IBM Support

Unable to find valid certification path to requested target

Troubleshooting


Problem

After the java upgrade, users are not able to connect to the database using JDBC Query Consumer Stage. 

Symptom

The connection to database is failing with following error:-

Caused by: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target


Cause

  • While connecting to database over SSL through JDBC Query Consumer a truststore needs to be configured, however if truststore is not configured and the default java truststore is used.
  • cacerts is the default java truststore. 
  • The truststore would loose the imported certificates when Java upgrade is performed.
  • The error indicates that the required certificate is missing from the truststore.

Resolving The Problem

  • The certificate of the database needs to be imported to the java trusstore.
  • The certificate can be imported using following commands:-
openssl s_client -connect <server>:<port> -showcerts > server.crt

  • Edit server.crt to keep only the certificate lines

keytool -import -trustcacerts -file server.crt -alias server-cert -keystore $JAVA_HOME/lib/security/cacerts



Document Location

Worldwide


[{"Type":"MASTER","Line of Business":{"code":"","label":""},"Business Unit":{"code":"","label":""},"Product":{"code":"SSM7CU","label":"IBM StreamSets Data Collector"},"ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"All Versions"}]

Document Information

More support for:
IBM StreamSets Data Collector

Software version:
All Versions

Document number:
7181318

Modified date:
23 January 2025

UID

ibm17181318

Page Feedback