tSoap SSL with Karaf

[Anonymous]

hello,

I have a problem using tSoap component with Karaf Runtime.

My problem is that when I wan't to call a ssl webservice with the tSoap component I have a PKIXValidator error even if I install the certificate on the keystore of Karaf using this command :

keytool -import -trustcacerts -keystore /srv/Runtime_ESBSE/container/etc/keystores/keystore.jks -storepass password -alias myurl  -file /srv/Runtime_ESBSE/ssl/certificate.crt

The problem is the same using a tsetKeystore component

Error of Karaf :

 Caused by: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
INFO | jvm 1 | 2020/01/08 09:53:36 | at sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:397)
INFO | jvm 1 | 2020/01/08 09:53:36 | at sun.security.validator.PKIXValidator.engineValidate(PKIXValidator.java:302)
INFO | jvm 1 | 2020/01/08 09:53:36 | at sun.security.validator.Validator.validate(Validator.java:260)
INFO | jvm 1 | 2020/01/08 09:53:36 | at sun.security.ssl.X509TrustManagerImpl.validate(X509TrustManagerImpl.java:324)
INFO | jvm 1 | 2020/01/08 09:53:36 | at sun.security.ssl.X509TrustManagerImpl.checkTrusted(X509TrustManagerImpl.java:229)
INFO | jvm 1 | 2020/01/08 09:53:36 | at sun.security.ssl.X509TrustManagerImpl.checkServerTrusted(X509TrustManagerImpl.java:124)
INFO | jvm 1 | 2020/01/08 09:53:36 | at sun.security.ssl.ClientHandshaker.serverCertificate(ClientHandshaker.java:1496)
INFO | jvm 1 | 2020/01/08 09:53:36 | ... 70 more
INFO | jvm 1 | 2020/01/08 09:53:36 | Caused by: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

Do you have an idea? 

Thanks for your answers.

Best regards
 

[Anonymous]

What version of Talend are you using? There was a recent bug with SSL certificates in Apache Karaf. This *could* be related.

[Anonymous]

Hello,

Thanks for your reply.

I use the 7.1.1 version of Talend.

[Anonymous]

OK, the bug was not found in 7.1. I have done a bit of research on this and it looks like this post describes potential solutions quite well....

https://stackoverflow.com/questions/50498681/suncertpathbuilderexception-unable-to-find-valid-certif...

I'm afraid SSL is notoriously hard to get right, particularly if you are new to it. There is a lot that can wrong (as the post above describes). Have you ever managed to get this service call to work, maybe in the studio?