IBM Support

TM1 API Connection failure in Java with Certificate chaining error

Troubleshooting


Problem

When making a connection to TM1 with a java application a javax.net.ssl.SSLHandshakeException error is received , it complains that the Applix certificate is not trusted, and follows with a Certificate chaining error.

Symptom

The following java stack trace is received :



javax.net.ssl.SSLHandshakeException: com.ibm.jsse2.util.h: PKIX path building failed: java.security.cert.CertPathBuilderException: PKIXCertPathBuilderImpl could not build a valid CertPath.; internal cause is: java.security.cert.CertPathValidatorException: The certificate issued by OU="Applix, Inc.", O="Applix, Inc.", L=Westboro, ST=Massachusetts, C=US is not trusted; internal cause is: java.security.cert.CertPathValidatorException: Certificate chaining error at com.ibm.jsse2.n.a(n.java:3) at com.ibm.jsse2.jc.a(jc.java:501) at com.ibm.jsse2.db.a(db.java:144) at com.ibm.jsse2.db.a(db.java:416) at com.ibm.jsse2.eb.a(eb.java:89) at com.ibm.jsse2.eb.a(eb.java:291) at com.ibm.jsse2.db.m(db.java:192) at com.ibm.jsse2.db.a(db.java:79) at com.ibm.jsse2.jc.a(jc.java:184) at com.ibm.jsse2.jc.g(jc.java:257) at com.ibm.jsse2.jc.a(jc.java:361) at com.ibm.jsse2.jc.startHandshake(jc.java:304) at com.applix.tm1.TM1NetClass.Connect(TM1NetClass.java:116) at com.applix.tm1.TM1Bean.getAdmEntryList(TM1Bean.java:349) at com.applix.tm1.TM1Bean.getNumberOfServers(TM1Bean.java:198) at com.applix.tm1.TM1Bean.findEntryByServerName(TM1Bean.java:429) at com.applix.tm1.TM1Bean.openConnection(TM1Bean.java:110) at HMI.testTM1Function.main(testTM1Function.java:47) Caused by: com.ibm.jsse2.util.h: PKIX path building failed: java.security.cert.CertPathBuilderException: PKIXCertPathBuilderImpl could not build a valid CertPath.; internal cause is: java.security.cert.CertPathValidatorException: The certificate issued by OU="Applix, Inc.", O="Applix, Inc.", L=Westboro, ST=Massachusetts, C=US is not trusted; internal cause is: java.security.cert.CertPathValidatorException: Certificate chaining error at com.ibm.jsse2.util.f.b(f.java:49) at com.ibm.jsse2.util.f.b(f.java:16) at com.ibm.jsse2.util.e.a(e.java:2) at com.ibm.jsse2.yb.checkServerTrusted(yb.java:46) at com.ibm.jsse2.hb.checkServerTrusted(hb.java:22) at com.ibm.jsse2.eb.a(eb.java:8)
[{"Product":{"code":"SS9RXT","label":"Cognos TM1"},"Business Unit":{"code":"BU048","label":"IBM Software"},"Component":"TM1 API","Platform":[{"code":"PF002","label":"AIX"},{"code":"PF016","label":"Linux"},{"code":"PF027","label":"Solaris"},{"code":"PF033","label":"Windows"},{"code":"PF010","label":"HP-UX"}],"Version":"9.5.2;9.5.1;9.5;9.4 MR1;9.4;10.1.0;10.1.1;10.2","Edition":"Edition Independent","Line of Business":{"code":"LOB76","label":"Data Platform"}}]

Log InLog in to view more of this document

This document has the abstract of a technical article that is available to authorized users once you have logged on. Please use Log in button above to access the full document. After log in, if you do not have the right authorization for this document, there will be instructions on what to do next.

Document Information

More support for:
Cognos TM1

Software version:
9.5.2, 9.5.1, 9.5, 9.4 MR1, 9.4, 10.1.0, 10.1.1, 10.2

Operating system(s):
AIX, Linux, Solaris, Windows, HP-UX

Document number:
134055

Modified date:
09 May 2025

UID

swg21414527

Manage My Notification Subscriptions