Peter Bryant created HTTPCLIENT-1539:
----------------------------------------
Summary: Non-consistent SunCertPathBuilderException
Key: HTTPCLIENT-1539
URL: https://issues.apache.org/jira/browse/HTTPCLIENT-1539
Project: HttpComponents HttpClient
Issue Type: Bug
Affects Versions: 4.3.5
Environment: java -version
java version "1.8.0_05"
Java(TM) SE Runtime Environment (build 1.8.0_05-b13)
Java HotSpot(TM) 64-Bit Server VM (build 25.5-b02, mixed mode)
Reporter: Peter Bryant
Priority: Critical
Hi.
I have the following code:
HttpClient c = HttpClients.custom().build();
HttpResponse r = c.execute(new
HttpGet("https://apcourseaudit.epiconline.org/start/login/";));
System.out.println(r.getStatusLine());
That either prints:
HTTP/1.1 200 OK
Or it throws:
Caused by: sun.security.provider.certpath.SunCertPathBuilderException: unable
to find valid certification path to requested target
at
sun.security.provider.certpath.SunCertPathBuilder.build(SunCertPathBuilder.java:145)
at
sun.security.provider.certpath.SunCertPathBuilder.engineBuild(SunCertPathBuilder.java:131)
at java.security.cert.CertPathBuilder.build(CertPathBuilder.java:280)
at sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:382)
... 27 more
The result changes without the code varying.
Adding in -Djavax.net.debug=all shows a bit of tracing of what is going on.
A diff of the debug output shows it seems related to the handshake algorithm
that happens to be used? TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA ?
I tried to track it down, but it has defeated me. Can you reproduce? Any
ideas?
--
This message was sent by Atlassian JIRA
(v6.2#6252)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
