On 13.07.2017 02:58, Maxim Solodovnik wrote: > Hello, > > This error "unable to find valid certification path to requested target" > usually means certificate chin is not recognized to be secure > I believe you need to import your CA certificate will all intermediate > certificates to JRE (jre/lib/security/cacerts) > > On Thu, Jul 13, 2017 at 1:43 AM, Coscend@OM <[email protected]> wrote: > >> Hello Maxime, >> >> In the spirit of assisting you, here are a few vectors to resolve your >> issue: >> Issue: "unable to find valid certification path to requested target >> at com.sun.mail.smtp.SMTPTransport.startTLS" >> >> Suggestions: >> 1. OM configuration issue: >> Configure Admin -> Configuration >> >> Smtp_server: this is the smtp server to send messages. >> Smtp_port: this is the smtp server port normally 25 or 80, if using no SSL, >> otherwise 443 if using SSL encrypted e-mail. >> System_email_addr: all sent e-mails by the system including invitations >> will have this address: >> Email_username (System authentication email username): your e-mail's >> username: .... or on how your third party e-mail client is configured. >> Email_userpass: the password of your e-mail's username >> Mail.smtp.starttls.enable: 0 (if above 25 or 80) or 1 (if above is 443) >> Enable TLS 1=true, 0=false >> >> For example, in GMail, >> >> Smtp_server: smtp.gmail.com [1] >> Smtp_port: Port 465 (SSL required) >> Port 587 (TLS required) >> >> 2. Additional: Firewall >> Open OS and software firewall SMTP ports. >> Set hardware firewall policies NAT allow from your server to WAN. >> >> Thank you. >> >> Sincerely, >> >> Hemant K. Sabat >> >> Coscend Communications Solutions >> www.Coscend.com [2] >> ------------------------------------------------------------------ >> Real-time, Interactive Video Collaboration, Tele-healthcare, Tele-education, >> Telepresence Services, on the fly... >> ------------------------------------------------------------------ >> CONFIDENTIALITY NOTICE: See 'Confidentiality Notice Regarding E-mail >> Messages from Coscend Communications Solutions' posted at: >> http://www.Coscend.com/Terms_and_Conditions.html [3] >> >> -----Original Message----- >> From: [email protected] [mailto:[email protected]] >> Sent: Wednesday, July 12, 2017 12:29 PM >> To: [email protected] >> Subject: help configuration smtp server >> >> Hello, >> >> We are installing a version of openmeetings (last stable) on a stretch >> Debian. Everything seems to work fine but we configured a smtp server with >> starttls port 587 from a functional mail server and we have a mail sending >> problem after creating a conference in the calendar. >> The "email Management" shows multiple errors as follows : >> >> Last Error >> javax.mail.MessagingException: Could not convert socket to TLS; >> nested exception is: >> javax.net.ssl.SSLHandshakeException: >> sun.security.validator.ValidatorException: PKIX path building failed: >> sun.security.provider.certpath.SunCertPathBuilderException: unable to find >> valid certification path to requested target >> at com.sun.mail.smtp.SMTPTransport.startTLS(SMTPTransport.java:2064) >> at >> com.sun.mail.smtp.SMTPTransport.protocolConnect(SMTPTransport.java:724) >> at javax.mail.Service.connect(Service.java:388) >> at javax.mail.Service.connect(Service.java:246) >> at javax.mail.Service.connect(Service.java:195) >> at javax.mail.Transport.send0(Transport.java:254) >> at javax.mail.Transport.send(Transport.java:124) >> at >> org.apache.openmeetings.core.mail.MailHandler$2.run(MailHandler.java:242) >> at >> java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:11 >> 42) >> at >> java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:6 >> 17) >> at java.lang.Thread.run(Thread.java:748) >> Caused by: javax.net.ssl.SSLHandshakeException: >> sun.security.validator.ValidatorException: PKIX path building failed: >> sun.security.provider.certpath.SunCertPathBuilderException: unable to find >> valid certification path to requested target >> at sun.security.ssl.Alerts.getSSLException(Alerts.java:192) >> at sun.security.ssl.SSLSocketImpl.fatal(SSLSocketImpl.java:1949) >> at sun.security.ssl.Handshaker.fatalSE(Handshaker.java:302) >> at sun.security.ssl.Handshaker.fatalSE(Handshaker.java:296) >> at >> sun.security.ssl.ClientHandshaker.serverCertificate(ClientHandshaker.java:15 >> 14) >> at >> sun.security.ssl.ClientHandshaker.processMessage(ClientHandshaker.java:216) >> at sun.security.ssl.Handshaker.processLoop(Handshaker.java:1026) >> at sun.security.ssl.Handshaker.process_record(Handshaker.java:961) >> at >> sun.security.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:1062) >> at >> sun.security.ssl.SSLSocketImpl.performInitialHandshake(SSLSocketImpl.java:13 >> 75) >> at >> sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1403) >> at >> sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1387) >> at >> com.sun.mail.util.SocketFetcher.configureSSLSocket(SocketFetcher.java:598) >> at com.sun.mail.util.SocketFetcher.startTLS(SocketFetcher.java:525) >> at com.sun.mail.smtp.SMTPTransport.startTLS(SMTPTransport.java:2059) >> ... 10 more >> Caused by: sun.security.validator.ValidatorException: PKIX path building >> failed: sun.security.provider.certpath.SunCertPathBuilderException: >> unable to find valid certification path to requested target >> at >> sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:387) >> at >> sun.security.validator.PKIXValidator.engineValidate(PKIXValidator.java:292) >> at sun.security.validator.Validator.validate(Validator.java:260) >> at >> sun.security.ssl.X509TrustManagerImpl.validate(X509TrustManagerImpl.java:324 >> ) >> at >> sun.security.ssl.X509TrustManagerImpl.checkTrusted(X509TrustManagerImpl.java >> :229) >> at >> sun.security.ssl.X509TrustManagerImpl.checkServerTrusted(X509TrustManagerImp >> l.java:124) >> at >> sun.security.ssl.ClientHandshaker.serverCertificate(ClientHandshaker.java:14 >> 96) >> ... 20 more >> Caused by: sun.security.provider.certpath.SunCertPathBuilderException: >> unable to find valid certification path to requested target >> at >> sun.security.provider.certpath.SunCertPathBuilder.build(SunCertPathBuilder.j >> ava:141) >> at >> sun.security.provider.certpath.SunCertPathBuilder.engineBuild(SunCertPathBui >> lder.java:126) >> at >> java.security.cert.CertPathBuilder.build(CertPathBuilder.java:280) >> at >> sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:382) >> ... 26 more >> >> Could you help us on configuring mail server with openmeetings ? >> >> Thanks for your help. >> >> Best Regards. >> >> Maxime >> >> --- >> This email has been checked for viruses by AVG. >> http://www.avg.com > > -- > WBR > Maxim aka solomax
Hello, Thank you very much for your reply and your useful help, importing the certificate made it functional. It works fine now. Best regards. Maxime Links: ------ [1] http://smtp.gmail.com [2] http://www.Coscend.com [3] http://www.Coscend.com/Terms_and_Conditions.html
