Home/ Questions/Q 6727817
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-05-26T10:05:43+00:00

I followed the instructions given on this page to import the server certificate. When

  • 0

I followed the instructions given on this page to import the server certificate.

When I use keytool -list, I can see that the certificate is actually in the keystore. If I try to import the .crt file, keytool warns me that the keystore already contains the certificate.

Then I updated wrapper.conf with the two ssl options. I can see them on the command line of the Nexus process after a restart.

But when I try to add a proxy repo for the remote server, I always get sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

What did I miss?

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    You have to import the custom CA certificate into the ‘trustStore’ and not into the ‘keyStore’.

    The procedure for creating a ‘trustStore’ is the same as the one for the ‘keyStore’.
    Once you have your *.jks file then link it using the following system properties:

    javax.net.ssl.trustStore=<file>
javax.net.ssl.trustStorePassword=<password>
    • 0