Java PKIX路径生成失败：找不到请求目标的有效证书路径
我正在调用某个HTTPS web服务，该服务由以下客户端提供：Java PKIX路径生成失败：找不到请求目标的有效证书路径,java,web-services,certificate,ssl-certificate,Java,Web Services,Certificate,Ssl Certificate,我正在调用某个HTTPS web服务，该服务由以下客户端提供： import java.io.ByteArrayOutputStream; import java.io.FileInputStream; import java.io.IOException; import java.io.InputStream; import java.io.OutputStream; import java.io.PrintStream; import java.net.HttpURLConnection;
import java.io.ByteArrayOutputStream;
import java.io.FileInputStream;
import java.io.IOException;
import java.io.InputStream;
import java.io.OutputStream;
import java.io.PrintStream;
import java.net.HttpURLConnection;
import java.net.URL;
import javax.net.ssl.HttpsURLConnection;
/**
* Handles http and https connections. It sends XML request over http (or https)
* to SOAP web service and receive the XML reply.
*
* @author mhewedy
* @date 30.10.2010
*/
public class HttpWSXmlClient
{
private final String ws_url;
private byte[] requestData;
public HttpWSXmlClient(String wsUrl)
{
this.ws_url = wsUrl;
}
public void readRequest(String xmlRequestFilePath)
{
try
{
InputStream istream = new FileInputStream(xmlRequestFilePath);
byte[] data = stream2Bytes(istream);
istream.close();
this.requestData = data;
} catch (Exception e)
{
throw new RuntimeException(e.getMessage());
}
}
/**
*
* @param ps
* PrintStream object to send the debugging info to.
* @return
* @throws IOException
*/
public byte[] sendAndRecieve(PrintStream ps) throws IOException
{
if (requestData == null)
throw new RuntimeException(
"the request data didn't initialized yet.");
if (ps != null)
ps.println("Request:\n" + new String(requestData));
URL url = new URL(ws_url);
HttpsURLConnection connection = (HttpsURLConnection) url.openConnection();
// or HttpURLConnection connection = (HttpURLConnection) url.openConnection();
connection.setDoOutput(true);
connection.setRequestProperty("content-type", "text/xml");
connection.connect();
OutputStream os = connection.getOutputStream();
os.write(requestData);
InputStream is = connection.getInputStream();
byte[] rply = stream2Bytes(is);
if (ps != null)
ps.println("Response:\n" + new String(rply));
os.close();
is.close();
connection.disconnect();
return rply;
}
public byte[] sendAndRecieve() throws IOException
{
return sendAndRecieve(null);
}
private byte[] stream2Bytes(InputStream istream) throws IOException
{
ByteArrayOutputStream outstream = new ByteArrayOutputStream();
int c;
while ((c = istream.read()) != -1)
{
if (c != 0x0A && c != 0x0D) // prevent new line character from being
// written
{
if (c == 0x09)
c = 0x20; // prevent tab character from being written,
// instead write single space char
outstream.write(c);
}
}
byte[] ret = outstream.toByteArray();
outstream.close();
return ret;
}
}
Exception in thread "Main Thread" javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
at com.sun.net.ssl.internal.ssl.Alerts.getSSLException(Alerts.java:174)
at com.sun.net.ssl.internal.ssl.SSLSocketImpl.fatal(SSLSocketImpl.java:1591)
at com.sun.net.ssl.internal.ssl.Handshaker.fatalSE(Handshaker.java:187)
at com.sun.net.ssl.internal.ssl.Handshaker.fatalSE(Handshaker.java:181)
at com.sun.net.ssl.internal.ssl.ClientHandshaker.serverCertificate(ClientHandshaker.java:1035)
at com.sun.net.ssl.internal.ssl.ClientHandshaker.processMessage(ClientHandshaker.java:124)
at com.sun.net.ssl.internal.ssl.Handshaker.processLoop(Handshaker.java:516)
at com.sun.net.ssl.internal.ssl.Handshaker.process_record(Handshaker.java:454)
at com.sun.net.ssl.internal.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:884)
at com.sun.net.ssl.internal.ssl.SSLSocketImpl.performInitialHandshake(SSLSocketImpl.java:1096)
at com.sun.net.ssl.internal.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1123)
at com.sun.net.ssl.internal.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1107)
at sun.net.www.protocol.https.HttpsClient.afterConnect(HttpsClient.java:415)
at sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.connect(AbstractDelegateHttpsURLConnection.java:166)
at sun.net.www.protocol.https.HttpsURLConnectionImpl.connect(HttpsURLConnectionImpl.java:133)
at com.se.swstest.HttpWSXmlClient.sendAndRecieve(HttpWSXmlClient.java:63)
at com.se.swstest.Test.main(Test.java:11)
Caused by: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
at sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:285)
at sun.security.validator.PKIXValidator.engineValidate(PKIXValidator.java:191)
at sun.security.validator.Validator.validate(Validator.java:218)
at com.sun.net.ssl.internal.ssl.X509TrustManagerImpl.validate(X509TrustManagerImpl.java:126)
at com.sun.net.ssl.internal.ssl.X509TrustManagerImpl.checkServerTrusted(X509TrustManagerImpl.java:209)
at com.sun.net.ssl.internal.ssl.X509TrustManagerImpl.checkServerTrusted(X509TrustManagerImpl.java:249)
at com.sun.net.ssl.internal.ssl.ClientHandshaker.serverCertificate(ClientHandshaker.java:1014)
... 12 more
Caused by: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
at sun.security.provider.certpath.SunCertPathBuilder.engineBuild(SunCertPathBuilder.java:174)
at java.security.cert.CertPathBuilder.build(CertPathBuilder.java:238)
at sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:280)
... 18 more
谢谢。您需要设置证书才能访问此url。请使用以下代码设置密钥库：
System.setProperty("javax.net.ssl.trustStore","clientTrustStore.key");
System.setProperty("javax.net.ssl.trustStorePassword","qwerty");
您需要设置证书才能访问此url。请使用以下代码设置密钥库：
System.setProperty("javax.net.ssl.trustStore","clientTrustStore.key");
System.setProperty("javax.net.ssl.trustStorePassword","qwerty");
我曾多次遇到这种情况，这是因为证书链不完整。如果您使用的是标准java信任存储，它可能没有完成证书链所需的证书，而证书链是验证您连接的SSL站点的证书所需的
我在使用一些DigiCert证书时遇到了这个问题，不得不自己手动添加中间证书。我遇到过几次，这是因为证书链不完整。如果您使用的是标准java信任存储，它可能没有完成所需证书链所需的证书d验证您连接到的SSL站点的证书
我在使用一些DigiCert证书时遇到了这个问题，不得不自己手动添加中间证书。对于我来说，我在调用webservice调用时遇到了这个错误，请确保站点具有有效的ssl，即检查url一侧的徽标，否则需要将证书添加到mach中的受信任密钥存储中ine对于我来说，我在调用Web服务调用时遇到了这个错误，请确保该站点具有有效的ssl，即选中url一侧的徽标，否则需要将证书添加到计算机中的受信任密钥存储在Mac OS上，我必须使用系统密钥链访问工具impo打开服务器的自签名证书rt it，dobubleclick它，然后选择“始终信任”（即使我在importer中设置了相同的设置）。
在此之前，我当然会运行java key take with-importcert将同一文件导入到cacert存储中。在Mac OS上，我必须使用系统密钥链访问工具打开服务器的自签名证书，导入它，双击它，然后选择“始终信任”（即使我在importer中设置了相同的设置）。
在此之前，我当然运行了java key Take with-importcert将同一文件导入到cacert存储。我也遇到了这种问题。我使用tomcat服务器，然后我在tomcat中放置了已认可的文件夹，然后它开始工作。我还用1.7替换了JDK1.6，然后它也开始工作。最后我学习了SSL，然后我解决了这种问题。首先，你需要d从该服务提供商服务器下载证书。然后您确认握手成功。 1.尝试将已签署的文件夹放入服务器 下一条路 2.使用jdk1.7 下一个
3.尝试使用SSL下载有效的证书。我也遇到了此类问题。我使用tomcat服务器，然后我在tomcat中放置了已认可的文件夹，然后它开始工作。我还用1.7替换了JDK1.6，然后它也开始工作。最后我学习了SSL，然后我解决了此类问题。首先，您需要从该服务pro下载证书视频服务器。那么你是握手成功。 1.尝试将已签署的文件夹放入服务器 下一条路 2.使用jdk1.7 下一个
3.尝试使用SSL下载有效证书Java 8解决方案：我刚刚遇到了这个问题，通过将远程站点的证书添加到我的Java密钥库解决了这个问题。我的解决方案基于，它基于。这些博客文章解决方案归结为下载一个名为的程序，这是一个可以通过命令l运行的Java类然后继续在Java的密钥库中安装证书 该命令对我非常有效。您只需运行以下命令：
javac InstallCert.javajava InstallCert[host]：[port]keytool-exportcert-alias[host]-1-keystore jssecacerts-storepass changeit-file[host].cersudo keytool-importcert-alias[host]-keystore[path to system keystore]-storepass changeit-file[host].cer如果需要，请参阅参考的自述文件以获取示例。Java 8解决方案：我刚刚遇到了这个问题，并通过将远程站点的证书添加到我的Java密钥库来解决它。我的解决方案基于，它基于。这些博客文章解决方案归结为下载一个名为的程序，这是一个可以运行的Java类获取证书的命令行。然后继续在Java的密钥库中安装证书 该命令对我非常有效。您只需运行以下命令：
javac InstallCert.javajava InstallCert[host]：[port]keytool-exportcert-alias[host]-1-keystore jssecacerts-storepass changeit-file[host].cersudo keytool-importcert-alias[host]-keystore[path to system keystore]-storepass changeit-file[host].cer如果需要，请参阅参考自述文件以获取示例。以下是我用于将站点的公共证书安装到系统密钥库中以供使用的解决方案 使用以下命令下载证书：
keytool -import -alias "[host]" -keystore [path to keystore] -file [host].crt
openssl s_client -connect [host]:[port|443] < /dev/null | sed -ne '/-BEGIN CERTIFICATE-/,/-END CERTIFICATE-/p' > [host].crt
这将允许您从导致异常的站点导入新证书。以下是我用于将站点的公共证书安装到系统密钥库中以供使用的解决方案 下载
keytool -import -alias "[host]" -keystore [path to keystore] -file [host].crt
/**
* disable SSL
*/
private void disableSslVerification() {
try {
// Create a trust manager that does not validate certificate chains
TrustManager[] trustAllCerts = new TrustManager[] {
new X509TrustManager() {
public java.security.cert.X509Certificate[] getAcceptedIssuers() {
return null;
}
public void checkClientTrusted(X509Certificate[] certs,
String authType) {
}
public void checkServerTrusted(X509Certificate[] certs,
String authType) {
}
} };
// Install the all-trusting trust manager
SSLContext sc = SSLContext.getInstance("SSL");
sc.init(null, trustAllCerts, new java.security.SecureRandom());
HttpsURLConnection.setDefaultSSLSocketFactory(sc.getSocketFactory());
// Create all-trusting host name verifier
HostnameVerifier allHostsValid = new HostnameVerifier() {
public boolean verify(String hostname, SSLSession session) {
return true;
}
};
// Install the all-trusting host verifier
HttpsURLConnection.setDefaultHostnameVerifier(allHostsValid);
} catch (NoSuchAlgorithmException e) {
e.printStackTrace();
} catch (KeyManagementException e) {
e.printStackTrace();
}
}