On Mon, Feb 17, 2014 at 02:11:39PM -0600, espe...@oreillyauto.com wrote:

> The applications use data connection pools to connect to the iSeries
> servers we use.  Allof the connections use hibernate
> (<app_name>.hibernate.connection.url=jdbc:as400://<host>;<libraries>;<options>;
>   In the options we add secure=true.

This looks like "Java".  Java does not use OpenSSL.  It has a Java
keystore.  You need to add trusted roots to the relevant Java
keystore.  This is the wrong list for help with that.  Perhaps some
kind soul will post the right recipe here anyway, but you should
look at the relevant Java documentation or Java help forum.

> Caused by: sun.security.validator.ValidatorException: PKIX path building
> failed: sun.security.provider.certpath.SunCertPathBuilderException: unable
> to find valid certification path to requested target

Yep, Java.  OpenSSL is the tool you used to generate the certs and
keys, but it plays no role in how Java performs certificate chain
verification.

-- 
        Viktor.
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           majord...@openssl.org

Reply via email to