Java Spring tool suite- SunCertPathBuilderException: unable to find valid certification path to requested target

Spring tool suite- SunCertPathBuilderException: unable to find valid certification path to requested target

提问by shivam gupta

I am working on STS and while creating a new spring-boot project, it shows following error:

I am working on STS and while creating a new spring-boot project, it shows following error:

 SunCertPathBuilderException: unable to find valid certification path to requested target

since it access https://start.spring.ioas a service URL.

since it access https://start.spring.ioas a service URL.

I am working in a corporate network and they have their own certificates and security rules. I looked into web but could not find any clear solution for STS. How should I add certification path in STS for given URL. Any help is appreciated.

I am working in a corporate network and they have their own certificates and security rules. I looked into web but could not find any clear solution for STS. How should I add certification path in STS for given URL. Any help is appreciated.

采纳答案by Zack Dawood

Try httpinstead of httpsin the URL http://start.spring.io

Try httpinstead of httpsin the URL http://start.spring.io

The following error will be resolved "SunCertPathBuilderException: unable to find valid certification path to requested target"

The following error will be resolved "SunCertPathBuilderException: unable to find valid certification path to requested target"

回答by Strelok

The simplest solution is to install your corporate certificate into the cacertskeystore of the JDK.

The simplest solution is to install your corporate certificate into the cacertskeystore of the JDK.

<JAVA_HOME>/bin/keytool -import -alias CorpProxy -keystore <JAVA_HOME>/jre/lib/security/cacerts -file your_corp_cert.crt

You will be prompted for the keystore password which is changeitby default.

You will be prompted for the keystore password which is changeitby default.

回答by sundar.sat84

I encountered the same problem and tried this: Window -> Preferences -> Network Connections Change mode to Manual

I encountered the same problem and tried this: Window -> Preferences -> Network Connections Change mode to Manual

It works fine now.

It works fine now.

回答by PruthvirajSinh Solanki

In the case if none of above work, try below steps. It works fine for me as I was also working under corporate network, had same issue.

In the case if none of above work, try below steps. It works fine for me as I was also working under corporate network, had same issue.

1. Close STS tool if open.
2. Locate STS.ini file (mostly where you have installed STS tool and have STS.exe)

3. Edit STS.ini. Add following two line at the bottom (Use your JDK location, below one is just a sample)

   -Djavax.net.ssl.trustStore=C:\Program Files\Java\jdk1.8.0_20\jre\lib\security\cacerts

   -Djava.net.ssl.trustStorePassword=changeit

4. Save STS.ini and restart the STS.exe.

1. Close STS tool if open.
2. Locate STS.ini file (mostly where you have installed STS tool and have STS.exe)

3. Edit STS.ini. Add following two line at the bottom (Use your JDK location, below one is just a sample)

   -Djavax.net.ssl.trustStore=C:\Program Files\Java\jdk1.8.0_20\jre\lib\security\cacerts

   -Djava.net.ssl.trustStorePassword=changeit

4. Save STS.ini and restart the STS.exe.

It works in my case. Thank you.

It works in my case. Thank you.

回答by blpvivek

Adding below to eclipse.ini

Adding below to eclipse.ini

-Djavax.net.ssl.trustStore=C:\Program Files\Java\jdk1.8.0_20\jre\lib\security\cacerts
-Djava.net.ssl.trustStorePassword=changeit

worked for me.

worked for me.

回答by user2125853

It would seem like the http now gets redirected to https. So changing https to http may not work. I am barely familiar with digital certificates. However, I have simply listed what I had to do to get it to work for me. This is perhaps what @Strelok has suggested.

It would seem like the http now gets redirected to https. So changing https to http may not work. I am barely familiar with digital certificates. However, I have simply listed what I had to do to get it to work for me. This is perhaps what @Strelok has suggested.

I am on Windows 10 and JDK 1.8.0_144 64bit. I am also behind a corporate proxy. I did the following to get it to work for me. If you are in a similar situation it may work for you.

I am on Windows 10 and JDK 1.8.0_144 64bit. I am also behind a corporate proxy. I did the following to get it to work for me. If you are in a similar situation it may work for you.

Export the corporate certificate (There may be other easier ways of doing this)

Export the corporate certificate (There may be other easier ways of doing this)

1. On Chrome, I went to https://start.spring.io
2. On the location bar clicked on the 'Lock' symbol next to https.
3. Selected 'Certificate(Valid)' on the ensuing pop-up.
4. On the resulting dialog box, clicked on the 'Certificate Path' tab, from under certificate path tree selected the root node, and then clicked on 'View Certificate'
5. On the resulting dialog box, clicked on the 'Details' tab and then clicked on 'Copy to File'
6. This brings up the 'Export wizard', clicked on 'Next'.
7. Left the certificate format to default 'DER encoded..', clicked on 'Next'.
8. Provided file name (.cer extension) for the certificate.
9. Clicked Finish.

1. On Chrome, I went to https://start.spring.io
2. On the location bar clicked on the 'Lock' symbol next to https.
3. Selected 'Certificate(Valid)' on the ensuing pop-up.
4. On the resulting dialog box, clicked on the 'Certificate Path' tab, from under certificate path tree selected the root node, and then clicked on 'View Certificate'
5. On the resulting dialog box, clicked on the 'Details' tab and then clicked on 'Copy to File'
6. This brings up the 'Export wizard', clicked on 'Next'.
7. Left the certificate format to default 'DER encoded..', clicked on 'Next'.
8. Provided file name (.cer extension) for the certificate.
9. Clicked Finish.

The above steps exported a certificate to a file that I imported into truststore (cacerts).

The above steps exported a certificate to a file that I imported into truststore (cacerts).

To import

To import

• Opened a 'Command' prompt as Administrator to import the certificate
• Went to bin directory of Java installation (this step is not needed if jre/bin is in your path)

• Ran the following:

  C:\Program Files\Java\jre1.8.0_144\bin>keytool -importcert -alias your-alias -keystore "C:\Program Files\Java\jre1.8.0_144\lib\security\cacerts" -storepass changeit -file C:\certificate-file-location\saved-certificate-file.cer

• Opened a 'Command' prompt as Administrator to import the certificate
• Went to bin directory of Java installation (this step is not needed if jre/bin is in your path)

• Ran the following:

  C:\Program Files\Java\jre1.8.0_144\bin>keytool -importcert -alias your-alias -keystore "C:\Program Files\Java\jre1.8.0_144\lib\security\cacerts" -storepass changeit -file C:\certificate-file-location\saved-certificate-file.cer

(Substitute your java location, certificate file location and certificate file name as appropriate. The 'storepass' should be 'changeit'.)

(Substitute your java location, certificate file location and certificate file name as appropriate. The 'storepass' should be 'changeit'.)

Restarted STS

Restarted STS

回答by harsha kumar Reddy

The best thing to do in this case is open https://start.spring.io/in browser and

The best thing to do in this case is open https://start.spring.io/in browser and

and fill in your project name in Artifact field and your project base package in Group field click on

and fill in your project name in Artifact field and your project base package in Group field click on

Generate project button

Generate project button

that will download your-project-name.zip file into your downloads folder . now extract this file into your sts workspace or anywhere you like .

that will download your-project-name.zip file into your downloads folder . now extract this file into your sts workspace or anywhere you like .

now import the project in STS as Existing maven project

now import the project in STS as Existing maven project

You are done

You are done

回答by an0nh4x0r

I was able to resolve the issue following two steps.

I was able to resolve the issue following two steps.

1. Firstly I imported certificate present on https://start.spring.iointo the jdk cacerts.

2. Atlast I added the path of TrustStore and trustStore password in SpringToolSuite4.ini file.

   -Djavax.net.ssl.trustStore=C:\Program Files\Java\jdk1.8.0_201\jre\lib\security\cacerts

   -Djava.net.ssl.trustStorePassword=changeit

1. Firstly I imported certificate present on https://start.spring.iointo the jdk cacerts.

2. Atlast I added the path of TrustStore and trustStore password in SpringToolSuite4.ini file.

   -Djavax.net.ssl.trustStore=C:\Program Files\Java\jdk1.8.0_201\jre\lib\security\cacerts

   -Djava.net.ssl.trustStorePassword=changeit