[jboss-jira] [JBoss JIRA] Commented: (JGRP-1023) S3_PING: certificate exception when run on EC2

[Bela Ban (JIRA)]

    [ https://jira.jboss.org/jira/browse/JGRP-1023?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12480237#action_12480237 ] 

Bela Ban commented on JGRP-1023:
--------------------------------

stack trace:

Caused by: org.jgroups.ChannelException: unable to setup the protocol stack: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderE
xception: unable to find valid certification path to requested target
        at org.jgroups.JChannel.init(JChannel.java:1584)
        at org.jgroups.JChannel.<init>(JChannel.java:248)
        at org.jboss.ha.framework.server.JChannelFactory.createMultiplexerChannel(JChannelFactory.java:265)
        at org.jboss.cache.RPCManagerImpl.getMultiplexerChannel(RPCManagerImpl.java:633)
        ... 90 more
Caused by: javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find vali
d certification path to requested target
        at sun.security.ssl.Alerts.getSSLException(Alerts.java:192)
        at sun.security.ssl.SSLSocketImpl.fatal(SSLSocketImpl.java:1627)
        at sun.security.ssl.Handshaker.fatalSE(Handshaker.java:204)
        at sun.security.ssl.Handshaker.fatalSE(Handshaker.java:198)
        at sun.security.ssl.ClientHandshaker.serverCertificate(ClientHandshaker.java:994)
        at sun.security.ssl.ClientHandshaker.processMessage(ClientHandshaker.java:142)
        at sun.security.ssl.Handshaker.processLoop(Handshaker.java:533)
        at sun.security.ssl.Handshaker.process_record(Handshaker.java:471)
        at sun.security.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:904)
        at sun.security.ssl.SSLSocketImpl.performInitialHandshake(SSLSocketImpl.java:1132)
        at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1159)
        at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1143)
        at sun.net.www.protocol.https.HttpsClient.afterConnect(HttpsClient.java:423)
        at sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.connect(AbstractDelegateHttpsURLConnection.java:185)
        at sun.net.www.protocol.http.HttpURLConnection.getInputStream(HttpURLConnection.java:1005)
        at java.net.HttpURLConnection.getResponseCode(HttpURLConnection.java:391)
        at sun.net.www.protocol.https.HttpsURLConnectionImpl.getResponseCode(HttpsURLConnectionImpl.java:338)
        at org.jgroups.protocols.S3_PING$AWSAuthConnection.checkBucketExists(S3_PING.java:293)
        at org.jgroups.protocols.S3_PING.init(S3_PING.java:71)
        at org.jgroups.stack.Configurator.initProtocolStack(Configurator.java:72)
        at org.jgroups.stack.ProtocolStack.setup(ProtocolStack.java:307)
        at org.jgroups.JChannel.init(JChannel.java:1581)
        ... 93 more
Caused by: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested tar
get
        at sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:302)
        at sun.security.validator.PKIXValidator.engineValidate(PKIXValidator.java:205)
        at sun.security.validator.Validator.validate(Validator.java:235)
        at sun.security.ssl.X509TrustManagerImpl.validate(X509TrustManagerImpl.java:147)
        at sun.security.ssl.X509TrustManagerImpl.checkServerTrusted(X509TrustManagerImpl.java:230)
        at sun.security.ssl.X509TrustManagerImpl.checkServerTrusted(X509TrustManagerImpl.java:270)
        at sun.security.ssl.ClientHandshaker.serverCertificate(ClientHandshaker.java:973)
        ... 110 more
Caused by: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
        at sun.security.provider.certpath.SunCertPathBuilder.engineBuild(SunCertPathBuilder.java:191)
        at java.security.cert.CertPathBuilder.build(CertPathBuilder.java:255)
        at sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:297)
        ... 116 more


> S3_PING: certificate exception when run on EC2
> ----------------------------------------------
>
>                 Key: JGRP-1023
>                 URL: https://jira.jboss.org/jira/browse/JGRP-1023
>             Project: JGroups
>          Issue Type: Bug
>            Reporter: Bela Ban
>            Assignee: Bela Ban
>             Fix For: 2.9
>
>
> S3_PING does not work on EC2. It works perfectly when run on a local box

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira