Make sure you have imported the public certificate of the target instance into the truststore according to the Connecting to SSL Services instructions.

Java does not trust the certificate and fails to connect to the application. This problem is therefore caused by a certificate that is self-signed (a CA did not sign it) or a certificate chain that does not exist within the Java truststore. certificate had been in the keystore, Java would also trust that site. These three certificates combined are referred to as the certificate chain, and, as they are all within the Java keystore ( cacerts), Java will trust any certificates signed by them (in this case, *.). For example, if we look at the certificate for Atlassian, we can see that the *. certificate has been signed by the intermediate certificates, DigiCert High Assurance EV Root CA and DigiCert High Assurance CA-3. These intermediate certificates have been signed by the root Secure Server CA:

The way trust is handled in the Java world is that you have a keystore (typically $JAVA_HOME/lib/security/cacerts), also known as the truststore. This contains a list of all known Certificate Authority (CA) certificates, and Java will only trust certificates that are signed by one of those CAs or public certificates that exist within that keystore. Whenever Java attempts to connect to another application over SSL (e.g.: HTTPS, IMAPS, LDAPS), it will only be able to connect to that application if it can trust it. If this fails (confirming the problem that the truststore doesn't contain the appropriate certificates), then the certificate will need to be imported into that truststore as per the instructions in Connecting to SSL Services. $JAVA_HOME/bin/java =/my/custom/truststore SSLPoke 443 : PKIX path building failed: .SunCertPathBuilderException: unable to find valid certification path to requested targetĪt .doBuild(PKIXValidator.java:387)Īt .engineValidate(PKIXValidator.java:292)Īt .validate(Validator.java:260)Īt 509TrustManagerImpl.validate(X509TrustManagerImpl.java:324)Īt 509TrustManagerImpl.checkTrusted(X509TrustManagerImpl.java:229)Īt 509TrustManagerImpl.checkServerTrusted(X509TrustManagerImpl.java:124)Īt .serverCertificate(ClientHandshaker.java:1351)Īt .processMessage(ClientHandshaker.java:156)Īt .processLoop(Handshaker.java:925)Īt .process_record(Handshaker.java:860)Īt .readRecord(SSLSocketImpl.java:1043)Īt .performInitialHandshake(SSLSocketImpl.java:1343)Īt .writeRecord(SSLSocketImpl.java:728)Īt .write(AppOutputStream.java:123)Īt .write(AppOutputStream.java:138)Ĭaused by: .SunCertPathBuilderException: unable to find valid certification path to requested targetĪt .SunCertPathBuilder.build(SunCertPathBuilder.java:145)Īt .SunCertPathBuilder.engineBuild(SunCertPathBuilder.java:131)Īt .build(CertPathBuilder.java:280)Īt .doBuild(PKIXValidator.java:382)Ī successful connection would look like this:

Error occurred while connecting to ssl