Google Vision API: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

Asked May 29 '16 at 10:17

Active Jan 13 '17 at 08:31

Viewed 843 times

I've been testing an application example using Google Vision API.

I have the code from their github, and created the relevant project and credentials file (something Google Cloud requests) and tried to run the code.

I get the following:

sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

I've tried to add the relevant SSL certificates to my JRE's cacerts, I've restarted eclipse and an admin, but I still get this.

EDIT I've also tried to manually set the ssl properties as follows:

        System.setProperty("javax.net.ssl.keyStore", "C:/path/to/cacerts");
        System.setProperty("javax.net.ssl.keyStorePassword","cacerts_pass");
        System.setProperty("javax.net.ssl.trustStore", "C:/path/to/cacerts");
        System.setProperty("javax.net.ssl.trustStorePassword","cacerts_pass");

Any ideas to resolve this issue, please?

If there's anything I should provide, please let me know. Thanks in advance.

edited Jun 08 '16 at 15:22

pm0733464

2,862
14
16

asked May 29 '16 at 10:17

DanielY

1,141
30
58

Did you try to set properties javax.net.ssl.trustStore ,javax.net.ssl.trustStorePassword and check – Vikas Madhusudana May 29 '16 at 10:25
@VikasMadhusudana I've googled it and found how to do that. But the issue is still the same – DanielY May 29 '16 at 11:04
Either you set the property in program System.setProperty(name,value) or pass it as argument to -Djavax.net.ssl.trustStore="c:\pathtofile" – Vikas Madhusudana May 29 '16 at 11:13
@VikasMadhusudana See edited question please – DanielY May 29 '16 at 11:15
Can you try this http://stackoverflow.com/questions/9210514/unable-to-find-valid-certification-path-to-requested-target-error-even-after-c to see what is happening – Vikas Madhusudana May 29 '16 at 11:25
@VikasMadhusudana done. still the same – DanielY May 29 '16 at 11:52
what is that you see when you have -Djavax.net.debug=all – Vikas Madhusudana May 29 '16 at 11:54
there's alot of output...what should I see? – DanielY May 29 '16 at 11:58
can you paste it in chat – Vikas Madhusudana May 29 '16 at 12:00
http://docs.oracle.com/javase/7/docs/technotes/guides/security/jsse/ReadDebug.html look here for different steps this might help you to understand flow – Vikas Madhusudana May 29 '16 at 12:01
My company's security policy won't let me start a chat in here...but bottom line is SSLHandShakeException I get at the end – DanielY May 29 '16 at 12:02
i think you can paste all the contents here in comment – Vikas Madhusudana May 29 '16 at 12:02
when you try to connect to endpoint using webbrowser do you get a endpoint untrusted message – Vikas Madhusudana May 29 '16 at 12:08
I cant paste it in the question due to length limit. – DanielY May 29 '16 at 12:08
No, I don't. I connect fine – DanielY May 29 '16 at 12:10
Because if you have "SSL scanning" enabled in antivirus sometime you see this behaviour – Vikas Madhusudana May 29 '16 at 12:11
I don't have any control over the AntiVirus. do you suggest that's because of that? – DanielY May 29 '16 at 12:13
If you have "SSL scanning" in antivirus https://confluence.atlassian.com/kb/unable-to-connect-to-ssl-services-due-to-pkix-path-building-failed-779355358.html – Vikas Madhusudana May 29 '16 at 12:17
We can look into the ssl debug and then conclude.. – Vikas Madhusudana May 29 '16 at 12:18
via command line I've successfully connected. not via eclipse – DanielY May 29 '16 at 12:19
Then antivirus is not a problem. – Vikas Madhusudana May 29 '16 at 12:20
@VikasMadhusudana are you famiiiar with response "This is not a P3P policy"? – DanielY May 29 '16 at 12:48
I have no idea but found this http://stackoverflow.com/questions/8048306/what-is-the-most-broad-p3p-header-that-will-work-with-ie – Vikas Madhusudana May 29 '16 at 14:28

Google Vision API: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

0 Answers0