Do not input private or sensitive data. View Qlik Privacy & Cookie Policy.
Skip to main content

Announcements
Join us in Toronto Sept 9th for Qlik's AI Reality Tour! Register Now
cancel
Showing results for 
Search instead for 
Did you mean: 
Anonymous
Not applicable

Issue with certificates and tRESTClient component

Hello,

 

I have Talend Open Studio for Data Integration v7.1.1 in windows10 environment.

 

I have to call a restful service from Talend. I've been able to do it in Chrome,IE and Firefox, but I can't do that in Talend, but with some problems. I explain how I did it in the explorers:

 

For Firefox: install the 2 certificates in the explorer. First the server certificate .pfx file with password and the crt file.

 

Chrome and IE: using the Microsoft Management Console I installed in the Trusted Root Certification Authorities store the .pfx certificate file with the password. After that, I installed the crt file in the Personal certificate store. In fact, I had to export it from Firefox as a p12 file in order to work properly. 

 

Now I try to create a Talend  process, but I am not able to do that. I explain the steps I do in Talend...

 

1) I only have 3 components to do the test:  tKeyStore, tRESTCLient and tLogRow.

2) See the attached image for the configuration of TrustStore and KeyStore.

   TrustStore file: the generated jks from the crt file.

   KeyStore file: the generated jks from pfx file.

 

3) I receive the error "javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target".

 

 

I've tried to do all the steps specified in https://help.talend.com/reader/OUYzDkcC745_xRhkxKW8eg/Wy4sbBlTeXdNVoiooi4WUA

 

Thanks in advance.

 

Best regards,

Francisco

Labels (1)
1 Reply
Anonymous
Not applicable
Author

If I put a tJava component with the code   System.setProperty("javax.net.debug", "ssl,handshake");, then I receive more info of the error...

 

%% Invalidated: [Session-1, TLS_RSA_WITH_AES_256_CBC_SHA]
main, SEND TLSv1.2 ALERT: fatal, description = certificate_unknown
main, WRITE: TLSv1.2 Alert, length = 2
main, called closeSocket()
main, handling exception: javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target