Skip to Main Content

Java Security

Announcement

For appeals, questions and feedback about Oracle Forums, please email oracle-forums-moderators_us@oracle.com. Technical questions should be asked in the appropriate category. Thank you!

PKIX path building failed

843811Mar 22 2006
I'm trying to run a program that connects to a web service using SSL, but I am getting the infamous "PKIX path building failed" "unable to find valid certification path to requested target" error message. I had this problem fixed before I upgraded to the latest 1.5.0_06 JDK, and I changed all the commands to use the new path to this new JDK, but none of that is working, now.

I've also found that some of the signed applets that we were using are also failing to connect with the exact same jar files that were working earlier now that the browser has been upgraded to the newest JRE, even after importing the new certificate into the new JRE keystore.

All these problems are related to the same application we have, which is an applet that uploads files using SOAP to a web service. The "PKIX path building failed" problem occurs when I try to create the Stubs for the applet to use to connect to the Web Service. The Applet connection problem occurs on the old connections that already have a Stub and have been working prior to upgrading to JRE1.5.0_06, and still works in browsers using the older pre-JRE1.5.0_06 JRE.

Has something changed in the JDK 1.5_06, such as the location that it uses for the trusted certificates keystore? We are importing the certificates into "C:\Program Files\Java\jre1.5.0_06\lib\security\cacerts" for the applet.

For the "PKIX path building failed" problem, I am doing what I always did prior to changing the JDK version by just doing keytool -import and using the default keystore, which used to be "C:\Documents and Settings\USER_NAME\.keystore". Any ideas?
Comments
Locked Post
New comments cannot be posted to this locked post.
Post Details
Locked on Apr 19 2006
Added on Mar 22 2006
0 comments
822 views