Inspiring

Question

PKIX path building failed: java.security.cert.CertPathBuilderException: Could not build a validated path

7 replies
8535 views
Translate

On my HTTP request, I kept getting this error.

handling exception: javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: java.security.cert.CertPathBuilderException: Could not build a validated path.

Sep 16, 2016 10:26:14 AM Error [ajp-bio-8013-exec-2] - ERROR: failed to read from https://myapps.example.com/units.json. Response code: 'Connection Failure. Status code unavailable.' Error details: 'I/O Exception: sun.security.validator.ValidatorException: PKIX path building failed: java.security.cert.CertPathBuilderException: Could not build a validated path.'

I found this page, https://www.hass.de/content/coldfusion-java-pkix-path-building-failed-javasecuritycertcertpathbuilderexception-could-not , that talks about the same exact error that I have. However, it didn't resolve my issue even though I verified that the certificate is already exist in my cacerts file.

Security

This topic is closed to new replies. Start a new post to keep the conversation going.

Paolo Olocco

Known Participant

JDK 1.8 with update 122 will use TLS 1.2 as default

https://blogs.oracle.com/java-platform-group/jdk-8-will-use-tls-12-as-default

Translate

Charlie Arehart

Community Expert

Paulo, would you mind offering some context to your comment here? Are you reporting that as version info for your having the problem discussed above? Or are you reporting it as a solution?

And for anyone interested in more about Pete's suggestion (and how the Java update may have worked for Paolo) , I'll add that about a year ago I'd done a post with more at https://coldfusion.adobe.com/2019/06/error-calling-cf-via-https-solved-updating-jvm/.

Translate

/Charlie (troubleshooter, carehart. org)

Paolo Olocco

Known Participant

Hi Charlie, I just wanted to add a more precise detail as a comment in this post with the micro version of JDK

Thanks a lot for your post, but on Google it came out after Pete's post, sorry 😉

Translate

harryfear

Participating Frequently

Just to say thanks to Pete. Bumping up the Java version also solved our problem!

Translate

BKBK

Community Expert

What is your ColdFusion version? What Java version does it run on?

Translate

pete_freitag

Participating Frequently

It could be that the server is requiring a more modern protocol such as TLS 1.2, and you are using an old version of Java which does not support TLS 1.2. You need to make sure you are using Java 1.8 or greater (TLS 1.2 can be supported on Java 1.7 but it is not enabled by default).

Translate

Sign up

To post, reply, or follow discussions, please sign in with your Adobe ID.

Sign in to Adobe Community

To post, reply, or follow discussions, please sign in with your Adobe ID.