• Post Reply Bookmark Topic Watch Topic
  • New Topic

wsdl call: Windows/JDev Couldnt "SunCertPathBuilderException: unable to find valid certification  RSS feed

 
syed mraza
Greenhorn
Posts: 28
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
Folks
Wow my last post was almost 10 years ago. Thanks for having me back.

Problem Description:

Making a wsdl call and using JKS as storetype. Created the keystore using the keytool, got the x509 from wsdl. Verified its added correctly ( keystore -list). Ran the dummy code (making a wsdl call). Voila!!! works fine...on Ubuntu (12.10, 64 bit) & Jdeveloper (11.1.7).

Run it on windows ( 7, 32 bit. Jdeveloper 11.1.7) and I get hit by




The only difference I see b/w the environment change is that java call from windows add following system keystore.




I couldnt find where in Jdeveloper its specified. I did add my own SSL debug to display whats going on by adding:


at project level properties.java options. Though DemoTrust.jks wasnt specified there.

I added SSL debug but up till now I couldnt make anything out of SSL debug.
I did try to override the *suspiciously* added keystore by adding my keystore as trusted one via coding. Still same results.

The code is right, the certificate/keystore is created correctly. It verifies. (please see attached img)


And works but in windows. ( I tried on different windows machine, since I couldnt think of any logical thing anymore.)

why you no cooperate windows!!! </rageface>
Any pointers would be really appreciated.

Regards

 
Roger Sterling
Ranch Hand
Posts: 426
Eclipse IDE Fedora Linux
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
What this means is your certificate chain is not complete. You have not imported all the necessary certificates into your truststore. It may work on a windows machine since that particular truststore has all the needful certificate. Also check your root certificate is not expired.
 
syed mraza
Greenhorn
Posts: 28
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
Roger Sterling
Thanks a lot for replying.

Your response helped me make some headway.

- the specified code works in Ubuntu but not in windows.

- there was one certificate expired in WebLogic provided DemoTrust.jks

- that DemoTrust.jks is added by itself (I swear I ddnt do it ) by jDeveloper (using -D option)

- I ran code manually using command line and removing -D(DemoTrust.jks) manually and it went through.

Thanks.

Now I have to figure where and why jDevloper is adding -Djavax.net.ssl.trustStore=C:\Oracle\Middleware\wlserver_10.3\server\lib\DemoTrust.jks

Thanks once again.

Regards
 
Roger Sterling
Ranch Hand
Posts: 426
Eclipse IDE Fedora Linux
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
You can build your own truststore.



'changeit' is the default password. Unless you have changed it, you must use those characters.

Do some reading about creating your own truststore file.

http://docs.oracle.com/cd/E19509-01/820-3503/ggfgo/index.html

Experiment with it, you will eventually figure it out.

Good luck !
 
syed mraza
Greenhorn
Posts: 28
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
Thanks.

I did create my own truststore. In windows for some reason ( which I yet have to figure out) it was adding weblogic's demo store too which had an expired certificate. Remove that made it work.
Thanks for your help
Regards
Raza
 
  • Post Reply Bookmark Topic Watch Topic
  • New Topic
Boost this thread!