SSL mit Java (HttpsUrlConnection oder JAX-WS) mit PKIX Path Failed

Caused by: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: 
unable to find valid certification path to requested target
    at sun.security.validator.PKIXValidator.doBuild(Unknown Source)

.. Tritt immer auf wenn das Serverzertifikat nicht passt (bei mir: wenn es selbstsigniert ist).
Fix:

  • Entweder Zertifikat von Server (und dessen Aussteller/CA) in den verwendeten Keystore importieren (preferred) oder
  • Eigenen Trustmanager schreiben und einhängen (für Test war das für mich ganz brauchbare Lösung)
    public class NonValidatingSSLTrustManager implements X509TrustManager (dazu gibts diverse Beispiele im Netz)

Kommentare

Kommentar veröffentlichen

Beliebte Posts aus diesem Blog

using the birt runtime with spring boot and gradle to generate PDF from a Report Design File

Warning: at the moment not recommended as solution. Personal Note (too complicated to keep in my brain / transient memory) birt simply does not think in this way: push data into report vs pull datasource, osgi vs. maven, design time jars.... Step 1: use with gradle: get dependencies from maven repo: compile ( group : 'org.eclipse.birt.runtime' , name : 'org.eclipse.birt.runtime' , version : '4.4.1' ) {    exclude module : 'flute'    exclude module : 'org.eclipse.orbit.mongodb' } // also working 4.2.1a  // not compiling:     4.6.0-20160607 // not running:  4.5.0a Step 2: create POJO and a suitable BIRT DataSource for the Designer: http://yaragalla.blogspot.de/2013/10/using-pojo-datasource-in-birt-43.html DataSource really needs the open, next and close Methods build as jar, needed as such in BIRT Designer Step 3: use BIRT runtime in your Spring Boot Controller: InputStream reportDesign = getClass().
Mehr anzeigen

Powershell snippet to send messages to telegram

* Powershell snippet to send messages to telegram: [source,powershell] ------------------------------------------------------------------------------------ # send am message to telegram chat via powershell script # ====================================================== $api    = '20****xw4'    # botToken got with bot creation  $chatId = '8***8'            # got with query on bot chat $msg    = 'Hello from powershell (server)' $restResponse = Invoke-RestMethod -Uri ('https://api.telegram.org/bot{0}/sendMessage?chat_id={1}&text={2}' -f $api, $chatId, $msg) -Proxy http://193.**.***.207:8080 $restResponse.ok # True ------------------------------------------------------------------------------------ * create telegram chat to send messages to: ** Create the Bot and get the token - open a chat with BotFather Bot. - write /newbot to BotFather,         - fill all the needed information, write down the botToken (for $api) *
Mehr anzeigen