I am on Windows 10 18362.356.
After some system update, now it is impossible to access any TLS-enabled site with Java. Both standanlone JRE (jre1.8.0_221
) and the JRE bundled in Android Studio 3.5.1 fails with:
javax.net.ssl.SSLHandshakeException:
sun.security.validator.ValidatorException: PKIX path building failed:
sun.security.provider.certpath.SunCertPathBuilderException:
unable to find valid certification path to requested target
At first I thought that the cacerts
file was faulty, but even after replacing them, the problem persists.
Wireshark shows that there is no problem with handshake and they are not blocked by firewall. Screenshot of Wireshark
Manually add certs is not effective (and not possible as none of the sites work)
JAVA_HOME
is pointing to the correct JRE directory.