SSLHandShake Exception: PKIX Path Building failed - SmartEdit

[Former Member]

Hi all,

I have SAP Commerce 1811 demo environment running (installed with the b2b_acc recipe).

The environment with the demo content in Backoffice and SmartEdit ist running smooth and without any problems.
Now I'm trying to import a ssl certificate, to get rid of the SSL Warning. In a previous 1808 installation, I've just placed our keystore file in \hybris\bin\platform\tomcat\lib and adapted the entries in:

/bin/platform/project.properties

tomcat.ssl.keystore.alias=our_alias
tomcat.ssl.keystore.path=${catalina.home}/lib/ourkeystorefile
tomcat.ssl.keystore.password=ourpassword

and in \hybris\bin\platform\tomcat\conf\server.xml

keyAlias="our_alias"
keystoreFile="${catalina.home}/lib/ourkeystorefile"
keystorePass="ourpassword"

After restarting the plattform, the backoffice is running with our SSL certificate, without any problems. But if I open the Smart Edit part, the system throws an exception.

I tried several workarounds, like importing our certificate file to the standard keystore file. But nothing works.

Does someone has an answer for this problem?

Thanks is advance!

Cheers
Ramin

INFO [hybrisHTTP23] [XX.XX.XXX.XXX] [RestHandlerExceptionResolver] Translating exception [org.springframework.web.client.ResourceAccessException]: I/O error on GET request for "https://127.0.0.1:443/smarteditwebservices/v1/configurations": sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target; nested exception is javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target ERROR [hybrisHTTP23] [[XX.XX.XXX.XXX] [RestHandlerExceptionResolver] org.springframework.web.client.ResourceAccessException: I/O error on GET request for "https://127.0.0.1:443/smarteditwebservices/v1/configurations": sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target; nested exception is javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target at org.springframework.web.client.RestTemplate.doExecute(RestTemplate.java:674) at org.springframework.web.client.RestTemplate.execute(RestTemplate.java:636) at org.springframework.web.client.RestTemplate.exchange(RestTemplate.java:557) at org.springframework.integration.http.outbound.HttpRequestExecutingMessageHandler.handleRequestMessage(HttpRequestExecutingMessageHandler.java:399) at org.springframework.integration.handler.AbstractReplyProducingMessageHandler.handleMessageInternal(AbstractReplyProducingMessageHandler.java:109) at org.springframework.integration.handler.AbstractMessageHandler.handleMessage(AbstractMessageHandler.java:127) at org.springframework.integration.dispatcher.AbstractDispatcher.tryOptimizedDispatch(AbstractDispatcher.java:116) at org.springframework.integration.dispatcher.UnicastingDispatcher.doDispatch(UnicastingDispatcher.java:148) at org.springframework.integration.dispatcher.UnicastingDispatcher.dispatch(UnicastingDispatcher.java:121) at org.springframework.integration.channel.AbstractSubscribableChannel.doSend(AbstractSubscribableChannel.java:89) at org.springframework.integration.channel.AbstractMessageChannel.send(AbstractMessageChannel.java:425) at org.springframework.integration.channel.AbstractMessageChannel.send(AbstractMessageChannel.java:375) at org.springframework.messaging.core.GenericMessagingTemplate.doSend(GenericMessagingTemplate.java:115) at org.springframework.messaging.core.GenericMessagingTemplate.doSendAndReceive(GenericMessagingTemplate.java:150) at org.springframework.messaging.core.GenericMessagingTemplate.doSendAndReceive(GenericMessagingTemplate.java:45) at org.springframework.messaging.core.AbstractMessagingTemplate.sendAndReceive(AbstractMessagingTemplate.java:42) at org.springframework.integration.core.MessagingTemplate.sendAndReceive(MessagingTemplate.java:97) at org.springframework.integration.core.MessagingTemplate.sendAndReceive(MessagingTemplate.java:38) at org.springframework.messaging.core.AbstractMessagingTemplate.convertSendAndReceive(AbstractMessagingTemplate.java:79) at org.springframework.messaging.core.AbstractMessagingTemplate.convertSendAndReceive(AbstractMessagingTemplate.java:70) at org.springframework.integration.gateway.MessagingGatewaySupport.doSendAndReceive(MessagingGatewaySupport.java:449) at org.springframework.integration.gateway.MessagingGatewaySupport.sendAndReceive(MessagingGatewaySupport.java:422) at org.springframework.integration.gateway.GatewayProxyFactoryBean.invokeGatewayMethod(GatewayProxyFactoryBean.java:483) at org.springframework.integration.gateway.GatewayProxyFactoryBean.doInvoke(GatewayProxyFactoryBean.java:433) at org.springframework.integration.gateway.GatewayProxyFactoryBean.invoke(GatewayProxyFactoryBean.java:424) at org.springframework.integration.gateway.GatewayCompletableFutureProxyFactoryBean.invoke(GatewayCompletableFutureProxyFactoryBean.java:65) at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:179) at org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:213) at com.sun.proxy.$Proxy276.loadAll(Unknown Source) at de.hybris.smartedit.controllers.ConfigurationController.getConfiguration(ConfigurationController.java:83) at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62) at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) at java.lang.reflect.Method.invoke(Method.java:498) at org.springframework.web.method.support.InvocableHandlerMethod.doInvoke(InvocableHandlerMethod.java:205) at org.springframework.web.method.support.InvocableHandlerMethod.invokeForRequest(InvocableHandlerMethod.java:133) at org.springframework.web.servlet.mvc.method.annotation.ServletInvocableHandlerMethod.invokeAndHandle(ServletInvocableHandlerMethod.java:97) at org.springframework.web.servlet.mvc.method.annotation.RequestMappingHandlerAdapter.invokeHandlerMethod(RequestMappingHandlerAdapter.java:849) at org.springframework.web.servlet.mvc.method.annotation.RequestMappingHandlerAdapter.handleInternal(RequestMappingHandlerAdapter.java:760).....

[former_member626150]

Hello,

Did you find solution for this?

[StefanKruk]

As I think your SSL Certificate is selfisgned you need to disable ssl validation for smartedit with:

smartedit.ssl.validation.enabled=false

[former_member192125]

Also having this problem. Just moved to 1811 and SmartEdit won't work with our custom generated keystore as it usually does.

[Former Member]

Can't we generate this smartedit/hybris certificate and add it our custom keystore ? Were you able to resolve this issue ?