International-Data-Spaces-Association / omejdn-daps

Open Source implementation of the Dynamic Attribute Provisioning Service based on http://github.com/Fraunhofer-AISEC/omejdn-server
Apache License 2.0
5 stars 10 forks source link

unable to find valid certification path to requested target #6

Closed dadebuch closed 2 years ago

dadebuch commented 2 years ago

The Problem

The connector fetches a token but then throws a javax.net.ssl.SSLHandshakeException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target.

My Setup

I'm running two connectors instances in a docker compose environment as well as a DAPS instance. I followed the configuration steps to create a daps certificate and key. I also created self signed certificates with the Register_connector.sh script and configured a keystore/truststore. (Without using the DAPS in TEST_DEPLOYMENT the TLS connection works fine). I tried to add the DAPS certificate in both the connectors truststores but the error won't change.

SSL_Error

The DAPS token is correctly fetched but an error occurs in my opinion when the connector tries to verify it? the screen does not shows the detected causes:

Caused by: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

Caused by: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

Thanks for any response.

bellebaum commented 2 years ago

If the DAT was sucessfully issued, this is likely a problem with the Connector. Transferring...

bellebaum commented 2 years ago

For some reason, GitHub won't let me transfer this. Please file an issue at https://github.com/International-Data-Spaces-Association/DataspaceConnector

dadebuch commented 2 years ago

Oh ok, thank you :)