Mailing-List: contact users-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@httpd.apache.org
Received-SPF: pass (athena.apache.org: domain of covener@gmail.com designates
 66.249.92.173 as permitted sender)
DomainKey-Signature: a=rsa-sha1; c=nofws;
        d=gmail.com; s=gamma;
        h=message-id:date:from:to:subject:in-reply-to:mime-version
         :content-type:content-transfer-encoding:content-disposition
         :references;
        b=EPBKsyjLdP0WA9iirV/5qPH4A04J72ZM0yvTZr+krYrkemLMCLk8xStnwfQW1p7RaE
         6hkV1QfINi6pZX0E6dKBAxcX0d78+6TXtOJVDpDCgZNO7/OBYiXmtNjd2d+1cpRxJOVJ
         dNVwC3hf3V+Sy8blzDWzxSTL1VGTgBjLToWxg=
Message-ID: <1404e5910809080425r27417fdi5a3701a0f55cc552@mail.gmail.com>
Date: Mon, 8 Sep 2008 07:25:43 -0400
From: "Eric Covener" <covener@gmail.com>
To: users@httpd.apache.org
In-Reply-To: <19366602.post@talk.nabble.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
References: <19366602.post@talk.nabble.com>
Subject: Re: [users@httpd] HTTPS and SSL certificate issue + PKIX =
 javax.net.ssl.SSLHandshakeException

On Mon, Sep 8, 2008 at 2:32 AM, sh_santosh <santosh.ncstk@gmail.com> wrote:
>
> Dear all,
>
> I am getting this exception while invoking(web services) or accessing
> through java code.
>
> The URL which i try to access is secured using Certificate.
> Please see the exception -
>
> javax.net.ssl.SSLHandshakeException:
> sun.security.validator.ValidatorException: PKIX path building failed:
> sun.security.provider.certpath.SunCertPathBuilderException: unable to find
> valid certification path to requested target

Does your trust-store contain your server's issuer certificate, and
all intermediate certificates between the root and your cert?

For the latter, mod_ssl can send the certificate chain instead.

-- 
Eric Covener
covener@gmail.com

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org