Sun.Security.Provider.CertPath.SunCertPathBuilderException：找不到请求目标的有效证书路径错误

Question

javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

public static void main(String args[]) throws Exception {

        SOAPConnectionFactory soapConnectionFactory = SOAPConnectionFactory.newInstance();
        SOAPConnection soapConnection = soapConnectionFactory.createConnection();


        String url = "https://www.mywebservice.com/ws";


    SOAPMessage soapResponse = soapConnection.call(createSOAPRequest(),url);



        // print SOAP Response
        System.out.print("Response SOAP Message:");
        soapResponse.writeTo(System.out);

        soapConnection.close();


    }

谢谢你，我很乐意提供任何其他需要的细节。

Answer 1

您必须将服务器证书或根CA添加到JDK使用的truststore中。默认情况下使用jre/lib/security/cacerts。

如果您已经导入了服务器证书，那么请验证您确实使用了正确的JDK，或者证书已成功导入。您可以使用GUI工具，如http://www.keystore-explorer.org/或使用keytool

您还可以使用包含服务器证书的JKS文件使用自己的trustore（推荐）。按此方式配置用法

System.setProperty ("javax.net.ssl.trustStore", path_to_your_trustore_jks_file);
System.setProperty ("javax.net.ssl.trustStorePassword", "password");