1 Reply Latest reply on Jun 11, 2009 6:37 AM by SForrest96

    IMAP email endpoint with SSL certificates

    kc@dafolo.dk Level 1

      Hi all,

       

      I have a customer that uses an SSL certificate for their mail-server, but when I set up the connection on the endpoint I get the following error:

       

      SEVERE: Application Administration: Could not connect to Inbox. Error message: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target;
        nested exception is:
          javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
      java.lang.RuntimeException: Could not connect to Inbox. Error message: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target;
        nested exception is:
          javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
          at com.adobe.idp.dsc.provider.service.email.impl.EmailConnector.validateEndpoint(EmailConnec tor.java:395)
          at com.adobe.idp.dsc.provider.service.email.impl.EmailConnector.onEndpointCreate(EmailConnec tor.java:83)
          at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
          at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
          at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
          at java.lang.reflect.Method.invoke(Method.java:585)
          at com.adobe.idp.dsc.component.impl.DefaultPOJOInvokerImpl.invoke(DefaultPOJOInvokerImpl.jav a:118)
          at com.adobe.idp.dsc.interceptor.impl.InvocationInterceptor.intercept(InvocationInterceptor. java:140)
          at com.adobe.idp.dsc.interceptor.impl.RequestInterceptorChainImpl.proceed(RequestInterceptor ChainImpl.java:60)
          at com.adobe.idp.dsc.transaction.interceptor.TransactionInterceptor$1.doInTransaction(Transa ctionInterceptor.java:74)

       

      What do I need to do to get this email endpoint up and running in LC. I have setup the connection in Thunderbird exactly the same way and it seems to work fine there.

       

      Thanks in advance

       

      Sincerely

      Kim

        • 1. Re: IMAP email endpoint with SSL certificates
          SForrest96 Level 4

          I'm not 100% sure, but I suspect the problem is related to the certificate(s) not being trusted properly.  The error "PKIX path building failed" seems to indicate that the certicate (trust) chain could not be built.

           

           

          I would start by importing the root certificate of the Certificate Authority that issued the SSL certificate into the Java JRE "cacerts" file.  You can do this using the JavaKeytool.  The syntax goes something like this...

           

          keytool -import -v -noprompt -alias enteraliashere -file "Path to ssl certificate (.cer)" -keystore "Java install directory\jre\lib\security\cacerts" -storepass changeit

           

          Hope this helps

          Steve