Talend Studio with dropbox connection error certificate

[lguevara]

Hi,

I have a job to connect dropbox and get a file but I have the error:

javax.net.ssl|ERROR|10|main|2026-04-21 16:43:33.361 PET|TransportContext.java:370|Fatal (CERTIFICATE_UNKNOWN): PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target (
"throwable" : {
  sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
  	at java.base/sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:439)
  	at java.base/sun.security.validator.PKIXValidator.engineValidate(PKIXValidator.java:306)
  	at java.base/sun.security.validator.Validator.validate(Validator.java:264)
  	at java.base/sun.security.ssl.X509TrustManagerImpl.checkTrusted(X509TrustManagerImpl.java:231)
  	at java.base/sun.security.ssl.X509TrustManagerImpl.checkServerTrusted(X509TrustManagerImpl.java:132)
  	at java.base/sun.security.ssl.CertificateMessage$T12CertificateConsumer.checkServerCerts(CertificateMessage.java:638)
  	at java.base/sun.security.ssl.CertificateMessage$T12CertificateConsumer.onCertificate(CertificateMessage.java:473)
  	at java.base/sun.security.ssl.CertificateMessage$T12CertificateConsumer.consume(CertificateMessage.java:369)
  	at java.base/sun.security.ssl.SSLHandshake.consume(SSLHandshake.java:396)
  	at java.base/sun.security.ssl.HandshakeContext.dispatch(HandshakeContext.java:480)
  	at java.base/sun.security.ssl.HandshakeContext.dispatch(HandshakeContext.java:458)
  	at java.base/sun.security.ssl.TransportContext.dispatch(TransportContext.java:201)
  	at java.base/sun.security.ssl.SSLTransport.decode(SSLTransport.java:172)
  	at java.base/sun.security.ssl.SSLSocketImpl.decode(SSLSocketImpl.java:1510)
  	at java.base/sun.security.ssl.SSLSocketImpl.readHandshakeRecord(SSLSocketImpl.java:1425)
  	at java.base/sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:455)
  	at java.base/sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:426)
  	at java.base/sun.net.www.protocol.https.HttpsClient.afterConnect(HttpsClient.java:589)
  	at java.base/sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.connect(AbstractDelegateHttpsURLConnection.java:187)
  	at java.base/sun.net.www.protocol.http.HttpURLConnection.getOutputStream0(HttpURLConnection.java:1433)
  	at java.base/sun.net.www.protocol.http.HttpURLConnection.getOutputStream(HttpURLConnection.java:1404)
  	at java.base/sun.net.www.protocol.https.HttpsURLConnectionImpl.getOutputStream(HttpsURLConnectionImpl.java:220)
  	at com.dropbox.core.http.StandardHttpRequestor.getOutputStream(StandardHttpRequestor.java:123)
  	at com.dropbox.core.http.StandardHttpRequestor.access$000(StandardHttpRequestor.java:28)
  	at com.dropbox.core.http.StandardHttpRequestor$Uploader.<init>(StandardHttpRequestor.java:133)
  	at com.dropbox.core.http.StandardHttpRequestor.startPost(StandardHttpRequestor.java:72)
  	at com.dropbox.core.http.StandardHttpRequestor.startPost(StandardHttpRequestor.java:28)
  	at com.dropbox.core.DbxRequestUtil.startPostRaw(DbxRequestUtil.java:232)
  	at com.dropbox.core.v2.DbxRawClientV2$2.execute(DbxRawClientV2.java:143)
  	at com.dropbox.core.v2.DbxRawClientV2$2.execute(DbxRawClientV2.java:140)
  	at com.dropbox.core.v2.DbxRawClientV2.executeRetriable(DbxRawClientV2.java:256)
  	at com.dropbox.core.v2.DbxRawClientV2.downloadStyle(DbxRawClientV2.java:140)
  	at com.dropbox.core.v2.files.DbxUserFilesRequests.download(DbxUserFilesRequests.java:540)
  	at com.dropbox.core.v2.files.DbxUserFilesRequests.download(DbxUserFilesRequests.java:569)
  	at qliktalenddemos1.job_dropbox_readfile_0_1.job_dropbox_readfile.tDropboxGet_1Process(job_dropbox_readfile.java:1389)
  	at qliktalenddemos1.job_dropbox_readfile_0_1.job_dropbox_readfile.tDropboxConnection_1Process(job_dropbox_readfile.java:611)
  	at qliktalenddemos1.job_dropbox_readfile_0_1.job_dropbox_readfile.runJobInTOS(job_dropbox_readfile.java:2746)
  	at qliktalenddemos1.job_dropbox_readfile_0_1.job_dropbox_readfile.main(job_dropbox_readfile.java:2417)
  Caused by: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
  	at java.base/sun.security.provider.certpath.SunCertPathBuilder.build(SunCertPathBuilder.java:148)
  	at java.base/sun.security.provider.certpath.SunCertPathBuilder.engineBuild(SunCertPathBuilder.java:129)
  	at java.base/java.security.cert.CertPathBuilder.build(CertPathBuilder.java:297)
  	at java.base/sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:434)
  	... 37 more}

)
javax.net.ssl|DEBUG|10|main|2026-04-21 16:43:33.367 PET|SSLSocketImpl.java:1759|close the underlying socket
javax.net.ssl|DEBUG|10|main|2026-04-21 16:43:33.367 PET|SSLSocketImpl.java:1785|close the SSL connection (passive)
Exception in component tDropboxGet_1 (job_dropbox_readfile)
com.dropbox.core.NetworkIOException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
	at com.dropbox.core.DbxRequestUtil.startPostRaw(DbxRequestUtil.java:240)
	at com.dropbox.core.v2.DbxRawClientV2$2.execute(DbxRawClientV2.java:143)
	at com.dropbox.core.v2.DbxRawClientV2$2.execute(DbxRawClientV2.java:140)
	at com.dropbox.core.v2.DbxRawClientV2.executeRetriable(DbxRawClientV2.java:256)
	at com.dropbox.core.v2.DbxRawClientV2.downloadStyle(DbxRawClientV2.java:140)
	at com.dropbox.core.v2.files.DbxUserFilesRequests.download(DbxUserFilesRequests.java:540)
	at com.dropbox.core.v2.files.DbxUserFilesRequests.download(DbxUserFilesRequests.java:569)
	at qliktalenddemos1.job_dropbox_readfile_0_1.job_dropbox_readfile.tDropboxGet_1Process(job_dropbox_readfile.java:1389)
	at qliktalenddemos1.job_dropbox_readfile_0_1.job_dropbox_readfile.tDropboxConnection_1Process(job_dropbox_readfile.java:611)
	at qliktalenddemos1.job_dropbox_readfile_0_1.job_dropbox_readfile.runJobInTOS(job_dropbox_readfile.java:2746)
	at qliktalenddemos1.job_dropbox_readfile_0_1.job_dropbox_readfile.main(job_dropbox_readfile.java:2417)

What I can do to fix that.

Thanks

[Denis_Segard]

Hello,

PKIX error are releated to SSL certificates. The "public" servers are using certificates trusted by default by java .
1. Do you use the default java truststore ? (file cacerts)
2. Do you know if there may be a "SSL Forward Proxy" doing "SSL inspection" in your network ?
3. In java , it is possible to generate a detailled trace of the SSL exchange by using the JVM property :
-Djavax.net.debug=all 

Kind regards
Denis

[lguevara]

Hi @Denis_Segard 

in Talend-Studio-win-x86_64.ini  the cacert is: -Djavax.net.ssl.trustStore=C:\Program Files (x86)\Talend-Studio\zulu17.48.15-ca-jdk17.0.10-win_x64\lib\security\cacerts

I add the debug all result file.

thanks.

[lguevara]

No, there is no SSL inspection or proxy filtering the traffic in this environment.

[Denis_Segard]

Hello,
Does it work if you execute the command:

curl -v https://content.dropboxapi.com

on the machine where the Talend job is executed ? 
Denis

[lguevara]

Hi, yes

thanks

Luis

[Denis_Segard]

Hello,

Do you use a component tsetkeystore in your job ?

Kind regards

Denis

[lguevara]

Hi @Denis_Segard 

Not I dont use tsetkeystore in the job

thanks

[Denis_Segard]

Hello
What version of Talend Studio do you use ?
Kind regards
Denis

[Denis_Segard · Accepted solution]

Hello

Could you download the Dropbox SDK 7 from :
https://mvnrepository.com/artifact/com.dropbox.core/dropbox-core-sdk

and set a custom maven uri to replace the SDK 2.1.2 by the 7.0.0 ? 

https://help.qlik.com/talend/en-US/studio-user-guide/8.0-R2024-07/customizing-maven-uri-for-external...

NOTE : the next Talend Studio patch R2026-04 will include this update.

In patches < R2026-04, replacing the Dropbox SDK with the latest one (7.0.0) will cause issue with tDropboxList

Kind regards
Denis