Issue with certificates and tRESTClient component

Anonymous — Thu, 16 May 2019 13:51:34 GMT

Hello,

I have Talend Open Studio for Data Integration v7.1.1 in windows10 environment.

I have to call a restful service from Talend. I've been able to do it in Chrome,IE and Firefox, but I can't do that in Talend, but with some problems. I explain how I did it in the explorers:

For Firefox: install the 2 certificates in the explorer. First the server certificate .pfx file with password and the crt file.

Chrome and IE: using the Microsoft Management Console I installed in the Trusted Root Certification Authorities store the .pfx certificate file with the password. After that, I installed the crt file in the Personal certificate store. In fact, I had to export it from Firefox as a p12 file in order to work properly.

Now I try to create a Talend process, but I am not able to do that. I explain the steps I do in Talend...

1) I only have 3 components to do the test: tKeyStore, tRESTCLient and tLogRow.

2) See the attached image for the configuration of TrustStore and KeyStore.

TrustStore file: the generated jks from the crt file.

KeyStore file: the generated jks from pfx file.

3) I receive the error "javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target".

I've tried to do all the steps specified in https://help.talend.com/reader/OUYzDkcC745_xRhkxKW8eg/Wy4sbBlTeXdNVoiooi4WUA

Thanks in advance.

Best regards,

Francisco

Re: Issue with certificates and tRESTClient component

Anonymous — Fri, 17 May 2019 09:30:23 GMT

If I put a tJava component with the code System.setProperty("javax.net.debug", "ssl,handshake");, then I receive more info of the error...

%% Invalidated: [Session-1, TLS_RSA_WITH_AES_256_CBC_SHA]
main, SEND TLSv1.2 ALERT: fatal, description = certificate_unknown
main, WRITE: TLSv1.2 Alert, length = 2
main, called closeSocket()
main, handling exception: javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

topic Issue with certificates and tRESTClient component in Talend Studio

Issue with certificates and tRESTClient component

Re: Issue with certificates and tRESTClient component