Skip to Content
0
Sep 18, 2015 at 08:36 AM

Needs help with certificate

1132 Views

Hi!

I'm calling an external webservice using a Call HTTP atom and gets the error:

<Payload Role="C" id="atom_call_login" statusNo="HTTP" statusMsg="" reference="atom_login" sysid="" payload="atom_login" throwException="false">

<http.header/>

<httaError xmlns="urn:com.sap.b1i.xcellerator:upltdoc" HTTPcode="" HTTPmsg="">

<exceptionMsg>

javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

</exceptionMsg>

<returnData/>

</httaError>

</Payload>

The call is made over https with the following settings:

The url https://login.salesforce.com shows the following certificate-chain:

  • login.salesfoce.com (SSL, sha256)
  • VeriSign Class 3 Public Primary Certification Authority - G5 (sh1)

  1. First I made the call with no certificates imported. Got the error above.
  2. I imported the root certificate "VeriSign Class 3 Public Primary Certification Authority - G5" into Tomcat keystore. Got the same error.
  3. I imported the SSL certificate as well. Same error.

I think that only the root certificate needs to exist in the keystore. That is also what the exception tells me (I think).

Please I need help getting this issue solved!

Regards

Lars