invokeMethod(RequestSpecificationImpl.groovy)

at org.codehaus.groovy.runtime.callsite.PogoInterceptableSite.call(PogoInterceptableSite.java:48)

at org.codehaus.groovy.runtime.callsite.PogoInterceptableSite.callCurrent(PogoInterceptableSite.java:58)

at org.codehaus.groovy.runtime.callsite.CallSiteArray.defaultCallCurrent(CallSiteArray.java:52)

at org.codehaus.groovy.runtime.callsite.AbstractCallSite.callCurrent(AbstractCallSite.java:154)

at org.codehaus.groovy.runtime.callsite.AbstractCallSite.callCurrent(AbstractCallSite.java:182)

at io.restassured.internal.RequestSpecificationImpl.post(RequestSpecificationImpl.groovy:172)

at io.restassured.internal.RequestSpecificationImpl.post(RequestSpecificationImpl.groovy)

at com.pnc.mblapi.automation.api.UserIdApi.getResponseDataPower(UserIdApi.java:64)

at com.pnc.mblapi.automation.api.Authentication.loginService(Authentication.java:31)

at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)

at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)

at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)

at java.lang.reflect.Method.invoke(Method.java:498)

at org.testng.internal.MethodInvocationHelper.invokeMethod(MethodInvocationHelper.java:84)

at org.testng.internal.Invoker.invokeMethod(Invoker.java:714)

at org.testng.internal.Invoker.invokeTestMethod(Invoker.java:901)

at org.testng.internal.Invoker.invokeTestMethods(Invoker.java:1231)

at org.testng.internal.TestMethodWorker.invokeTestMethods(TestMethodWorker.java:127)

at org.testng.internal.TestMethodWorker.run(TestMethodWorker.java:111)

at org.testng.TestRunner.privateRun(TestRunner.java:767)

at org.testng.TestRunner.run(TestRunner.java:617)

at org.testng.SuiteRunner.runTest(SuiteRunner.java:334)

at org.testng.SuiteRunner.runSequentially(SuiteRunner.java:329)

at org.testng.SuiteRunner.privateRun(SuiteRunner.java:291)

at org.testng.SuiteRunner.run(SuiteRunner.java:240)

at org.testng.SuiteRunnerWorker.runSuite(SuiteRunnerWorker.java:52)

at org.testng.SuiteRunnerWorker.run(SuiteRunnerWorker.java:86)

at org.testng.TestNG.runSuitesSequentially(TestNG.java:1224)

at org.testng.TestNG.runSuitesLocally(TestNG.java:1149)

at org.testng.TestNG.run(TestNG.java:1057)

at org.testng.IDEARemoteTestNG.run(IDEARemoteTestNG.java:72)

at org.testng.RemoteTestNGStarter.main(RemoteTestNGStarter.java:123)

Caused by: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

at sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:397)

at sun.security.validator.PKIXValidator.engineValidate(PKIXValidator.java:302)

at sun.security.validator.Validator.validate(Validator.java:260)

at sun.security.ssl.X509TrustManagerImpl.validate(X509TrustManagerImpl.java:324)

at sun.security.ssl.X509TrustManagerImpl.checkTrusted(X509TrustManagerImpl.java:229)

at sun.security.ssl.X509TrustManagerImpl.checkServerTrusted(X509TrustManagerImpl.java:124)

at sun.security.ssl.ClientHandshaker.serverCertificate(ClientHandshaker.java:1496)

... 120 more

Caused by: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

at sun.security.provider.certpath.SunCertPathBuilder.build(SunCertPathBuilder.java:141)

at sun.security.provider.certpath.SunCertPathBuilder.engineBuild(SunCertPathBuilder.java:126)

at java.security.cert.CertPathBuilder.build(CertPathBuilder.java:280)

at sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:392)

... 126 more

<<Code>>

public Response getResponseDataPower(){
    res2 = RestAssured.given().trustStore("C:\\RestAssured\\Certificates\\truststore.jks","gayal123")
            .filter(RestAPICookieFilter.instance())
            .spec(getRequestSpecBuilder()).when().post(UserIdUrl);
    return res2;
}

[Johan Haleby]

Hi,

Have you tried relaxedHTTPSValiation?

/Johan

--
You received this message because you are subscribed to the Google Groups "REST assured" group.
To unsubscribe from this group and stop receiving emails from it, send an email to rest-assured+unsubscribe@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[Ellen Kang]

Hi, Johan

I got the same error, but with .cer certificate. I tried relaxedHTTPSValidation.

The API I am testing doesn't return data until finishing authorization through a login page which is SSL protected. I installed two certificates with command C:\java\jdk1.8.0_161\bin\keytool -import -alias < > -keystore C:\java\jdk1.8.0_161\jre\lib\security\cacerts -storepass changeit -trustcacerts -noprompt -file <.cer>, also tried exporting a  .cer from browser.

Below is the code I am trying,  uri_login is the login page link, which is SSL protected, uri is the API link, which is not SSL protected.

given().config(RestAssured.config().sslConfig(new SSLConfig().relaxedHTTPSValidation())).get(uri_login).getStatusCode(); --- returns 404

given().config(RestAssured.config().sslConfig(new SSLConfig().relaxedHTTPSValidation())).auth().basic(username, password)get(uri).getStatusCode(); -- returns the error below

%% Invalidated: [Session-1, TLS_RSA_WITH_AES_256_CBC_SHA256]

main, SEND TLSv1.2 ALERT: fatal, description = certificate_unknown

main, WRITE: TLSv1.2 Alert, length = 2

[Raw write]: length = 7

0000: 15 03 03 00 02 02 2E .......

main, called closeSocket()

main, handling exception: javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

stack trace is exactly same as Gayan posted.

Four questions:

1. Is it right to do SSL and authorization this way?   given().config(RestAssured.config().sslConfig(new SSLConfig().relaxedHTTPSValidation())).auth().basic(username, password)get(uri).getStatusCode(); 

2. I am still confused about difference between trustStore and keyStore. The code is checking the trustStore  showing in log. The two certs I got  are not client certs but root and infrastructure CA. our company doesn't use client certification according to my architect.

trustStore is: C:\java\jdk1.8.0_161\jre\lib\security\cacerts

trustStore type is : jks

trustStore provider is :

init truststore

3. Is there any way to test directly if these two certs right?

4. I pulled in the master branch of rest-assured 3.0.8 code to my workspace, one test in json-path failed, I fixed it. one test in xml-path failed, I don't know how to fix it, so set SkipTest to true in pom file, build successful finally,  but Open Declaration doesn't work when I trying to debug. how to fix that?

Thanks

Ellen

[Ellen Kang]

As to question 4, I did more research, it is due to the project is nested, I tried right click the project - configure - select configure and detect nested projects, the child projects are generated automatically in Eclipse, but some java classes are missing.

To reproduce

1). import the code in Eclipse(oxygen 2) as a general project, 

2). adding <skipTests>True</skipTests> in the following section

<artifactId>maven-surefire-plugin</artifactId>

<configuration>

<excludes>

<exclude>**/itest/**</exclude>

</excludes>

<skipTests>True</skipTests>

</configuration>

3) change the version of

org.restlet to 2.0.15 in rest-assured-itest-java pom file

• 
  

4) mvn clean install

5)  right click the project - configure - select configure and detect nested projects

The missing java classes are under  target\generated-sources\groovy-stubs, such as

•         git\rest-assured\json-path\target\generated-sources\groovy-stubs\main\io\restassured\internal\path\json\*java
• 
  
• I tried to move them to src/main/java but doesn't work, a lot of errors showing up.
• 
  
• Any suggestion?

• 
  
• Thanks
• Ellen
  
  On Friday, October 27, 2017 at 11:44:40 PM UTC-5, gayan wins wrote:

[Ellen Kang]

Never mind, I have figured out the issue.

 with -Djavax.net.debug=all, found the cert given by the server is not expected

*** Certificate chain

…

  Subject: CN=, OU=4212240101, O=Blue Coat SG900 Series, ST=Some-State, C="  "

  Signature Algorithm: SHA1withRSA, OID = 1.2.840.113549.1.1.5

…

  Issuer: CN=10.247.3.27, OU=4212240101, O=Blue Coat SG900 Series, ST=Some-State, C="  "

  SerialNumber: [    066da210 01000000]

The reason is I used proxy server.

openssl s_client -connect <your API uri> -prexit  can show you the certificate chain.

curl -kIv <your API uri> -u <username> also can show you the certification chain.

The source code of rest assured needs IntelliJ to set up.

Thanks

Ellen

On Friday, October 27, 2017 at 11:44:40 PM UTC-5, gayan wins wrote: