Java PKIX路径生成失败-OpenShift上的Spring启动服务

我尝试从OpenShift平台上Docker容器中运行的Spring引导服务调用SSL安全的Web服务

我得到以下错误：

org.springframework.ws.client.WebServiceIOException: I/O error: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target; nested exception is javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target 
at org.springframework.ws.client.core.WebServiceTemplate.sendAndReceive(WebServiceTemplate.java:561) 
at org.springframework.ws.client.core.WebServiceTemplate.marshalSendAndReceive(WebServiceTemplate.java:390) 
at client.webClient.callServ(WebClient.java:45) 

这是我的网络客户：

public class webClient extends WebServiceGatewaySupport {

private String targetUrl = "https://service.com/REST/call";
private String soapActionCall = "http://soapurl.com";

@Autowired
@Qualifier("webServiceTemplateClient")
private WebServiceTemplate webServiceTemplateClient;

@Autowired
private ClientInterceptor interceptor;  

public ClientResponse callServ(ServData request) {
    try {
        ClientInterceptor[] interceptors = new ClientInterceptor[1];
        interceptors[0] = interceptor;
        webServiceTemplateClient.setInterceptors(interceptors);
        
        ClientResponse response = (ClientResponse) webServiceTemplateClient.marshalSendAndReceive(targetUrl,
                request, new MessageCallback(soapActionCall));
        return response;
    } catch (Exception ex) {
        ex.printStackTrace();
        return null;
    }

}
}

以下是配置：

@Configuration
public class ClientConfig {

private String username = "demo";
private String password = "demo";
private String defaultUri = "https://service.com/rest/call";
private String trustPassword = "secret";
private String trustStore = "/opt/app-root/ssl/key.jks";

@Autowired
private ResourceLoader resourceLoader;


@Bean
@Qualifier("marshallerClient")
public Jaxb2Marshaller marshallerClient() {
    Jaxb2Marshaller marshaller = new Jaxb2Marshaller();
    marshaller.setContextPath("client.Service");
    return marshaller;
}

@Bean
public ServClient servClient(@Qualifier("marshallerClient") Jaxb2Marshaller marshallerClient) {
    ServClient client = new ServClient();
    client.setDefaultUri(defaultUri);
    client.setMarshaller(marshallerClient);
    client.setUnmarshaller(marshallerClient);
    return client;
}

@Bean
@Qualifier("webServiceTemplateClient")
public WebServiceTemplate webServiceTemplateClient() {
    WebServiceTemplate webServiceTemplate = new WebServiceTemplate();
    webServiceTemplate.setMarshaller(marshallerClient());
    webServiceTemplate.setUnmarshaller(marshallerClient());
    webServiceTemplate.setDefaultUri("");
    webServiceTemplate.setMessageSender(httpComponentsMessageSenderClient());

    return webServiceTemplate;
}

@Bean
public HttpComponentsMessageSender httpComponentsMessageSenderClient() {
    HttpComponentsMessageSender httpComponentsMessageSender = new HttpComponentsMessageSender() ;
    // set the basic authorization credentials
    httpComponentsMessageSender.setCredentials(usernamePasswordCredentialsClient());
    return httpComponentsMessageSender;
}

@Bean
public UsernamePasswordCredentials usernamePasswordCredentialsClient() {
    // pass the user name and password to be used
    return new UsernamePasswordCredentials(security.decrypt(username), security.decrypt(password));
}

@Bean
public HttpsUrlConnectionMessageSender httpsUrlConnectionMessageSender() throws Exception {
    System.out.println("httpsUrlConnectionMessageSender");
    HttpsUrlConnectionMessageSender httpsUrlConnectionMessageSender = new HttpsUrlConnectionMessageSender();
    httpsUrlConnectionMessageSender.setTrustManagers(sessionTrustManagersFactoryBean().getObject());
    return httpsUrlConnectionMessageSender;
}

@Bean
public KeyStoreFactoryBean sessionTrustStore() {
    KeyStoreFactoryBean keyStoreFactoryBean = new KeyStoreFactoryBean();
    Resource resTrustStore = resourceLoader.getResource("file:" + trustStore);
    keyStoreFactoryBean.setLocation(resTrustStore);
    keyStoreFactoryBean.setPassword(security.decrypt(trustPassword));
    return keyStoreFactoryBean;
}

@Bean
public TrustManagersFactoryBean sessionTrustManagersFactoryBean() {
    TrustManagersFactoryBean trustManagersFactoryBean = new TrustManagersFactoryBean();
    trustManagersFactoryBean.setKeyStore(sessionTrustStore().getObject());

    return trustManagersFactoryBean;
}
}

密钥库保存了我用Firefox从站点提取的证书。 我需要为密钥库设置任何其他信息吗？

---

从我的日志中，我可以看到密钥库已成功加载。

我认为您不应该有

文件：“

此处：

Resource resTrustStore=resourceLoader.getResource（“文件：+trustStore”）；

我认为你不应该有

文件：“

这里：

Resource resTrustStore=resourceLoader.getResource（“文件：+trustStore”）；

从文件系统加载ressource（密钥库）需要此“文件”。如果我不使用它，则无法加载密钥库。从文件系统加载ressource（密钥库）需要此“文件”。如果我忽略它，则无法加载密钥库。