Home/ Questions/Learn how to fix error: ''Unable to find valid certification path to requested target"
Next
Answered
lenorepollich
  • 10
Asked: 2022-06-10T06:43:27+00:00 In:

Learn how to fix error: ”Unable to find valid certification path to requested target”

  • 10

. Advertisement .

..3..

. Advertisement .

..4..

When attempting to establish a trusted SSL connection via Artifactory, I get this error ”Unable to find valid certification path to requested target”.

Here is the error message I have gotten:

[ERROR] (o.a.a.r.c.BaseReplicationProducer:97) – Error occurred while performing folder replication for 'XXXX':
sun.security.validator.ValidatorException: PKIX path building failed:
sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target:
sun.security.validator.ValidatorException:

Has anyone ever faced this problem? How to solve it? 

Share

1 Answer

  1. Best Answer
    Expert

    The cause: This error means Artifactory was unable to establish a secure SSL connection using SSL. If you’re using a self-signed certificate or one issued by an internal certificate authority, or if your clients (e.g., browser, Java) are outdated, you can run into this problem.

    The solution: Get your root certificate first. Then, (keeping in mind that if you’re working in a HA environment, you’ll need to apply these procedures to all of your nodes), do the following:

    1. Run openssl s_client -showcerts -connect <REMOTE_URL>:<REMOTE_PORT> to get the root and intermediate certificates for the remote site. Note: If you’re using the default JVM security setting, this might not be necessary.
      For example:

      openssl s_client -showcerts -connect google.com:443
    2. Each certificate need to be saved as a file. For instance:
    s:/C=US/ST=North Carolina/L=Raleigh/O=Red Hat, Inc./OU=Red Hat Network/CN=Entitlement Master
CA/[email protected]
i:/C=US/ST=North Carolina/L=Raleigh/O=Red Hat, Inc./OU=Red Hat Network/CN=Entitlement Master
CA/[email protected]

    This shows that the issuer (i:) and the subject (s:) are the same.
    As a result, this certificate is the root certificate. Save the certificate’s hash, being sure to include:

    —–BEGIN CERTIFICATE—– and the —–END CERTIFICATE—–

    as the root.crt.

    • 15

Leave an answer

You must login to add an answer.

Need An Account,