DSS REST API SSL handshake error

pradeep.balasubramanian

We are currently trying to connect to the DSS REST API and encounter the following error.

"javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target"

The team was successful in connecting to the REST API in a standalone program. But when the application was deployed using a JBoss server the error was encountered. While searching in the Q&A of the developers forum, it was mentioned that the issue could be due to the SSL certificate.
Where can we get the latest SSL certificate for the DSS REST API?

Gurpreet

Hello @pradeep.balasubramanian, this is probably due to old version of Java being used in your application server. The DSS website link is https://hosted.datascope.reuters.com/DataScope/ and it is signed by "DigiCert SHA2 Secure Server CA" certificate authority.

Once you open the website in the browser, you can view connection properties and download the certificate and import it into your keystore file.

There is an option to import the certificate into a new keystore for use with JBOSS, or to add it into the JRE default keystore for use with all applications:

keytool -import -trustcacerts -keystore $JAVA_HOME/jre/lib/security/cacerts -storepass changeit -alias Root -import -file DigiCertRootCA.pem

Please see this article for additional help in understanding Java Security. You can also enable network logging using this property:

<code>-Djavax.net.debug=all

pradeep.balasubramanian

Thanks @Gurpreet.
"

The solution works.