Datahub and SAP Commerce 1905 target system publication SSLHandshakeException PKIX

[former_member631673]

Hello,

currently I am migrating from hybris and datahub 6.5 to 1905.

Previously the communication between datahub and hybris was done via http.

With the new version of datahub and hybris the communication will be done by https per default. This is okay and I want to use the secure way (if possible).

I got everything working right now except of the target publication from datahub to hybris.

The following error occurs during the publication:

[ERROR] [c.h.d.p.TargetSystemAvailabilityRetryListener] The target system HybrisCore at https://localhost/datahubadapter is unavailable for target system publication id 1 and pool SAPCUSTOMER_INBOUND_POOL: javax.net.ssl.SSLHandshakeException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target. Caused by: javax.net.ssl.SSLHandshakeException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target.

The steps I did:

• general migration of hybris and datahub
• updated tomcat for datahub from 7 to 9
• imported the datahub.jks from the datahub WAR to the JDK (sapmachine 11) I am using right now and verified that the datahub certificate is available there
• adjusted the urls within the datahub local.properties to use the https version (since previously it was done via http)

What I already tried:

• I tried using the http variant by setting the datahub property datahub.security.https.enabled to false and the hybris property datahubadapter.security.https.enabled to false and changing the urls in the properties to the http version -> I still get the same error regardless of the property value (it seems that the value is not being used during the target publication?)
• it also seems to have something to do with the value of the datahub property targetsystem.hybriscore.url=https://localhost/datahubadapter since the value that is being used here is the value in the error message that I am getting

Does anyone have a hint or a solution for this problem? I am running out of ideas.

Thanks and Regards!

[Former Member]

Hi mgensler123, Did you solve the issue? I have the same issue.

Thanks

[former_member631673]

Update:

The same issue is described here: https://answers.sap.com/questions/12770984/data-hub-publication-error-2.html?childToView=12858115&an...

As commented I tried the solution posted there but I am still facing the issue.

It seems that I am not using/importing the "correct" certificate to the truststore.

Can someone please explain in detail which certificate needs to be added to which truststore in order to get this to work?

Thanks