getting SSL handshake exception while generating Pdf from Html in java

Question

There is a option of generating pdf from html page in my web application.Following exception is coming while doing that. In this html page we are accessing css files over https.However, I am able to access web application over https successfuly.

javax.net.ssl.SSLHandshakeException: 
           sun.security.validator.ValidatorException: PKIX path building failed: 
           sun.security.provider.certpath.SunCertPathBuilderException: 
           unable to find valid certification path to requested target

Caused by: sun.security.validator.ValidatorException: 
           PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: 
           unable to find valid certification path to requested target

Caused by: sun.security.provider.certpath.SunCertPathBuilderException: 
           unable to find valid certification path to requested target

Please provide your valubale suggestions. Thanks!!

Please post more information about certificate and full stacktrace. — user1516873, Sep 03 '12 at 12:47
Possible duplicate: http://stackoverflow.com/questions/2290570/pkix-path-building-failed-while-making-ssl-connection — Duncan Jones, Sep 03 '12 at 15:04

score 0 · Answer 1 · answered Sep 03 '12 at 16:04

0

Your browser uses a certificate store, and checks if the public certificate of the site you're visiting is available. If it is, you'll have no problems visiting the site.

Java also checks its certificate store, but it's different from the one used by your browser. This is explained in the white paper on digital signatures Search the document for PKIX, and you'll discover what's going on.

answered Sep 03 '12 at 16:04

Bruno Lowagie

75,994
9
109
165

Thanks Bruno for sharing such a good link. My web application is deployed on Linux machine. Do you have any idea how to add a certificate on jre's keystore? – Infotechie Sep 05 '12 at 05:21
It doesn't really matter if you're working on Linux or Windows. You need the keytool application that comes with the JDK. If you can't install it on the server, just copy the cacerts file, add the certificate on whatever machine you want, and replace the existing cacerts file with the updated one. – Bruno Lowagie Sep 06 '12 at 08:05
Yes you are right. Finally i got success in creating and installing self signed certificate but still not able to add StandardAltNames under [req_extensions]. Do you have any idea? I actually saw one of the questions related to the same topic, answered by you, but it doesn't work for me. – Infotechie Sep 10 '12 at 16:43

getting SSL handshake exception while generating Pdf from Html in java

1 Answers1