java connect https

When I use java to connect HTTPs, it got exception:

javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed:
sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target.
    

 The reason is certificate is not recognized, so it's not accepted by java client.

 

So we need add this certificate to our local store.

 

JDK's default certificate store located at $JAVA_HOME/jre/lib/security/cacerts, the default password is 'changeit'. We can use following command to view it:

keytool -list -keystore$JAVA_HOME/jre/lib/security/cacerts 

 

To import the certificate for the HTTPs, first use Browser (Firefox) view the page, and export the certificate to local disk. Then use following command import the certificate to JDK's store:

keytool -import -alias keyalias -keystore $JAVA_HOME/jre/lib/security/cacerts -file mycert.cer