This articles describes how to allow the task executions/tac/tmc api call pick up all necessary certificates when facing a "SSLHandshakeException: unable to find valid certification path to requested target" error.
Resolution
1. Use the following command (replace the api.anaplan.com to target url used by user), it will generate several crt files for step 2 import
echo "" |
openssl s_client -showcerts -connect api.anaplan.com:443 |
awk '/BEGIN/ { i++; } /BEGIN/, /END/ { print > "a-cert-" i ".crt" }'
Install openssl awk command before using it, it could be found in bash(linux)/git-bash(windows)
2. Use keytool -import to target keystore file. If you did not use tSetKeystore specifically, then youcan import it to jvm used by the Talend product.
keytool -import -trustcacerts -alias xxxcert-1 -file /temp/a-cert-1.cer -keystore jvm/lib/security/cacerts -storepass changeit
keytool -import -trustcacerts -alias xxxcert-2 -file /temp/a-cert-2.cer -keystore jvm/lib/security/cacerts -storepass changeit
keytool -import -trustcacerts -alias xxxcert-3 -file /temp/a-cert-3.cer -keystore jvm/lib/security/cacerts -storepass changeit
For more info about keytool -import, see the Import the Certificate as a Trusted Certificate page on the Oracle Java Tutorials site.
Environment
Talend Data Integration
Talend Studio
