JBoss webservice & ssl

[Aodhan Hoffman]

[java] Caused by: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target



[java] Caused by: sun.security.validator.ValidatorException: PKIX path building failed: sun.sec
urity.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requ
ested target


STP - define what techs are core to the NMT


I am running JBoss 4.0.5 w/ JbossWS 1.2.1.

I have enabled the SSL connector and am able to access the WSDL for my web service using a browser on port 8443 with a certificate I created using keytool.


The client works if I provide it the old http/port 80 URL in it's local WSDL. If I try to aim it at https/port 8443, the client dies with the following error:

Caused by: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provid
er.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

<soap:address location="http://localhost:8080/NetworkService/NLS"/> <-- works
<soap:address location="https://localhost:8443/NetworkService/NLS"/> <-- doesn't work

I have imported the server cert into a keystore in the client's bin directory. I configured the client to use the keystore ( I believe ) by using jboss-wsse-client.xml in the client's bin directory.

jboss-wsse-client.xml

   
<?xml version="1.0" encoding="utf-8"?>
<jboss-ws-security
xmlns="http://www.jboss.com/ws-security/config"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xsi:schemaLocation="http://www.jboss.com/ws-security/config"
>
<key-store-file>client.keystore</key-store-file>
<key-store-password>shimdev</key-store-password>
    <config>
        <encrypt type="x509v1" alias="shimdev" />
        <requires>
            <signature />
        </requires>
    </config>
</jboss-ws-security>