【Java123】解决PKIX path building failed / unable to find valid certification path to requested target

时间：2019-12-03 14:14:50 收藏：0 阅读：101

解决方案：生成JDK证书并导入JRE security中

https://blog.csdn.net/fate_fate/article/details/84615289

https://blog.csdn.net/Gabriel576282253/article/details/81531746

注意事项：

1. 生成的.cert文件放入对应jre/lib/security下

2.进入到上述目录下执行keytool命令

3. 密码一般使用默认值：changeit

C:\Users\1481704\Java\jdk1.6.0_43\jre\lib\security>keytool -import -alias serverpublickey -file C:\Users\1481704\Desktop\onecc.cer -keystore jssecacerts
Enter keystore password:
Re-enter new password:
Owner: CN=jira.global.standardchartered.com, OU=CIO Group Functions, O=Standard Chartered Bank, C=UK
Issuer: CN=Standard Chartered Bank SSL CA G1, O=Standard Chartered Bank, C=GB
Serial number: 1a9b3d06746ae6be
Valid from: Wed Nov 14 18:02:28 CST 2018 until: Fri Nov 13 18:02:28 CST 2020
Certificate fingerprints:
MD5: F7:DC:80:02:70:E7:9E:82:94:CF:7E:E1:34:8C:16:C4
SHA1: DF:82:1D:EB:D2:10:E2:CF:9A:5A:E8:A4:2B:C3:5A:64:CB:31:90:C0
Signature algorithm name: SHA256withRSA
Version: 3


Extensions:


#1: ObjectId: 2.5.29.15 Criticality=true
KeyUsage [
DigitalSignature
Key_Encipherment
]


#2: ObjectId: 2.5.29.19 Criticality=true
BasicConstraints:[
CA:false
PathLen: undefined
]


#3: ObjectId: 1.3.6.1.5.5.7.1.1 Criticality=false
AuthorityInfoAccess [
[
accessMethod: 1.3.6.1.5.5.7.48.1
accessLocation: URIName: http://coreocsp.global.standardchartered.com/ejbca/publicweb/status/ocsp]
]


#4: ObjectId: 2.5.29.14 Criticality=false
SubjectKeyIdentifier [
KeyIdentifier [
0000: 24 11 09 9D F0 E2 C7 F7 E4 80 A8 62 E5 62 43 70 $..........b.bCp
0010: B4 1F E3 CF ....
]
]


#5: ObjectId: 2.5.29.17 Criticality=false
SubjectAlternativeName [
DNSName: jira.global.standardchartered.com
]


#6: ObjectId: 2.5.29.31 Criticality=false
CRLDistributionPoints [
[DistributionPoint:
[URIName: http://corecrl.global.standardchartered.com/ejbca/publicweb/webdist/certdist?cmd=crl&issuer=CN=Standard%20Chartered%20Bank%20SSL%20CA%20G1,O=Standard%20Chartered%20Bank,%20C=GB]
CRLIssuer:[C=GB, O=Standard Chartered Bank, CN=Standard Chartered Bank SSL CA G1]
]]


#7: ObjectId: 2.5.29.35 Criticality=false
AuthorityKeyIdentifier [
KeyIdentifier [
0000: 23 9F 50 5D 4E 4A 4D 64 6A 56 22 6A EE 3F 9E 86 #.P]NJMdjV"j.?..
0010: A2 2C 66 B5 .,f.
]


]


#8: ObjectId: 2.5.29.37 Criticality=false
ExtendedKeyUsages [
clientAuth
serverAuth
]


Trust this certificate? [no]: y
Certificate was added to keystore


C:\Users\1481704\Java\jdk1.6.0_43\jre\lib\security>