SAML: unable to find valid certification path to requested target

0
After I have upgraded an environment with the latest SAML module I get the error in the stacktrace below. In the olld version I used to be able to use the URL for the SAML  IdP metadata. Now I must upload the file because retrieving by URL gives this fault. Any reason why this is happening? Googling points me that some certificates are missing. But it never complaint in the old version. Regards, Ronald Oct 16 15:43:43.059 - ERROR - Connector: (1/192) com.mendix.modules.microflowengine.MicroflowException: com.mendix.core.CoreRuntimeException: com.mendix.systemwideinterfaces.MendixRuntimeException: javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target Oct 16 15:43:43.059 - ERROR - Connector: (2/192) #011at SAML20.IdPMetadata_Refresh (Error : '') Oct 16 15:43:43.059 - ERROR - Connector: (3/192) Oct 16 15:43:43.059 - ERROR - Connector: (4/192) Advanced stacktrace: Oct 16 15:43:43.059 - ERROR - Connector: (5/192) #011at com.mendix.modules.microflowengine.microflow.impl.ErrorEvent.throwError$1(ErrorEvent.scala:16) Oct 16 15:43:43.059 - ERROR - Connector: (6/192) Oct 16 15:43:43.059 - ERROR - Connector: (7/192) Caused by: com.mendix.core.CoreException: com.mendix.core.CoreRuntimeException: com.mendix.systemwideinterfaces.MendixRuntimeException: javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target Oct 16 15:43:43.059 - ERROR - Connector: (8/192) #011at com.mendix.core.component.InternalCore.execute(InternalCore.java:504) Oct 16 15:43:43.059 - ERROR - Connector: (9/192) Oct 16 15:43:43.059 - ERROR - Connector: (10/192) Caused by: com.mendix.core.CoreRuntimeException: com.mendix.systemwideinterfaces.MendixRuntimeException: javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target Oct 16 15:43:43.059 - ERROR - Connector: (11/192) #011at com.mendix.core.actionmanagement.ActionManager.executeSync(ActionManager.java:176) Oct 16 15:43:43.059 - ERROR - Connector: (12/192) Oct 16 15:43:43.059 - ERROR - Connector: (13/192) Caused by: com.mendix.systemwideinterfaces.MendixRuntimeException: javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target Oct 16 15:43:43.059 - ERROR - Connector: (14/192) #011at com.mendix.util.classloading.Runner.doRunUsingClassLoaderOf(Runner.java:40) Oct 16 15:43:43.059 - ERROR - Connector: (15/192) Oct 16 15:43:43.059 - ERROR - Connector: (16/192) Caused by: javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target  
asked
1 answers
2

Ronald,

Are you in Mendix Cloud v4? I've seen an issue like this handshaking SSL with domains that get their SSL certs signed by GoDaddy. Java doesn't trust GoDaddy-signed certs by default, so I had to upload the GoDaddy root cert to the cloud portal in order to get the SSL handshake to work.

answered