Home/ Questions/Q 8519271
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-06-11T06:12:12+00:00

I’ve recently found out about Google’s Cloud Messaging for Android and I wanted to

  • 0

I’ve recently found out about Google’s Cloud Messaging for Android and I wanted to integrate my app to use it. I got the Android side of the project working and the app is being correctly registered with the server. The problem is that my server can’t seem to be able to authenticate the GCM servers so it can talk to them. Here’s what I mean:

Currently, my server is a simple Java-based SSL server with a keystore and a truststore. The truststore contains the client’s key (i.e. the app’s key) and vice versa and the client/server can talk to each other over SSL without any problems. The code I am using to send a message to the app is this:

Sender sender = new Sender( "API_KEY" );
Message message = new Message.Builder().addData( "message", description ).build();
Result result = sender.send( message, ID, 1 );

It gives my the following exception:

javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

When I start my server I pass in the name of the trust/keystores and their passwords and load them, so that they can be used to talk to the client. I suspect that the problem is that currently the truststore only contains the client’s key, so the server can ONLY talk to the client and no one else. Is this correct, and if it is, anyone have any ideas how to add the GCM certificate to the truststore or something?

Thanks a lot, any help is much appreciated 🙂

P.S. I tried to just send a message to the client before I load the truststore in the server and the app received it successfully.

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    With Google Cloud Messaging, your server doesn’t talk directly to the client. It goes through the “Cloud” part first. Thus putting the client certificate in your server’s trust manager doesn’t work.

    Instead, your server will have to validate the SSL certificate of Google’s Cloud Messaging servers. Those are backed by Certificate Authorities already in your operating system’s default CA list, so sending a message to the client before adding the trust store will work just fine.

    • 0