Java Connecting to azure event hub: SunCertPathBuilderException

Question

I'm not very used to java world, so I'm not sure if my problem is on my Azure set up, or java set up. I am getting the following exception after attempting the tutorial below.

https://learn.microsoft.com/en-us/azure/event-hubs/event-hubs-java-get-started-receive-eph

Failure while registering:     
com.microsoft.azure.eventprocessorhost.EPHConfigurationException:   
Encountered error while fetching the list of EventHub PartitionIds: 
sun.security.validator.ValidatorException: PKIX path building failed: 
sun.security.provider.certpath.SunCertPathBuilderException: unable to find 
valid certification path to requested target

The exception occurs during this line from the sample:

 host.registerEventProcessor(EventProcessor.class, options).get();

I did the .NET version of the tutorial with little problem. Sending and receiving works in that case. Any insights? I've been fumbling around with no luck the last few days.

Can you share the format of conectionString being used? Also make sure you are on the latest versions. — Sreeram Garlapati, Feb 10 '17 at 22:07
@Sreeram Im using the key as provided in the AZURE UI - long alphanumeric followed by an '=' — Seth, Feb 13 '17 at 14:21

score 3 · Answer 1 · answered Feb 14 '17 at 09:39

3

I searched for your issue and find some helpful blogs which can help solving the issue, please refer to the blogs below.

The above blogs all used the tool InstallCert to server certificate that can be added to local keystore. Please follow the README of the GitHub repository.

answered Feb 14 '17 at 09:39

Peter Pan

23,476
4
25
43

Thanks, looking into this. Too much multitasking. – Seth Feb 16 '17 at 20:28
I followed this, and it doesn't seem to have solved it. I actually do agree that this is an issue with cacerts, but going through both blogs didnt unjam my problem. – Seth Feb 16 '17 at 21:54

JSamir · Answer 2 · 2017-02-23T19:31:52.480

2

Download the certificate with your browser and add it to your Java keystore like this:

C:\java\jdk1.8.0_60\jre\lib\security>C:\java\jdk1.8.0_60\jre\bin\keytool.exe -import -alias alias -file C:\path\to\file.crt -keystore C:\java\jdk1.8.0_60\jre\lib\security>cacerts -storepass changeit

You need to make sure to add the cert to the correct Java installation or just add to all installations, given you got more than one.

edited Feb 23 '17 at 19:31

answered Feb 23 '17 at 19:17

JSamir

1,057
1
10
20

Unfortunately, i figured it out this morning. It was a closed port on my network. I did try this function and is helpful. Thanks a lot for posting it. – Seth Feb 23 '17 at 21:30

score 0 · Accepted Answer · answered Feb 23 '17 at 21:50

0

Turns out it was a stupid network problem. The amqp port is whitelist only.

answered Feb 23 '17 at 21:50

Seth

954
1
15
42

score 0 · Answer 4 · answered May 09 '18 at 16:27

Adding certificate:

keytool -keystore C:\Program" "Files\Java\jre1.8.0_171\lib\security\cacerts -import -alias aliasName
-file C:\Users\cg\Downloads\springio.cer  -storepass changeit

To check installed certificates:

keytool -keystore C:\Program" "Files\Java\jre1.8.0_171/lib/security/cacerts -storepass changeit -list

Java Connecting to azure event hub: SunCertPathBuilderException

4 Answers4