[prev in list] [next in list] [prev in thread] [next in thread] 

List:       tomcat-user
Subject:    AW: Help Needed
From:       "Thomas Hoffmann (Speed4Trade GmbH)" <Thomas.Hoffmann () speed4trade ! com ! INVALID>
Date:       2022-06-27 6:31:41
Message-ID: 6f91d887de32403c9bbec91a6f0caa24 () speed4trade ! com
[Download RAW message or body]

Hello Mohan,

> -----Ursprüngliche Nachricht-----
> Von: Mohan T <Mohan.T@ramco.com.INVALID>
> Gesendet: Montag, 27. Juni 2022 08:18
> An: Tomcat Users List <users@tomcat.apache.org>
> Betreff: Help Needed
> 
> Dear All,
> 
> We have deployed a application in tomcat 8.5  and  while accessing
> 
> http://sebswarcnv08.ramco:8081/samldemo-0.0.1-SNAPSHOT/hello
> 
> Error retrieving metadata from https://dev-
> 67198606.okta.com/app/exk5htsyx3S4UcaHA5d7/sso/saml/metadata
> javax.net.ssl.SSLHandshakeException:
> sun.security.validator.ValidatorException: PKIX path building failed:
> sun.security.provider.certpath.SunCertPathBuilderException: unable to find
> valid certification path to requested target
> 
> Kindly  help us in overcoming thie.
> 
> Thanks
> 
> Mohan

The target server uses SSL. The server therefore has a private key and the client \
must have the corresponding public key. The error message tells, that your client \
doesn't have the public key and therefore doesn't trust the servers private key. \
Usually the private key is signed by a certificate authority or for development it \
can also be self-signed. Check the "certificate tree" in the browser to check which \
party has signed the private key and get the public key of the root certificate. This \
public key must be imported into the java truststore.

Here is an example of that tree / chain of trust: https://i.stack.imgur.com/julIO.png \


Greetings, Thomas

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org


[prev in list] [next in list] [prev in thread] [next in thread]