java.io.IOException: Exception during sslSocket.startHandshake: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target; targetException=java.lang.IllegalArgumentException: Error opening socket: java.io.IOException: Exception during sslSocket.startHandshake: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target]

Jenkins JIRA | Marco Musolf | 2 years ago
  1. 0

    I have tried to deploy an ear application to remote websphere but i am not able to ping the server within plugin configuration dialog. I have successfully deployed on a local server. This is what I did in order to configure remote server : 1. Copy DummyClientKeyFile.jks and DummyClientTrustFile.jks from remote server to jenkins server and configured those files within plugin dialog. 2. Import remote server certificates by using InstallCert program mentioned in plugin documentation by using hostname 9043 as parmeter. hostname is the remote server address and 9043 soap port of admin console 3. copying jssecacerts which contains both certificates from step 2. into JRE/lib/security where JRE is the java runtime environment jenkins is runnging under 4. restart jenkins server I am not able to ping the server always get a ssl exception : Any help will be appreciated Connection failed: com.ibm.websphere.management.exception.ConnectorException: ADMC0016E: The system cannot create a SOAP connector to connect to host XXXXXXXXXXXXXXXXXX at port 8879. at com.ibm.websphere.management.AdminClientFactory.createAdminClientPrivileged(AdminClientFactory.java:635) at com.ibm.websphere.management.AdminClientFactory.access$000(AdminClientFactory.java:127) at com.ibm.websphere.management.AdminClientFactory$1.run(AdminClientFactory.java:210) at com.ibm.ws.security.util.AccessController.doPrivileged(AccessController.java:63) at com.ibm.websphere.management.AdminClientFactory.createAdminClient(AdminClientFactory.java:206) at org.jenkinsci.plugins.websphere.services.deployment.WebSphereDeploymentService.connect(WebSphereDeploymentService.java:234) at org.jenkinsci.plugins.websphere_deployer.WebSphereDeployerPlugin$DescriptorImpl.doTestConnection(WebSphereDeployerPlugin.java:334) at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) at sun.reflect.NativeMethodAccessorImpl.invoke(Unknown Source) at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source) at java.lang.reflect.Method.invoke(Unknown Source) at org.kohsuke.stapler.Function$InstanceFunction.invoke(Function.java:298) at org.kohsuke.stapler.Function.bindAndInvoke(Function.java:161) at org.kohsuke.stapler.Function.bindAndInvokeAndServeResponse(Function.java:96) at org.kohsuke.stapler.MetaClass$1.doDispatch(MetaClass.java:121) at org.kohsuke.stapler.NameBasedDispatcher.dispatch(NameBasedDispatcher.java:53) at org.kohsuke.stapler.Stapler.tryInvoke(Stapler.java:746) at org.kohsuke.stapler.Stapler.invoke(Stapler.java:876) at org.kohsuke.stapler.MetaClass$6.doDispatch(MetaClass.java:249) at org.kohsuke.stapler.NameBasedDispatcher.dispatch(NameBasedDispatcher.java:53) at org.kohsuke.stapler.Stapler.tryInvoke(Stapler.java:746) at org.kohsuke.stapler.Stapler.invoke(Stapler.java:876) at org.kohsuke.stapler.MetaClass$6.doDispatch(MetaClass.java:249) at org.kohsuke.stapler.NameBasedDispatcher.dispatch(NameBasedDispatcher.java:53) at org.kohsuke.stapler.Stapler.tryInvoke(Stapler.java:746) at org.kohsuke.stapler.Stapler.invoke(Stapler.java:876) at org.kohsuke.stapler.MetaClass$6.doDispatch(MetaClass.java:249) at org.kohsuke.stapler.NameBasedDispatcher.dispatch(NameBasedDispatcher.java:53) at org.kohsuke.stapler.Stapler.tryInvoke(Stapler.java:746) at org.kohsuke.stapler.Stapler.invoke(Stapler.java:876) at org.kohsuke.stapler.Stapler.invoke(Stapler.java:649) at org.kohsuke.stapler.Stapler.service(Stapler.java:238) at javax.servlet.http.HttpServlet.service(HttpServlet.java:848) at org.eclipse.jetty.servlet.ServletHolder.handle(ServletHolder.java:686) at org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1494) at hudson.util.PluginServletFilter$1.doFilter(PluginServletFilter.java:123) at hudson.util.PluginServletFilter.doFilter(PluginServletFilter.java:114) at org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1482) at hudson.security.csrf.CrumbFilter.doFilter(CrumbFilter.java:48) at org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1482) at hudson.security.ChainedServletFilter$1.doFilter(ChainedServletFilter.java:84) at hudson.security.ChainedServletFilter.doFilter(ChainedServletFilter.java:76) at hudson.security.HudsonFilter.doFilter(HudsonFilter.java:164) at org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1482) at org.kohsuke.stapler.compression.CompressionFilter.doFilter(CompressionFilter.java:49) at org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1482) at hudson.util.CharacterEncodingFilter.doFilter(CharacterEncodingFilter.java:81) at org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1482) at org.kohsuke.stapler.DiagnosticThreadNameFilter.doFilter(DiagnosticThreadNameFilter.java:30) at org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1474) at org.eclipse.jetty.servlet.ServletHandler.doHandle(ServletHandler.java:499) at org.eclipse.jetty.server.handler.ScopedHandler.handle(ScopedHandler.java:137) at org.eclipse.jetty.security.SecurityHandler.handle(SecurityHandler.java:533) at org.eclipse.jetty.server.session.SessionHandler.doHandle(SessionHandler.java:231) at org.eclipse.jetty.server.handler.ContextHandler.doHandle(ContextHandler.java:1086) at org.eclipse.jetty.servlet.ServletHandler.doScope(ServletHandler.java:428) at org.eclipse.jetty.server.session.SessionHandler.doScope(SessionHandler.java:193) at org.eclipse.jetty.server.handler.ContextHandler.doScope(ContextHandler.java:1020) at org.eclipse.jetty.server.handler.ScopedHandler.handle(ScopedHandler.java:135) at org.eclipse.jetty.server.handler.HandlerWrapper.handle(HandlerWrapper.java:116) at org.eclipse.jetty.server.Server.handle(Server.java:366) at org.eclipse.jetty.server.AbstractHttpConnection.handleRequest(AbstractHttpConnection.java:489) at org.eclipse.jetty.server.AbstractHttpConnection.content(AbstractHttpConnection.java:960) at org.eclipse.jetty.server.AbstractHttpConnection$RequestHandler.content(AbstractHttpConnection.java:1021) at org.eclipse.jetty.http.HttpParser.parseNext(HttpParser.java:865) at org.eclipse.jetty.http.HttpParser.parseAvailable(HttpParser.java:240) at org.eclipse.jetty.server.AsyncHttpConnection.handle(AsyncHttpConnection.java:82) at org.eclipse.jetty.io.nio.SelectChannelEndPoint.handle(SelectChannelEndPoint.java:668) at org.eclipse.jetty.io.nio.SelectChannelEndPoint$1.run(SelectChannelEndPoint.java:52) at winstone.BoundedExecutorService$1.run(BoundedExecutorService.java:77) at java.util.concurrent.ThreadPoolExecutor.runWorker(Unknown Source) at java.util.concurrent.ThreadPoolExecutor$Worker.run(Unknown Source) at java.lang.Thread.run(Unknown Source) Caused by: java.lang.reflect.InvocationTargetException at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method) at sun.reflect.NativeConstructorAccessorImpl.newInstance(Unknown Source) at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(Unknown Source) at java.lang.reflect.Constructor.newInstance(Unknown Source) at com.ibm.websphere.management.AdminClientFactory.createAdminClientPrivileged(AdminClientFactory.java:457) ... 72 more Caused by: com.ibm.websphere.management.exception.ConnectorNotAvailableException: [SOAPException: faultCode=SOAP-ENV:Client; msg=Error opening socket: java.io.IOException: Exception during sslSocket.startHandshake: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target; targetException=java.lang.IllegalArgumentException: Error opening socket: java.io.IOException: Exception during sslSocket.startHandshake: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target] at com.ibm.ws.management.connector.soap.SOAPConnectorClient.reconnect(SOAPConnectorClient.java:429) at com.ibm.ws.management.connector.soap.SOAPConnectorClient.<init>(SOAPConnectorClient.java:228) ... 77 more Caused by: [SOAPException: faultCode=SOAP-ENV:Client; msg=Error opening socket: java.io.IOException: Exception during sslSocket.startHandshake: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target; targetException=java.lang.IllegalArgumentException: Error opening socket: java.io.IOException: Exception during sslSocket.startHandshake: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target] at org.apache.soap.transport.http.SOAPHTTPConnection.send(SOAPHTTPConnection.java:475) at org.apache.soap.rpc.Call.WASinvoke(Call.java:487) at com.ibm.ws.management.connector.soap.SOAPConnectorClient$4.run(SOAPConnectorClient.java:387) at com.ibm.ws.security.util.AccessController.doPrivileged(AccessController.java:118) at com.ibm.ws.management.connector.soap.SOAPConnectorClient.reconnect(SOAPConnectorClient.java:372) ... 78 more

    Jenkins JIRA | 2 years ago | Marco Musolf
    java.io.IOException: Exception during sslSocket.startHandshake: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target; targetException=java.lang.IllegalArgumentException: Error opening socket: java.io.IOException: Exception during sslSocket.startHandshake: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target]
  2. 0

    Any help would be greatly appreciated. I am getting the following error where I can't connect to the remote port on SOAP port 8879. This appears to be certificate issues. I created extracted the certificates for 9043 and 8879. I used I have many combinations of creating a separate jssecerts, Batch file E:\AppDevelopment\jdk\IBM\jdk60\bin\java.exe InstallCert server:9043 pause E:\AppDevelopment\jdk\IBM\jdk60\bin\java.exe InstallCert server:8879 pause echo LIST Trust store certs to get the alias names call "E:\Program Files (x86)\Jenkins\jre\bin\keytool" -list -storepass WebAS -v -keystore "E:\AppDevelopment\Process\WAS_Deploy\dia-dev1\DummyClientTrustFile.jks" > DummyClientTrustFilecertList.txt echo list of alias: "thawte personal freemail ca" "new websphere dummy client" "new websphere dummy server" "default_signer" "thawte personal basic ca" "rsa secure server certification authority" "thawte premium server ca" echo "verisign class 1 public primary certification authority" "thawte server ca" pause echo EXPORT CERTS call "E:\Program Files (x86)\Jenkins\jre\bin\keytool" -export -storepass WebAS -alias "thawte personal freemail ca" -keystore E:\AppDevelopment\Process\WAS_Deploy\dia-dev1\DummyClientTrustFile.jks -file thawtepersonalfreemailca.crt call "E:\Program Files (x86)\Jenkins\jre\bin\keytool" -export -storepass WebAS -alias "new websphere dummy client" -keystore E:\AppDevelopment\Process\WAS_Deploy\dia-dev1\DummyClientTrustFile.jks -file newwebspheredummyclient.crt call "E:\Program Files (x86)\Jenkins\jre\bin\keytool" -export -storepass WebAS -alias "new websphere dummy server" -keystore E:\AppDevelopment\Process\WAS_Deploy\dia-dev1\DummyClientTrustFile.jks -file newwebspheredummyserver.crt call "E:\Program Files (x86)\Jenkins\jre\bin\keytool" -export -storepass WebAS -alias "default_signer" -keystore E:\AppDevelopment\Process\WAS_Deploy\dia-dev1\DummyClientTrustFile.jks -file default_signer.crt call "E:\Program Files (x86)\Jenkins\jre\bin\keytool" -export -storepass WebAS -alias "thawte personal basic ca" -keystore E:\AppDevelopment\Process\WAS_Deploy\dia-dev1\DummyClientTrustFile.jks -file thawtepersonalbasicca.crt call "E:\Program Files (x86)\Jenkins\jre\bin\keytool" -export -storepass WebAS -alias "rsa secure server certification authority" -keystore E:\AppDevelopment\Process\WAS_Deploy\dia-dev1\DummyClientTrustFile.jks -file rsasecureservercertificationauthority.crt call "E:\Program Files (x86)\Jenkins\jre\bin\keytool" -export -storepass WebAS -alias "thawte premium server ca" -keystore E:\AppDevelopment\Process\WAS_Deploy\dia-dev1\DummyClientTrustFile.jks -file thawtepremiumserverca.crt call "E:\Program Files (x86)\Jenkins\jre\bin\keytool" -export -storepass WebAS -alias "verisign class 1 public primary certification authority" -keystore E:\AppDevelopment\Process\WAS_Deploy\dia-dev1\DummyClientTrustFile.jks -file verisignclass1publicprimarycertificationauthority.crt call "E:\Program Files (x86)\Jenkins\jre\bin\keytool" -export -storepass WebAS -alias "thawte server ca" -keystore E:\AppDevelopment\Process\WAS_Deploy\dia-dev1\DummyClientTrustFile.jks -file thawteserverca.crt echo IMPORT CERTS call "E:\Program Files (x86)\Jenkins\jre\bin\keytool" -import -storepass changeit -trustcacerts -alias "thawte personal freemail ca" -file E:\AppDevelopment\Process\WAS_Deploy\thawtepersonalfreemailca.crt -keystore E:\AppDevelopment\Process\WAS_Deploy\cacerts call "E:\Program Files (x86)\Jenkins\jre\bin\keytool" -import -storepass changeit -trustcacerts -alias "new websphere dummy client" -file E:\AppDevelopment\Process\WAS_Deploy\newwebspheredummyclient.crt -keystore E:\AppDevelopment\Process\WAS_Deploy\cacerts call "E:\Program Files (x86)\Jenkins\jre\bin\keytool" -import -storepass changeit -trustcacerts -alias "new websphere dummy server" -file E:\AppDevelopment\Process\WAS_Deploy\newwebspheredummyserver.crt -keystore E:\AppDevelopment\Process\WAS_Deploy\cacerts call "E:\Program Files (x86)\Jenkins\jre\bin\keytool" -import -storepass changeit -trustcacerts -alias "default_signer" -file E:\AppDevelopment\Process\WAS_Deploy\default_signer.crt -keystore E:\AppDevelopment\Process\WAS_Deploy\cacerts call "E:\Program Files (x86)\Jenkins\jre\bin\keytool" -import -storepass changeit -trustcacerts -alias "thawte personal basic ca" -file E:\AppDevelopment\Process\WAS_Deploy\thawtepersonalbasicca.crt -keystore E:\AppDevelopment\Process\WAS_Deploy\cacerts call "E:\Program Files (x86)\Jenkins\jre\bin\keytool" -import -storepass changeit -trustcacerts -alias "rsa secure server certification authority" -file E:\AppDevelopment\Process\WAS_Deploy\rsasecureservercertificationauthority.crt -keystore E:\AppDevelopment\Process\WAS_Deploy\cacerts call "E:\Program Files (x86)\Jenkins\jre\bin\keytool" -import -storepass changeit -trustcacerts -alias "thawte premium server ca" -file E:\AppDevelopment\Process\WAS_Deploy\thawtepremiumserverca.crt -keystore E:\AppDevelopment\Process\WAS_Deploy\cacerts call "E:\Program Files (x86)\Jenkins\jre\bin\keytool" -import -storepass changeit -trustcacerts -alias "verisign class 1 public primary certification authority" -file E:\AppDevelopment\Process\WAS_Deploy\verisignclass1publicprimarycertificationauthority.crt -keystore E:\AppDevelopment\Process\WAS_Deploy\cacerts call "E:\Program Files (x86)\Jenkins\jre\bin\keytool" -import -storepass changeit -trustcacerts -alias "thawte server ca" -file E:\AppDevelopment\Process\WAS_Deploy\thawteserverca.crt -keystore E:\AppDevelopment\Process\WAS_Deploy\cacerts echo LIST CERTS call "E:\Program Files (x86)\Jenkins\jre\bin\keytool" -list -storepass changeit -v -keystore "E:\AppDevelopment\Process\WAS_Deploy\cacerts" > newCacerts I updated jenkins.xml to include some runtime helpers <arguments>-Xrs -Xmx256m -Djavax.net.debug=ssl -Djava.util.logging.loglevel=ALL -Dcom.ibm.SOAP.ConfigURL=file:"E:/Program Files (x86)/Jenkins/Websphere/soap.client.props" -Dcom.ibm.SSL.ConfigURL=file:"E:/Program Files (x86)/Jenkins/Websphere/ssl.client.props" -Dhudson.lifecycle=hudson.lifecycle.WindowsServiceLifecycle -jar "%BASE%\jenkins.war" --httpPort=8080</arguments> The test connection and the build job fail with the same message.. Ironically I was able to get it to go further and connect, but when I came in the next morning it wasn't working again. Connecting... Connecting to IBM WebSphere Application Server... Error deploying to IBM WebSphere Application Server: com.ibm.websphere.management.exception.ConnectorException: ADMC0016E: The system cannot create a SOAP connector to connect to host DIA-DEV1.jih01.johnson.ca at port 8879. at com.ibm.websphere.management.AdminClientFactory.createAdminClientPrivileged(AdminClientFactory.java:635) at com.ibm.websphere.management.AdminClientFactory.access$000(AdminClientFactory.java:127) at com.ibm.websphere.management.AdminClientFactory$1.run(AdminClientFactory.java:210) at com.ibm.ws.security.util.AccessController.doPrivileged(AccessController.java:63) at com.ibm.websphere.management.AdminClientFactory.createAdminClient(AdminClientFactory.java:206) at org.jenkinsci.plugins.websphere.services.deployment.WebSphereDeploymentService.connect(WebSphereDeploymentService.java:322) at org.jenkinsci.plugins.websphere_deployer.WebSphereDeployerPlugin.connect(WebSphereDeployerPlugin.java:276) at org.jenkinsci.plugins.websphere_deployer.WebSphereDeployerPlugin.perform(WebSphereDeployerPlugin.java:168) at hudson.tasks.BuildStepMonitor$3.perform(BuildStepMonitor.java:45) at hudson.model.AbstractBuild$AbstractBuildExecution.perform(AbstractBuild.java:770) at hudson.model.AbstractBuild$AbstractBuildExecution.performAllBuildSteps(AbstractBuild.java:734) at hudson.model.Build$BuildExecution.post2(Build.java:183) at hudson.model.AbstractBuild$AbstractBuildExecution.post(AbstractBuild.java:683) at hudson.model.Run.execute(Run.java:1784) at hudson.model.FreeStyleBuild.run(FreeStyleBuild.java:43) at hudson.model.ResourceController.execute(ResourceController.java:89) at hudson.model.Executor.run(Executor.java:240) Caused by: java.lang.reflect.InvocationTargetException at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method) at sun.reflect.NativeConstructorAccessorImpl.newInstance(Unknown Source) at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(Unknown Source) at java.lang.reflect.Constructor.newInstance(Unknown Source) at com.ibm.websphere.management.AdminClientFactory.createAdminClientPrivileged(AdminClientFactory.java:457) ... 16 more Caused by: com.ibm.websphere.management.exception.ConnectorNotAvailableException: [SOAPException: faultCode=SOAP-ENV:Client; msg=Error opening socket: java.io.IOException: Exception during sslSocket.startHandshake: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target; targetException=java.lang.IllegalArgumentException: Error opening socket: java.io.IOException: Exception during sslSocket.startHandshake: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target] at com.ibm.ws.management.connector.soap.SOAPConnectorClient.reconnect(SOAPConnectorClient.java:415) at com.ibm.ws.management.connector.soap.SOAPConnectorClient.<init>(SOAPConnectorClient.java:227) ... 21 more Caused by: [SOAPException: faultCode=SOAP-ENV:Client; msg=Error opening socket: java.io.IOException: Exception during sslSocket.startHandshake: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target; targetException=java.lang.IllegalArgumentException: Error opening socket: java.io.IOException: Exception during sslSocket.startHandshake: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target] at org.apache.soap.transport.http.SOAPHTTPConnection.send(SOAPHTTPConnection.java:475) at org.apache.soap.rpc.Call.WASinvoke(Call.java:487) at com.ibm.ws.management.connector.soap.SOAPConnectorClient$4.run(SOAPConnectorClient.java:387) at com.ibm.ws.security.util.AccessController.doPrivileged(AccessController.java:118) at com.ibm.ws.management.connector.soap.SOAPConnectorClient.reconnect(SOAPConnectorClient.java:372) ... 22 more Build step 'Deploy To IBM WebSphere Application Server' changed build result to FAILURE

    Jenkins JIRA | 2 years ago | Sean Moriarty
    java.io.IOException: Exception during sslSocket.startHandshake: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target; targetException=java.lang.IllegalArgumentException: Error opening socket: java.io.IOException: Exception during sslSocket.startHandshake: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target]
  3. 0

    I have tried to deploy an ear application to remote websphere but i am not able to ping the server within plugin configuration dialog. I have successfully deployed on a local server. This is what I did in order to configure remote server : 1. Copy DummyClientKeyFile.jks and DummyClientTrustFile.jks from remote server to jenkins server and configured those files within plugin dialog. 2. Import remote server certificates by using InstallCert program mentioned in plugin documentation by using hostname 9043 as parmeter. hostname is the remote server address and 9043 soap port of admin console 3. copying jssecacerts which contains both certificates from step 2. into JRE/lib/security where JRE is the java runtime environment jenkins is runnging under 4. restart jenkins server I am not able to ping the server always get a ssl exception : Any help will be appreciated Connection failed: com.ibm.websphere.management.exception.ConnectorException: ADMC0016E: The system cannot create a SOAP connector to connect to host XXXXXXXXXXXXXXXXXX at port 8879. at com.ibm.websphere.management.AdminClientFactory.createAdminClientPrivileged(AdminClientFactory.java:635) at com.ibm.websphere.management.AdminClientFactory.access$000(AdminClientFactory.java:127) at com.ibm.websphere.management.AdminClientFactory$1.run(AdminClientFactory.java:210) at com.ibm.ws.security.util.AccessController.doPrivileged(AccessController.java:63) at com.ibm.websphere.management.AdminClientFactory.createAdminClient(AdminClientFactory.java:206) at org.jenkinsci.plugins.websphere.services.deployment.WebSphereDeploymentService.connect(WebSphereDeploymentService.java:234) at org.jenkinsci.plugins.websphere_deployer.WebSphereDeployerPlugin$DescriptorImpl.doTestConnection(WebSphereDeployerPlugin.java:334) at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) at sun.reflect.NativeMethodAccessorImpl.invoke(Unknown Source) at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source) at java.lang.reflect.Method.invoke(Unknown Source) at org.kohsuke.stapler.Function$InstanceFunction.invoke(Function.java:298) at org.kohsuke.stapler.Function.bindAndInvoke(Function.java:161) at org.kohsuke.stapler.Function.bindAndInvokeAndServeResponse(Function.java:96) at org.kohsuke.stapler.MetaClass$1.doDispatch(MetaClass.java:121) at org.kohsuke.stapler.NameBasedDispatcher.dispatch(NameBasedDispatcher.java:53) at org.kohsuke.stapler.Stapler.tryInvoke(Stapler.java:746) at org.kohsuke.stapler.Stapler.invoke(Stapler.java:876) at org.kohsuke.stapler.MetaClass$6.doDispatch(MetaClass.java:249) at org.kohsuke.stapler.NameBasedDispatcher.dispatch(NameBasedDispatcher.java:53) at org.kohsuke.stapler.Stapler.tryInvoke(Stapler.java:746) at org.kohsuke.stapler.Stapler.invoke(Stapler.java:876) at org.kohsuke.stapler.MetaClass$6.doDispatch(MetaClass.java:249) at org.kohsuke.stapler.NameBasedDispatcher.dispatch(NameBasedDispatcher.java:53) at org.kohsuke.stapler.Stapler.tryInvoke(Stapler.java:746) at org.kohsuke.stapler.Stapler.invoke(Stapler.java:876) at org.kohsuke.stapler.MetaClass$6.doDispatch(MetaClass.java:249) at org.kohsuke.stapler.NameBasedDispatcher.dispatch(NameBasedDispatcher.java:53) at org.kohsuke.stapler.Stapler.tryInvoke(Stapler.java:746) at org.kohsuke.stapler.Stapler.invoke(Stapler.java:876) at org.kohsuke.stapler.Stapler.invoke(Stapler.java:649) at org.kohsuke.stapler.Stapler.service(Stapler.java:238) at javax.servlet.http.HttpServlet.service(HttpServlet.java:848) at org.eclipse.jetty.servlet.ServletHolder.handle(ServletHolder.java:686) at org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1494) at hudson.util.PluginServletFilter$1.doFilter(PluginServletFilter.java:123) at hudson.util.PluginServletFilter.doFilter(PluginServletFilter.java:114) at org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1482) at hudson.security.csrf.CrumbFilter.doFilter(CrumbFilter.java:48) at org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1482) at hudson.security.ChainedServletFilter$1.doFilter(ChainedServletFilter.java:84) at hudson.security.ChainedServletFilter.doFilter(ChainedServletFilter.java:76) at hudson.security.HudsonFilter.doFilter(HudsonFilter.java:164) at org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1482) at org.kohsuke.stapler.compression.CompressionFilter.doFilter(CompressionFilter.java:49) at org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1482) at hudson.util.CharacterEncodingFilter.doFilter(CharacterEncodingFilter.java:81) at org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1482) at org.kohsuke.stapler.DiagnosticThreadNameFilter.doFilter(DiagnosticThreadNameFilter.java:30) at org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1474) at org.eclipse.jetty.servlet.ServletHandler.doHandle(ServletHandler.java:499) at org.eclipse.jetty.server.handler.ScopedHandler.handle(ScopedHandler.java:137) at org.eclipse.jetty.security.SecurityHandler.handle(SecurityHandler.java:533) at org.eclipse.jetty.server.session.SessionHandler.doHandle(SessionHandler.java:231) at org.eclipse.jetty.server.handler.ContextHandler.doHandle(ContextHandler.java:1086) at org.eclipse.jetty.servlet.ServletHandler.doScope(ServletHandler.java:428) at org.eclipse.jetty.server.session.SessionHandler.doScope(SessionHandler.java:193) at org.eclipse.jetty.server.handler.ContextHandler.doScope(ContextHandler.java:1020) at org.eclipse.jetty.server.handler.ScopedHandler.handle(ScopedHandler.java:135) at org.eclipse.jetty.server.handler.HandlerWrapper.handle(HandlerWrapper.java:116) at org.eclipse.jetty.server.Server.handle(Server.java:366) at org.eclipse.jetty.server.AbstractHttpConnection.handleRequest(AbstractHttpConnection.java:489) at org.eclipse.jetty.server.AbstractHttpConnection.content(AbstractHttpConnection.java:960) at org.eclipse.jetty.server.AbstractHttpConnection$RequestHandler.content(AbstractHttpConnection.java:1021) at org.eclipse.jetty.http.HttpParser.parseNext(HttpParser.java:865) at org.eclipse.jetty.http.HttpParser.parseAvailable(HttpParser.java:240) at org.eclipse.jetty.server.AsyncHttpConnection.handle(AsyncHttpConnection.java:82) at org.eclipse.jetty.io.nio.SelectChannelEndPoint.handle(SelectChannelEndPoint.java:668) at org.eclipse.jetty.io.nio.SelectChannelEndPoint$1.run(SelectChannelEndPoint.java:52) at winstone.BoundedExecutorService$1.run(BoundedExecutorService.java:77) at java.util.concurrent.ThreadPoolExecutor.runWorker(Unknown Source) at java.util.concurrent.ThreadPoolExecutor$Worker.run(Unknown Source) at java.lang.Thread.run(Unknown Source) Caused by: java.lang.reflect.InvocationTargetException at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method) at sun.reflect.NativeConstructorAccessorImpl.newInstance(Unknown Source) at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(Unknown Source) at java.lang.reflect.Constructor.newInstance(Unknown Source) at com.ibm.websphere.management.AdminClientFactory.createAdminClientPrivileged(AdminClientFactory.java:457) ... 72 more Caused by: com.ibm.websphere.management.exception.ConnectorNotAvailableException: [SOAPException: faultCode=SOAP-ENV:Client; msg=Error opening socket: java.io.IOException: Exception during sslSocket.startHandshake: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target; targetException=java.lang.IllegalArgumentException: Error opening socket: java.io.IOException: Exception during sslSocket.startHandshake: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target] at com.ibm.ws.management.connector.soap.SOAPConnectorClient.reconnect(SOAPConnectorClient.java:429) at com.ibm.ws.management.connector.soap.SOAPConnectorClient.<init>(SOAPConnectorClient.java:228) ... 77 more Caused by: [SOAPException: faultCode=SOAP-ENV:Client; msg=Error opening socket: java.io.IOException: Exception during sslSocket.startHandshake: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target; targetException=java.lang.IllegalArgumentException: Error opening socket: java.io.IOException: Exception during sslSocket.startHandshake: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target] at org.apache.soap.transport.http.SOAPHTTPConnection.send(SOAPHTTPConnection.java:475) at org.apache.soap.rpc.Call.WASinvoke(Call.java:487) at com.ibm.ws.management.connector.soap.SOAPConnectorClient$4.run(SOAPConnectorClient.java:387) at com.ibm.ws.security.util.AccessController.doPrivileged(AccessController.java:118) at com.ibm.ws.management.connector.soap.SOAPConnectorClient.reconnect(SOAPConnectorClient.java:372) ... 78 more

    Jenkins JIRA | 2 years ago | Marco Musolf
    java.io.IOException: Exception during sslSocket.startHandshake: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target; targetException=java.lang.IllegalArgumentException: Error opening socket: java.io.IOException: Exception during sslSocket.startHandshake: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target]
  4. Speed up your debug routine!

    Automated exception search integrated into your IDE

  5. 0

    Any help would be greatly appreciated. I am getting the following error where I can't connect to the remote port on SOAP port 8879. This appears to be certificate issues. I created extracted the certificates for 9043 and 8879. I used I have many combinations of creating a separate jssecerts, Batch file E:\AppDevelopment\jdk\IBM\jdk60\bin\java.exe InstallCert server:9043 pause E:\AppDevelopment\jdk\IBM\jdk60\bin\java.exe InstallCert server:8879 pause echo LIST Trust store certs to get the alias names call "E:\Program Files (x86)\Jenkins\jre\bin\keytool" -list -storepass WebAS -v -keystore "E:\AppDevelopment\Process\WAS_Deploy\dia-dev1\DummyClientTrustFile.jks" > DummyClientTrustFilecertList.txt echo list of alias: "thawte personal freemail ca" "new websphere dummy client" "new websphere dummy server" "default_signer" "thawte personal basic ca" "rsa secure server certification authority" "thawte premium server ca" echo "verisign class 1 public primary certification authority" "thawte server ca" pause echo EXPORT CERTS call "E:\Program Files (x86)\Jenkins\jre\bin\keytool" -export -storepass WebAS -alias "thawte personal freemail ca" -keystore E:\AppDevelopment\Process\WAS_Deploy\dia-dev1\DummyClientTrustFile.jks -file thawtepersonalfreemailca.crt call "E:\Program Files (x86)\Jenkins\jre\bin\keytool" -export -storepass WebAS -alias "new websphere dummy client" -keystore E:\AppDevelopment\Process\WAS_Deploy\dia-dev1\DummyClientTrustFile.jks -file newwebspheredummyclient.crt call "E:\Program Files (x86)\Jenkins\jre\bin\keytool" -export -storepass WebAS -alias "new websphere dummy server" -keystore E:\AppDevelopment\Process\WAS_Deploy\dia-dev1\DummyClientTrustFile.jks -file newwebspheredummyserver.crt call "E:\Program Files (x86)\Jenkins\jre\bin\keytool" -export -storepass WebAS -alias "default_signer" -keystore E:\AppDevelopment\Process\WAS_Deploy\dia-dev1\DummyClientTrustFile.jks -file default_signer.crt call "E:\Program Files (x86)\Jenkins\jre\bin\keytool" -export -storepass WebAS -alias "thawte personal basic ca" -keystore E:\AppDevelopment\Process\WAS_Deploy\dia-dev1\DummyClientTrustFile.jks -file thawtepersonalbasicca.crt call "E:\Program Files (x86)\Jenkins\jre\bin\keytool" -export -storepass WebAS -alias "rsa secure server certification authority" -keystore E:\AppDevelopment\Process\WAS_Deploy\dia-dev1\DummyClientTrustFile.jks -file rsasecureservercertificationauthority.crt call "E:\Program Files (x86)\Jenkins\jre\bin\keytool" -export -storepass WebAS -alias "thawte premium server ca" -keystore E:\AppDevelopment\Process\WAS_Deploy\dia-dev1\DummyClientTrustFile.jks -file thawtepremiumserverca.crt call "E:\Program Files (x86)\Jenkins\jre\bin\keytool" -export -storepass WebAS -alias "verisign class 1 public primary certification authority" -keystore E:\AppDevelopment\Process\WAS_Deploy\dia-dev1\DummyClientTrustFile.jks -file verisignclass1publicprimarycertificationauthority.crt call "E:\Program Files (x86)\Jenkins\jre\bin\keytool" -export -storepass WebAS -alias "thawte server ca" -keystore E:\AppDevelopment\Process\WAS_Deploy\dia-dev1\DummyClientTrustFile.jks -file thawteserverca.crt echo IMPORT CERTS call "E:\Program Files (x86)\Jenkins\jre\bin\keytool" -import -storepass changeit -trustcacerts -alias "thawte personal freemail ca" -file E:\AppDevelopment\Process\WAS_Deploy\thawtepersonalfreemailca.crt -keystore E:\AppDevelopment\Process\WAS_Deploy\cacerts call "E:\Program Files (x86)\Jenkins\jre\bin\keytool" -import -storepass changeit -trustcacerts -alias "new websphere dummy client" -file E:\AppDevelopment\Process\WAS_Deploy\newwebspheredummyclient.crt -keystore E:\AppDevelopment\Process\WAS_Deploy\cacerts call "E:\Program Files (x86)\Jenkins\jre\bin\keytool" -import -storepass changeit -trustcacerts -alias "new websphere dummy server" -file E:\AppDevelopment\Process\WAS_Deploy\newwebspheredummyserver.crt -keystore E:\AppDevelopment\Process\WAS_Deploy\cacerts call "E:\Program Files (x86)\Jenkins\jre\bin\keytool" -import -storepass changeit -trustcacerts -alias "default_signer" -file E:\AppDevelopment\Process\WAS_Deploy\default_signer.crt -keystore E:\AppDevelopment\Process\WAS_Deploy\cacerts call "E:\Program Files (x86)\Jenkins\jre\bin\keytool" -import -storepass changeit -trustcacerts -alias "thawte personal basic ca" -file E:\AppDevelopment\Process\WAS_Deploy\thawtepersonalbasicca.crt -keystore E:\AppDevelopment\Process\WAS_Deploy\cacerts call "E:\Program Files (x86)\Jenkins\jre\bin\keytool" -import -storepass changeit -trustcacerts -alias "rsa secure server certification authority" -file E:\AppDevelopment\Process\WAS_Deploy\rsasecureservercertificationauthority.crt -keystore E:\AppDevelopment\Process\WAS_Deploy\cacerts call "E:\Program Files (x86)\Jenkins\jre\bin\keytool" -import -storepass changeit -trustcacerts -alias "thawte premium server ca" -file E:\AppDevelopment\Process\WAS_Deploy\thawtepremiumserverca.crt -keystore E:\AppDevelopment\Process\WAS_Deploy\cacerts call "E:\Program Files (x86)\Jenkins\jre\bin\keytool" -import -storepass changeit -trustcacerts -alias "verisign class 1 public primary certification authority" -file E:\AppDevelopment\Process\WAS_Deploy\verisignclass1publicprimarycertificationauthority.crt -keystore E:\AppDevelopment\Process\WAS_Deploy\cacerts call "E:\Program Files (x86)\Jenkins\jre\bin\keytool" -import -storepass changeit -trustcacerts -alias "thawte server ca" -file E:\AppDevelopment\Process\WAS_Deploy\thawteserverca.crt -keystore E:\AppDevelopment\Process\WAS_Deploy\cacerts echo LIST CERTS call "E:\Program Files (x86)\Jenkins\jre\bin\keytool" -list -storepass changeit -v -keystore "E:\AppDevelopment\Process\WAS_Deploy\cacerts" > newCacerts I updated jenkins.xml to include some runtime helpers <arguments>-Xrs -Xmx256m -Djavax.net.debug=ssl -Djava.util.logging.loglevel=ALL -Dcom.ibm.SOAP.ConfigURL=file:"E:/Program Files (x86)/Jenkins/Websphere/soap.client.props" -Dcom.ibm.SSL.ConfigURL=file:"E:/Program Files (x86)/Jenkins/Websphere/ssl.client.props" -Dhudson.lifecycle=hudson.lifecycle.WindowsServiceLifecycle -jar "%BASE%\jenkins.war" --httpPort=8080</arguments> The test connection and the build job fail with the same message.. Ironically I was able to get it to go further and connect, but when I came in the next morning it wasn't working again. Connecting... Connecting to IBM WebSphere Application Server... Error deploying to IBM WebSphere Application Server: com.ibm.websphere.management.exception.ConnectorException: ADMC0016E: The system cannot create a SOAP connector to connect to host DIA-DEV1.jih01.johnson.ca at port 8879. at com.ibm.websphere.management.AdminClientFactory.createAdminClientPrivileged(AdminClientFactory.java:635) at com.ibm.websphere.management.AdminClientFactory.access$000(AdminClientFactory.java:127) at com.ibm.websphere.management.AdminClientFactory$1.run(AdminClientFactory.java:210) at com.ibm.ws.security.util.AccessController.doPrivileged(AccessController.java:63) at com.ibm.websphere.management.AdminClientFactory.createAdminClient(AdminClientFactory.java:206) at org.jenkinsci.plugins.websphere.services.deployment.WebSphereDeploymentService.connect(WebSphereDeploymentService.java:322) at org.jenkinsci.plugins.websphere_deployer.WebSphereDeployerPlugin.connect(WebSphereDeployerPlugin.java:276) at org.jenkinsci.plugins.websphere_deployer.WebSphereDeployerPlugin.perform(WebSphereDeployerPlugin.java:168) at hudson.tasks.BuildStepMonitor$3.perform(BuildStepMonitor.java:45) at hudson.model.AbstractBuild$AbstractBuildExecution.perform(AbstractBuild.java:770) at hudson.model.AbstractBuild$AbstractBuildExecution.performAllBuildSteps(AbstractBuild.java:734) at hudson.model.Build$BuildExecution.post2(Build.java:183) at hudson.model.AbstractBuild$AbstractBuildExecution.post(AbstractBuild.java:683) at hudson.model.Run.execute(Run.java:1784) at hudson.model.FreeStyleBuild.run(FreeStyleBuild.java:43) at hudson.model.ResourceController.execute(ResourceController.java:89) at hudson.model.Executor.run(Executor.java:240) Caused by: java.lang.reflect.InvocationTargetException at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method) at sun.reflect.NativeConstructorAccessorImpl.newInstance(Unknown Source) at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(Unknown Source) at java.lang.reflect.Constructor.newInstance(Unknown Source) at com.ibm.websphere.management.AdminClientFactory.createAdminClientPrivileged(AdminClientFactory.java:457) ... 16 more Caused by: com.ibm.websphere.management.exception.ConnectorNotAvailableException: [SOAPException: faultCode=SOAP-ENV:Client; msg=Error opening socket: java.io.IOException: Exception during sslSocket.startHandshake: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target; targetException=java.lang.IllegalArgumentException: Error opening socket: java.io.IOException: Exception during sslSocket.startHandshake: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target] at com.ibm.ws.management.connector.soap.SOAPConnectorClient.reconnect(SOAPConnectorClient.java:415) at com.ibm.ws.management.connector.soap.SOAPConnectorClient.<init>(SOAPConnectorClient.java:227) ... 21 more Caused by: [SOAPException: faultCode=SOAP-ENV:Client; msg=Error opening socket: java.io.IOException: Exception during sslSocket.startHandshake: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target; targetException=java.lang.IllegalArgumentException: Error opening socket: java.io.IOException: Exception during sslSocket.startHandshake: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target] at org.apache.soap.transport.http.SOAPHTTPConnection.send(SOAPHTTPConnection.java:475) at org.apache.soap.rpc.Call.WASinvoke(Call.java:487) at com.ibm.ws.management.connector.soap.SOAPConnectorClient$4.run(SOAPConnectorClient.java:387) at com.ibm.ws.security.util.AccessController.doPrivileged(AccessController.java:118) at com.ibm.ws.management.connector.soap.SOAPConnectorClient.reconnect(SOAPConnectorClient.java:372) ... 22 more Build step 'Deploy To IBM WebSphere Application Server' changed build result to FAILURE

    Jenkins JIRA | 2 years ago | Sean Moriarty
    java.io.IOException: Exception during sslSocket.startHandshake: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target; targetException=java.lang.IllegalArgumentException: Error opening socket: java.io.IOException: Exception during sslSocket.startHandshake: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target]
  6. 0

    WSAdmin Error Creating SOAP Connection

    Stack Overflow | 2 years ago | David Sassoon
    java.io.IOException: Exception during sslSocket.startHandshake: Read timed out; targetException=java.lang.IllegalArgumentException: Error opening socket: java.io.IOException: Exception during sslSocket.startHandshake: Read timed out]

    2 unregistered visitors
    Not finding the right solution?
    Take a tour to get the most out of Samebug.

    Tired of useless tips?

    Automated exception search integrated into your IDE

    Root Cause Analysis

    1. java.io.IOException

      Exception during sslSocket.startHandshake: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target; targetException=java.lang.IllegalArgumentException: Error opening socket: java.io.IOException: Exception during sslSocket.startHandshake: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target]

      at org.apache.soap.transport.http.SOAPHTTPConnection.send()
    2. org.apache.soap
      Call.WASinvoke
      1. org.apache.soap.transport.http.SOAPHTTPConnection.send(SOAPHTTPConnection.java:475)
      2. org.apache.soap.rpc.Call.WASinvoke(Call.java:487)
      2 frames
    3. com.ibm.ws
      SOAPConnectorClient$4.run
      1. com.ibm.ws.management.connector.soap.SOAPConnectorClient$4.run(SOAPConnectorClient.java:387)
      1 frame
    4. WebSphere
      AccessController.doPrivileged
      1. com.ibm.ws.security.util.AccessController.doPrivileged(AccessController.java:118)
      1 frame
    5. com.ibm.ws
      SOAPConnectorClient.reconnect
      1. com.ibm.ws.management.connector.soap.SOAPConnectorClient.reconnect(SOAPConnectorClient.java:372)
      1 frame