On Mon, Feb 17, 2014 at 02:11:39PM -0600, espe...@oreillyauto.com wrote: > The applications use data connection pools to connect to the iSeries > servers we use. Allof the connections use hibernate > (<app_name>.hibernate.connection.url=jdbc:as400://<host>;<libraries>;<options>; > In the options we add secure=true.
This looks like "Java". Java does not use OpenSSL. It has a Java keystore. You need to add trusted roots to the relevant Java keystore. This is the wrong list for help with that. Perhaps some kind soul will post the right recipe here anyway, but you should look at the relevant Java documentation or Java help forum. > Caused by: sun.security.validator.ValidatorException: PKIX path building > failed: sun.security.provider.certpath.SunCertPathBuilderException: unable > to find valid certification path to requested target Yep, Java. OpenSSL is the tool you used to generate the certs and keys, but it plays no role in how Java performs certificate chain verification. -- Viktor. ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager majord...@openssl.org