Issue: IdP unable to find valid certification path to requested target

[sandeep]

Dear Team, 

We are facing a certificate validation issue during login to our application 
with https, environment details also provided below. 
Below issue is not observed frequently. 
we have attached  'idp process logs' for both success and failure cases 
a) idp process logs-  idp-process_success.7z 
<http://shibboleth.1660669.n2.nabble.com/file/t397188/idp-process_success.7z>  
- in case of success 
b) idp process logs-  idp-process-Fail.gz 
<http://shibboleth.1660669.n2.nabble.com/file/t397188/idp-process-Fail.gz>  
- in case of failure 

--------------------------------------------------------------------------- 
We observed the following exception in *idp process logs. *
--------------------------------------------------------------------------- 
[ERROR] 
javax.net.ssl.SSLHandshakeException: PKIX path building failed:
sun.security.provider.certpath.SunCertPathBuilderException: unable to find
valid certification path to requested target 
        at java.base/sun.security.ssl.Alert.createSSLException(Unknown
Source) 
Caused by: sun.security.validator.ValidatorException: PKIX path building
failed: sun.security.provider.certpath.SunCertPathBuilderException: unable
to find valid certification path to requested target 
        at java.base/sun.security.validator.PKIXValidator.doBuild(Unknown
Source) 
Caused by: sun.security.provider.certpath.SunCertPathBuilderException:
unable to find valid certification path to requested target 
        at
java.base/sun.security.provider.certpath.SunCertPathBuilder.build(Unknown
Source). 

*Environment: *
*Java Version -* 11.0.2 
*Vendor - Adopt Open JDK *
*Shibboleth IdP Version- *3.1.1 

Kindly let us know if you need any further information we will provide the 
same. 

Thank you. 



--
Sent from: http://shibboleth.1660669.n2.nabble.com/Shibboleth-Users-f1660767.html