PKIX路径构建失败

PKIX路径构建失败

本文介绍了sun.security.validator.ValidatorException:PKIX路径构建失败,java> 1.6的处理方法,对大家解决问题具有一定的参考价值,需要的朋友们下面随着小编来一起学习吧!

问题描述

我有一个Java JAR应用程序,该应用程序连接到在HTTPS后面的服务器上运行的Java Web服务.如果我使用Oracle Java 1.6运行JAR,则SSL握手成功.但是,如果我使用Oracle Java 1.7或更高版本运行它,则总是会遇到异常:sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

I have a Java JAR application which connects to the Java web service running on a server behind HTTPS. If I run the JAR with Oracle Java 1.6, then the SSL handshake is successful. However, If I run it with Oracle Java 1.7 or newer, I always get the exception: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

我已将证书导入到cacert文件,并已使用VM变量javax.net.ssl.trustStore设置文件的路径.

I have imported the certificates to the cacert file, and have used VM variable javax.net.ssl.trustStore to set the path to the file.

我发现在不同的Java版本中jsse.jar有所不同.

I have found out that there are differences in jsse.jar in different Java version.

此外,此应用程序在安装了IBM版本的Java的Unix机器上的工作方式与预期的一样:IBM J9 VM (build 2.7, JRE 1.7.0

Also, this application works like expected on a Unix machine which has IBM version of Java installed: IBM J9 VM (build 2.7, JRE 1.7.0

而且,它可以与Widnows上的IBM JRE一起正常工作

And, it works correctly with IBM JRE on Widnows:

IBM J9 VM (build 2.8, JRE 1.8.0)

该如何解决?

推荐答案

我解决了这个问题! Java在jre/lib/security文件夹中具有java.security文件,并且该文件具有属性keystore.type.该属性设置为Windows-ROOT,但是我已经在cacerts文件中导入了证书,并且该属性应该设置为jks,以便Java读取cacerts文件!

I solved this! Java has java.security file in jre/lib/security folder, and that file has a property keystore.type. This property was set to Windows-ROOT, but I have imported certificates in cacerts file, and the property should be set to jks so that Java reads the cacerts file!

这篇关于sun.security.validator.ValidatorException:PKIX路径构建失败,java> 1.6的文章就介绍到这了,希望我们推荐的答案对大家有所帮助,也希望大家多多支持!

08-19 17:20