Questions tagged [pkix]

PKIX is the Internet's PKI as specified by the Internet Engineering Task Force (IETF). PKIX details X509 certificate formats, issuing rules and validation rules.

PKIX is the Internet's PKI as specified by the Internet Engineering Task Force (IETF). PKIX details X509 certificate formats, issuing rules and validation rules in various Request for Comments (RFC).

Not all PKI's are PKIX. Organizations and government agencies can run a private PKI with rules that are different from PKIX. The documentation and rules for the US government's PKI is over 2000 pages.

User agents such as browsers use a different set of issuing policies than those specified in the RFCs. The browser issuing polices are provided by the CA/Browser Forum (CA/B Forum), and explains why browsers reject certificates that OpenSSL, Wget and other free software accept.

137 questions
2
votes
0 answers

PKIX error after installing Eclipse CDT 2021-06 and trying marketplace

I've just installed Eclipse CDT 2021-06 after having previously used 2021-03. When I try to browse the Eclipse marketplace, I get this error: MarketplaceDiscoveryStrategy failed with an error Cannot complete request to…
einpoklum
  • 118,144
  • 57
  • 340
  • 684
2
votes
0 answers

How can resolve SSL handshake issue on reindex from remote server

I am trying to reindex from a remote server to my local es index. remote is a https host, I am getting SSL handshake exception as following error, please advise, thank you { "source": { "remote": { "host": "https://otherhost:9200" …
Jamesjin
  • 371
  • 2
  • 6
  • 15
2
votes
1 answer

Certificate SSL_ERROR_BAD_CERT_DOMAIN for localhost / 127.0.0.1

I am creating a local app that starts a webserver in the localhost:8080 address. I am trying to create a certificate for it so that I can access it using HTTPS, but I am having a hard time doing this. First I created my own CA and then I created a…
Felipe
  • 6,312
  • 11
  • 52
  • 70
2
votes
1 answer

How to make https://localhost:port use self-signed certificate in embedded Jetty?

Goal: I want this url ( https://localhost:8083 ) to use my self-signed certiciate on my localmachine. First, I referenced this url (https://gist.github.com/oslego/f13e136ffeaa6174289a) and what I did was: $ openssl genrsa -des3 -out…
user2761895
  • 1,431
  • 4
  • 22
  • 38
2
votes
3 answers

How do I connect to an update site in Eclipse when I get an "Unable to read repository" ProvisionException error?

When trying to connect to an update site in eclipse in order to install the Cucumber-Eclipse plugin, I'm getting the following error: Unable to read repository at http://cucumber.io/cucumber-eclipse/update-site/content.xml. Unable to read…
royfripple
  • 81
  • 1
  • 1
  • 6
2
votes
2 answers

mvn clean: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException

Using the correct settings.xml file, but while executing mvn clean command getting below errors: [INFO] Scanning for projects... [INFO] [INFO] ------------------------------------------------------------------------ [INFO] Building myproject…
Farooque
  • 3,616
  • 2
  • 29
  • 41
2
votes
0 answers

How to Fix sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException:

I am hitting one URL from where XML is supposed to come as a response. When I hit the URL From browser I can see the XML. Same thing I want to acchive with RestTemplate. UriComponents uriComponents =…
user6705109
2
votes
1 answer

OpenSSL support for Client Certificate URLs

I am try to determine if Client Certificate URLs from RFC 4366 is supported by OpenSSL library. I can not find any information in the OpenSSL documentation. In file tls.h I can see following defines: /* ExtensionType values from RFC3546 / RFC4366 /…
padamowski
  • 139
  • 5
2
votes
2 answers

s_client and gethostbyname failure

I am working with an external company. Lets call them evilcorp.com. I want to use openssl to debug a two way SSL handshake. https://evilcorp.com is setup to not require client authentication. https://evilcorp.com/webservices is setup to require…
arahant
  • 2,203
  • 7
  • 38
  • 62
2
votes
2 answers

Error when connecting to URL - PKIX path building failed

I am trying to connect to a webpage to gather information, and I am using jsoup to parse the HTML. However, whenever I try to connect to the URL to download the source, I get an error saying something about the PKIX build path. I've looked around,…
Jtvd78
  • 4,135
  • 5
  • 20
  • 21
2
votes
1 answer

imported a certificate.pfx into cacerts and still getting "PKIX...unable to find valid certification path to requested target" error. What do?

I wrote a webservice client and now fail to get it to run through https. Although I imported the cert.pfx(alias=cert) into javas cacerts and succesfully added an entry with the certs alias. Still i cant use the wsimport prompt on the wsdl url. It…
Poly Morph
  • 29
  • 1
  • 1
  • 4
2
votes
2 answers

How to programmatically extract information from certificate?

I have a generated a certificate, but I would like to be able to extract the information from the certificate, as for example the country, the validity, the public key and so on. I have to compare this information retrived from the certificate with…
mmm
  • 689
  • 2
  • 12
  • 25
1
vote
2 answers

Unable to proxy Maven repo over https/ssl with Nexus

I followed the instructions given on this page to import the server certificate. When I use keytool -list, I can see that the certificate is actually in the keystore. If I try to import the .crt file, keytool warns me that the keystore already…
Aaron Digulla
  • 321,842
  • 108
  • 597
  • 820
1
vote
2 answers

Flutter build apk --split-per-abi Exception in thread "main" javax.net.ssl.SSLHandshakeException: PKIX path building failed:

I am trying to build and apk in flutter so i run below command flutter build apk --split-per-abi After i run the command i get below error Exception in thread "main" javax.net.ssl.SSLHandshakeException: PKIX path building failed:…
Emmanuel Njorodongo
  • 1,004
  • 17
  • 35
1
vote
0 answers

Fatal (CERTIFICATE_UNKNOWN): PKIX path building failed

getting certifiate isssue while triggering API:: javax.net.ssl|ERROR|01|main|2022-11-22 05:56:38.677 UTC|TransportContext.java:361|Fatal (CERTIFICATE_UNKNOWN): PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException:…
Mangesh
  • 31
  • 3
1 2
3
9 10