Hitachi Vantara Pentaho Community Forums
Results 1 to 7 of 7

Thread: HTTP POST: unable to find valid certification path to requested target

  1. #1

    Default HTTP POST: unable to find valid certification path to requested target

    Hi,

    I am new to Web Services, so looking for some guidance.

    I am trying to access a web service via the HTTP Post step.

    When I invoke the service directly in my browser (to get the XML), I have to add a security exception
    for that particular web site.

    When accessing through HTTP post or Web services step, is there a way to add the
    security certificate.

    I get the following error

    sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

    Is there a way to circumvent this?

    I am using PDI 4.2.0 - stable.

    Thanks for your reading this.

    Appreciate any help.
    Last edited by akotian; 10-13-2011 at 09:23 AM.

  2. #2

    Default

    Hi,

    Can we in some way ask the HTTP post step to ignore the security certificate?

    Please let me know.

  3. #3

    Default

    Hi,

    Any body has some input on this,

    Please

  4. #4
    Join Date
    Feb 2008
    Posts
    107

    Default

    Hi akotian,

    This page may have some useful info for you :

    http://confluence.atlassian.com/disp...o+SSL+services

    Cheers,
    Paul

  5. #5
    Join Date
    Apr 2007
    Posts
    2,010

    Default

    this is an annoying java thing. The only way to "ignore" a certificate like that is to import the certificate into the cacerts file used by the JVM - so that it then becomes trusted.

  6. #6

    Default

    Thanks for you replies.

    I was able to solve this issue by following this useful blog.

    http://mirkasimali80.blogspot.com/20...about-web.html

    It shows how to add certificated to cacerts file.

  7. #7

    Default

    Quote Originally Posted by akotian View Post
    Thanks for you replies.

    I was able to solve this issue by following this useful blog.

    http://mirkasimali80.blogspot.com/20...about-web.html

    It shows how to add certificated to cacerts file.
    Hello, I've got the same issue trying from my computer to retrieve mails from gmail

    So I downloaded thanks to firefox the certificate from Gmail that i called gmail.crt (X 509 PEM)
    Then I followed the second part of the tutorial above and it worked.
    I put keytool -import -alias gmail -keystore "C:\Program Files (x86)\Java\jre6\lib\security\cacerts" -trustcacerts -file C:\certificatesStore\gmail.crt
    It asked me (in french)
    "Do you want to trust this cert [no] : yes "
    and then :
    "certifiacte added to the Keystore"

    Of course, I checked that jre6 was the one used in windows env variables.


    But after restarting Kettle, I still have the problem below

    I noticed that on another post someone told
    You might want to check the "spoon.sh" file and maybe add the "cacerts" file as:
    -Djavax.net.ssl.trustStore=/path/to/your/cacerts
    to JAVA_OPTS

    Do I have to and where exactly can I add this in spoon.bat ?

    Thanks for your help

    2013/05/30 11:03:36 - Récupération courriels (POP3/IAMP) - ERROR (version 4.4.0-stable, build 17588 from 2012-11-21 16.02.21 by buildguy) : Unexpected error: 2013/05/30 11:03:36 - Récupération courriels (POP3/IAMP) - ERROR (version 4.4.0-stable, build 17588 from 2012-11-21 16.02.21 by buildguy) : Erreur lors de la connexion au serveur [imap.gmail.com] avec le compte [xxxxxxxxxxxx@gmail.com] sur le port [993]!
    2013/05/30 11:03:36 - Récupération courriels (POP3/IAMP) - ERROR (version 4.4.0-stable, build 17588 from 2012-11-21 16.02.21 by buildguy) : sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
    2013/05/30 11:03:36 - Récupération courriels (POP3/IAMP) - ERROR (version 4.4.0-stable, build 17588 from 2012-11-21 16.02.21 by buildguy) : org.pentaho.di.core.exception.KettleException:
    2013/05/30 11:03:36 - Récupération courriels (POP3/IAMP) - ERROR (version 4.4.0-stable, build 17588 from 2012-11-21 16.02.21 by buildguy) : Erreur lors de la connexion au serveur [imap.gmail.com] avec le compte [xxxxxxxxxx@gmail.com] sur le port [993]!
    2013/05/30 11:03:36 - Récupération courriels (POP3/IAMP) - ERROR (version 4.4.0-stable, build 17588 from 2012-11-21 16.02.21 by buildguy) : sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
    2013/05/30 11:03:36 - Récupération courriels (POP3/IAMP) - ERROR (version 4.4.0-stable, build 17588 from 2012-11-21 16.02.21 by buildguy) :
    2013/05/30 11:03:36 - Récupération courriels (POP3/IAMP) - ERROR (version 4.4.0-stable, build 17588 from 2012-11-21 16.02.21 by buildguy) : at org.pentaho.di.job.entries.getpop.MailConnection.connect(MailConnection.java:282)
    2013/05/30 11:03:36 - Récupération courriels (POP3/IAMP) - ERROR (version 4.4.0-stable, build 17588 from 2012-11-21 16.02.21 by buildguy) : at org.pentaho.di.job.entries.getpop.JobEntryGetPOP.execute(JobEntryGetPOP.java:825)
    2013/05/30 11:03:36 - Récupération courriels (POP3/IAMP) - ERROR (version 4.4.0-stable, build 17588 from 2012-11-21 16.02.21 by buildguy) : at org.pentaho.di.job.Job.execute(Job.java:589)
    2013/05/30 11:03:36 - Récupération courriels (POP3/IAMP) - ERROR (version 4.4.0-stable, build 17588 from 2012-11-21 16.02.21 by buildguy) : at org.pentaho.di.job.Job.execute(Job.java:728)
    2013/05/30 11:03:36 - Récupération courriels (POP3/IAMP) - ERROR (version 4.4.0-stable, build 17588 from 2012-11-21 16.02.21 by buildguy) : at org.pentaho.di.job.Job.execute(Job.java:443)
    2013/05/30 11:03:36 - Récupération courriels (POP3/IAMP) - ERROR (version 4.4.0-stable, build 17588 from 2012-11-21 16.02.21 by buildguy) : at org.pentaho.di.job.Job.run(Job.java:363)
    2013/05/30 11:03:36 - Récupération courriels (POP3/IAMP) - ERROR (version 4.4.0-stable, build 17588 from 2012-11-21 16.02.21 by buildguy) : Caused by: javax.mail.MessagingException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target;
    nested exception is:
    javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
    2013/05/30 11:03:36 - Récupération courriels (POP3/IAMP) - ERROR (version 4.4.0-stable, build 17588 from 2012-11-21 16.02.21 by buildguy) : at com.sun.mail.imap.IMAPStore.protocolConnect(IMAPStore.java:571)
    Last edited by roms; 05-30-2013 at 05:25 AM.

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  
Privacy Policy | Legal Notices | Safe Harbor Privacy Policy

Copyright © 2005 - 2019 Hitachi Vantara Corporation. All Rights Reserved.