SSL Connection certificates error with tSOAP/tREST

[ACartareggia1624538503]

Hello,

We have installed Talend Open Studio in a remote machine. It's all working fine, but we are facing problems in calling some specific SOAP/Rest endpoints in order to connect to a bunch of external services.

Those specific services dosn't have any basic authentication, but they do need a SSL secure connection through certificates. If i make the calls from SOAPUi or Postman i don't have any problem. But when i'm running a talend job with the same payload i'm getting back this errors:

java.security.PrivilegedActionException: com.sun.xml.messaging.saaj.SOAPExceptionImpl: Message send failed

Caused by: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

Caused by: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

Caused by: javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

We tried to donwload the certificates by getting them while opening the endpoints in the browser and installed them on the remote machine but we are still getting the errors.

Anybody struggled on this and can help us?

Thanks,

Alessio

[gjeremy1617088143]

Hi, you need to use tsetkeystore first, and specify the cacert path and password.

Send me Love and Kudos

[ACartareggia1624538503]

Hello, thanks for the quick answer. I tried with the tsetkeystore but i'm getting the same problem 😞

[gjeremy1617088143]

Normally it will work , are you sure you set the good path and this is the good cacerts ?

[ACartareggia1624538503]

Hello gjeremy,

Maybe i'm doing this wrong.

How to find the right path? When i'm installing the certificates it dosn't ask me for a path.

Thanks

[Anonymous · Accepted solution]

Hello,

Hope this article helps.

https://community.talend.com/s/article/Three-ways-to-set-a-truststore-for-an-SSL-TLS-connection-in-a...

Best regards

Sabrina

[ACartareggia1624538503]

Thanks guys for the valueable help!

I was doing wrong the creation of the keystore from CMD.

Alessio