Requirement-For
local development using Jdeveloper when we call any webservice which is SSL
enabled which is very common and when we call any SSL enabled service from
Jdeveloper we get SSL handshake error something like pkix path building
failed: sun.security.provider.certpath.suncertpathbuilderexception: unable to
find valid certification path to requested target.
Solution
For
this firstly we need to identify which is the trust keystore for local
integrated server .For this start local weblogic server and go to default
server à
keystores as shown in below screenshot.
Here
you can find path of trust keystore used by integrated server of Jdeveloper.
Go to trust keystore path mentioned in above screenshot .In my case it is C:\Oracle\Middleware\wlserver_10.3\server\lib\DemoTrust.jks
Now we need to import the SSL certificate of webservice we are calling on above JKS .So step 1 would be to download the SSL certificate of webservice we are trying to call which can be done using below command.
1.
openssl s_client -servername abc.webservicehost.ent
-connect abc.webservicehost.ent:8243 < /dev/null | sed -ne '/-BEGIN
CERTIFICATE-/,/-END CERTIFICATE-/p' > abc.crt
certificate gets downloaded with name abc.crt
(install open ssl for windows if it is not installed)
2.
Now we need to add this certificate in DemoTrust.jks .password
for this jks is “DemoTrustKeyStorePassPhrase”.This
you can either do this by installing keystore explorer in windows or using
command below
a.
Using keystore explorer open DemoTrust.jks it will ask
for password which is DemoTrustKeyStorePassPhrase.
b.
Once open go to tools and click import certificate and
select certificate downloaded in step1 above i.e. abc.crt
c. Using command, you can do as below. Go to JDK home in your windows and execute below command
keytool -import -keystore C:\Oracle\Middleware\wlserver_10.3\server\lib\DemoTrust.jks -storepass DemoTrustKeyStorePassPhrase -file abc.crt -alias webservicecertalias
Now restart Integrated weblogic server of Jdeveloper and run the webservice call again.You will not see any SSL handshake error.
