KB Article #193642

Connection to Weblogic SSL fails for "unable to find valid certification path to requested target"

Problem

Connecting to Weblogic JMS queues that require SSL and the following error appears in the te.log:


Caused by: java.net.ConnectException: t3s://host1.com,host2.com,host3.com,host4.com:8002: Destination 10.245.55.173, 8002 unreachable.; nested exception is:
javax.net.ssl.SSLHandshakeException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target; No available router to destination.;


Resolution

Imported the Root certificate (and sometimes the Intermediate certificate) into the CACerts keystore (located at Axway/jre/lib/security/cacerts) in each B2Bi node.


To import the certificates, run the command “./keytool -import -alias WebLogic -keystore <Path to CACERTS> -file <Path to Certificate>”.