JAAS Certificate Error

[Mr. Christopher Bland]

Hi All,

I am configuring a new IDP v3.4.2 with JAAS authentication.  I am seeing the following error

2019-01-08 11:05:03,072 -  - DEBUG [org.ldaptive.provider.jndi.JndiConnectionFactory:105] - Error connecting to LDAP URL: ldaps://ldapserver:636
org.ldaptive.provider.ConnectionException: javax.naming.CommunicationException: ldapserver:636 [Root exception is javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target]
        at org.ldaptive.provider.jndi.JndiConnectionFactory.createInternal(JndiConnectionFactory.java:104)
Caused by: javax.naming.CommunicationException: ldapserver:636
        at com.sun.jndi.ldap.Connection.<init>(Connection.java:238)
Caused by: javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
        at sun.security.ssl.Alerts.getSSLException(Alerts.java:192)
Caused by: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
        at sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:397)
Caused by: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
        at sun.security.provider.certpath.SunCertPathBuilder.build(SunCertPathBuilder.java:141)
2019-01-08 11:05:03,084 -  - DEBUG [org.ldaptive.ssl.AggregateTrustManager:156] - checkServerTrusted for sun.security.ssl.X509TrustManagerImpl at 163d83db failed

I am using an AD ldap server with a certificate signed by my AD CA.  In the docs for LDAP authentication I can add the AD CA certificate by setting the idp.authn.LDAP.trustCertificates property.  How do I set trustedCertificates for JAAS?

-Chris