IBM Support

HTTP_32 : unable to find valid certification path to requested target 

Troubleshooting


Problem

This error is encountered when the Data Collector does not trust the certificate chain presented by the API server or could be due to the missing root / intermediate certificates in the configured truststore.

Symptom

Job / pipeline fails with HTTP_32 error.

HTTP_32 - Error executing request: javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

Resolving The Problem



In order to resolve this issue we need to Add/Import the SSL certificate chain to the truststore.

  1. To test the connection, try to connect to the end point using the trust store used by the Data Collector:

openssl s_client -connect https://<INSERT_URL> -CAfile /path/to/SDC/truststore



2. keytool command to list the certificates:

keytool -list -v -keystore <truststore-file> -storepass <truststore-password>

  1. Import the certificates into the trust store :



    OpenSSL command to view the certificate chain of the server:

openssl s_client -connect <server_name>:<port> -showcerts

Create trust store with the above certificate chain :

keytool -import -keystore trustore.jks -storepass <password> -file <file_Path> -alias <truststore_alias>



If above steps are working as expected and still you are facing issues then please reach out to support team for further assistance.

Document Location

Worldwide

[{"Line of Business":{"code":"LOB76","label":"Data Platform"},"Business Unit":{"code":"BU048","label":"IBM Software"},"Product":{"code":"SSM7CU","label":"IBM StreamSets Data Collector"},"ARM Category":[{"code":"","label":""}],"ARM Case Number":"","Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"All Version(s)"}]

Document Information

Modified date:
15 March 2025

UID

ibm17186107