Questions tagged [pkix]

PKIX is the Internet's PKI as specified by the Internet Engineering Task Force (IETF). PKIX details X509 certificate formats, issuing rules and validation rules.

PKIX is the Internet's PKI as specified by the Internet Engineering Task Force (IETF). PKIX details X509 certificate formats, issuing rules and validation rules in various Request for Comments (RFC).

Not all PKI's are PKIX. Organizations and government agencies can run a private PKI with rules that are different from PKIX. The documentation and rules for the US government's PKI is over 2000 pages.

User agents such as browsers use a different set of issuing policies than those specified in the RFCs. The browser issuing polices are provided by the CA/Browser Forum (CA/B Forum), and explains why browsers reject certificates that OpenSSL, Wget and other free software accept.

137 questions
6
votes
1 answer

Cacerts compatibility with java versions

I am generating cacerts using JDK1.6 keytool. Then I am using this cacerts file using JRE1.7, but I get exception like : javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path validation failed:…
codingenious
  • 8,385
  • 12
  • 60
  • 90
5
votes
5 answers

jenkins pluginManager 'Check Now' 'unable to find valid certification' error

I just installed a new jenkins 2.77 instance on my Windows machine, running Java 1.8.0 #60. I was expecting there to be some default plugins but it seems like none were installed when the instance was created. When I go to check the available…
kraftydevil
  • 5,144
  • 6
  • 43
  • 65
5
votes
4 answers

Get just the certificate portion from an openssl pem file

I have a PEM format certificate which contains all the headers in ASCII/UTF-8 text. I would like to output just the certificate itself. In other words the portion between and inclusive of: -----BEGIN CERTIFICATE----- and -----END…
James B. Byrne
  • 1,048
  • 12
  • 27
5
votes
4 answers

SSL Error: unable to find valid certification path to requested target

I am trying to connect to a url through my server that requires certificate. I have imported my Client Authentication Certificate to {JAVA_HOME}/jre/bin/security/cacerts and also i have placed it in the keystore in Jboss/bin and jboss/server/conf/…
user2367636
  • 59
  • 1
  • 1
  • 4
4
votes
1 answer

sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException

Situation : (1) I am on Android Studio 4.1 and trying to build a sample Android Application (2) I am behind the Proxy and Proxy settings working fine as I am able to download and install SDKs I am getting the below error : I tried all possible…
Raulp
  • 7,758
  • 20
  • 93
  • 155
4
votes
1 answer

What's the conceptual difference between CertPathValidator and CertPathBuilder?

I needed to perform chain validation and revocation checking for the given X509 certificate. So I went through this guide, and also explored the JavaDoc for CertPathValidator and CertPathBuilder APIs as well as examples in github repositories. After…
CoderGirl
  • 61
  • 1
  • 4
4
votes
1 answer

How to get key usage values from X509 cert?

I need to retrieve information from x509 cert to verify Key usage. For example I need to make sure certificate can be used for digital signing (80). It can be printed out by the following code piece, but i actually want to verify if certificate has…
Ufuk Öz
  • 51
  • 4
3
votes
0 answers

Getting PKIX path building failed: sun.security.provider.certpath.. Exception when trying to connect SQL SERVER with Pyspark locally

I am trying to connect to locally installed sql-server-2017 with pyspark. My intend is to create Df from it. While doing so, I am getting the error as:- An error occurred while calling o51.load. : com.microsoft.sqlserver.jdbc.SQLServerException: The…
Aditya Rathi
  • 59
  • 1
  • 6
3
votes
2 answers

Maven build failed - PKIX path validation failed: java.security.cert.CertPathValidatorException: validity check failed - Mac

I am trying a build code a using maven in mac machine but it is getting failed with following error message PKIX path validation failed: java.security.cert.CertPathValidatorException: validity check failed: NotAfter: Thu Apr 01 00:59:59 BST…
ezhil
  • 977
  • 6
  • 15
  • 36
3
votes
2 answers

'Missing artifact' and 'Failed to read artifact descriptor' errors on Spring MVC project

I'm getting multiple "missing artifact" and "failed to read artifact descriptor" errors on a Spring MVC project, for example: Missing artifact com.google.guava:guava:jar:20.0 Failed to read artifact descriptor for…
Christos Karapapas
  • 1,018
  • 3
  • 19
  • 40
3
votes
3 answers

OpenSSL for 64-bit Windows and "no shared cipher"

I have just compiled and installed OpenSSL for 64-bit Windows. I have created a self-signed certificate and a private key with the command: openssl req -x509 -newkey rsa:4096 -keyout key.pem -out cert.pem -days 10000 -nodes I am now testing the…
Æðelstan
  • 822
  • 12
  • 23
3
votes
1 answer

Getting "CERT_UNTRUSTED" error when executing a server side HTTPS request in Node.JS application?

My Node.JS/Express application is getting the following error when attempting an HTTPS GET request from my server code, to an API served by another server (different company, server not owned by us): CERT_UNTRUSTED NOTE: I am running these tests…
Robert Oschler
  • 14,153
  • 18
  • 94
  • 227
2
votes
1 answer

How to get hold of the cause of the PKIX path building failed Exception

I am getting the well known PKIX path building failed exception, and to find the underlying cause i have to enable java.security.debug=certpath and look at the logs. In my case the cause is certpath: SunCertPathBuilder.depthFirstSearchForward():…
Paralife
  • 6,116
  • 8
  • 38
  • 64
2
votes
0 answers

PKIX path building failed: SunCertPathBuilderException: unable to find valid certification path to requested target (webrisk.googleapis.com)

I'm running a Java application that calls Google Web Risk services using Apache HttpClient. The app is running on Tomcat 9 server without any special configs. During the handshake with Google's host, I'm getting the following error PKIX path…
2
votes
0 answers

What is the difference between sql-jdbc4 and mssql jdbc driver?

Attempt to connect jdbc to SQL Server. The following error occurs when using the mssql jdbc driver: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find…
user13746660
1
2
3
9 10