Hello;

For sure, the certificate for the target server is not valid.
We had this issue also, because in the certificate the alias was missing.
Check your certificate, and I guess you will have to generate it again,
import it in the truststore.

Regards

Le lun. 27 nov. 2023 à 10:28, <e-soci...@gmx.fr> a écrit :

>
> Hello all,
>
> Since I've upgraded the nifi version from 1.18 to 1.23.2 - Java Version
> 11.0.17
> I got the error concerning the invokeHTTP (GET
> https://api-eu.reputation.com/v3/ ..) even if I setup SSL Context or not
>
> Do you have informations about what has changed between the 2 nifi version
> ?
>
> In 1.18.0 this url  (GET https://api-eu.reputation.com/v3/ ..) working
> with no issue
>
> Thanks for Helps
>
> Minh
>
> 2023-11-27 09:21:09,710 ERROR [Timer-Driven Process Thread-6]
> o.a.nifi.processors.standard.InvokeHTTP
> InvokeHTTP[id=da03ad8a-5a88-344c-a9b6-b88efb2e871b] Request Processing
> failed:
> StandardFlowFileRecord[uuid=2d75e8bc-1d2c-4d7d-938f-23c10bd5128d,claim=StandardContentClaim
> [resourceClaim=StandardResourceClaim[id=1701076362668-643397,
> container=repo0, section=325], offset=9405,
> length=165],offset=120,name=b8de3009-45e3-48e7-855d-8b252275f259,size=45]
> javax.net.ssl.SSLHandshakeException: PKIX path building failed:
> sun.security.provider.certpath.SunCertPathBuilderException: unable to find
> valid certification path to requested target
>         at
> java.base/sun.security.ssl.Alert.createSSLException(Alert.java:131)
>         at
> java.base/sun.security.ssl.TransportContext.fatal(TransportContext.java:369)
>         at
> java.base/sun.security.ssl.TransportContext.fatal(TransportContext.java:312)
>         at
> java.base/sun.security.ssl.TransportContext.fatal(TransportContext.java:307)
>         at
> java.base/sun.security.ssl.CertificateMessage$T12CertificateConsumer.checkServerCerts(CertificateMessage.java:654)
>         at
> java.base/sun.security.ssl.CertificateMessage$T12CertificateConsumer.onCertificate(CertificateMessage.java:473)
>         at
> java.base/sun.security.ssl.CertificateMessage$T12CertificateConsumer.consume(CertificateMessage.java:369)
>         at
> java.base/sun.security.ssl.SSLHandshake.consume(SSLHandshake.java:392)
>         at
> java.base/sun.security.ssl.HandshakeContext.dispatch(HandshakeContext.java:478)
>         at
> java.base/sun.security.ssl.HandshakeContext.dispatch(HandshakeContext.java:456)
>         at
> java.base/sun.security.ssl.TransportContext.dispatch(TransportContext.java:199)
>         at
> java.base/sun.security.ssl.SSLTransport.decode(SSLTransport.java:172)
>         at
> java.base/sun.security.ssl.SSLSocketImpl.decode(SSLSocketImpl.java:1382)
>         at
> java.base/sun.security.ssl.SSLSocketImpl.readHandshakeRecord(SSLSocketImpl.java:1295)
>         at
> java.base/sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:416)
>         at
> java.base/sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:388)
>         at
> okhttp3.internal.connection.RealConnection.connectTls(RealConnection.kt:379)
>         at
> okhttp3.internal.connection.RealConnection.establishProtocol(RealConnection.kt:337)
>         at
> okhttp3.internal.connection.RealConnection.connect(RealConnection.kt:209)
>         at
> okhttp3.internal.connection.ExchangeFinder.findConnection(ExchangeFinder.kt:226)
>         at
> okhttp3.internal.connection.ExchangeFinder.findHealthyConnection(ExchangeFinder.kt:106)
>         at
> okhttp3.internal.connection.ExchangeFinder.find(ExchangeFinder.kt:74)
>         at
> okhttp3.internal.connection.RealCall.initExchange$okhttp(RealCall.kt:255)
>         at
> okhttp3.internal.connection.ConnectInterceptor.intercept(ConnectInterceptor.kt:32)
>         at
> okhttp3.internal.http.RealInterceptorChain.proceed(RealInterceptorChain.kt:109)
>         at
> okhttp3.internal.cache.CacheInterceptor.intercept(CacheInterceptor.kt:95)
>         at
> okhttp3.internal.http.RealInterceptorChain.proceed(RealInterceptorChain.kt:109)
>         at
> okhttp3.internal.http.BridgeInterceptor.intercept(BridgeInterceptor.kt:83)
>         at
> okhttp3.internal.http.RealInterceptorChain.proceed(RealInterceptorChain.kt:109)
>         at
> okhttp3.internal.http.RetryAndFollowUpInterceptor.intercept(RetryAndFollowUpInterceptor.kt:76)
>         at
> okhttp3.internal.http.RealInterceptorChain.proceed(RealInterceptorChain.kt:109)
>         at
> okhttp3.internal.connection.RealCall.getResponseWithInterceptorChain$okhttp(RealCall.kt:201)
>         at okhttp3.internal.connection.RealCall.execute(RealCall.kt:154)
>         at
> org.apache.nifi.processors.standard.InvokeHTTP.onTrigger(InvokeHTTP.java:951)
>         at
> org.apache.nifi.processor.AbstractProcessor.onTrigger(AbstractProcessor.java:27)
>         at
> org.apache.nifi.controller.StandardProcessorNode.onTrigger(StandardProcessorNode.java:1361)
>         at
> org.apache.nifi.controller.tasks.ConnectableTask.invoke(ConnectableTask.java:247)
>         at
> org.apache.nifi.controller.scheduling.TimerDrivenSchedulingAgent$1.run(TimerDrivenSchedulingAgent.java:102)
>         at org.apache.nifi.engine.FlowEngine$2.run(FlowEngine.java:110)
>         at
> java.base/java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:515)
>         at
> java.base/java.util.concurrent.FutureTask.runAndReset(FutureTask.java:305)
>         at
> java.base/java.util.concurrent.ScheduledThreadPoolExecutor$ScheduledFutureTask.run(ScheduledThreadPoolExecutor.java:305)
>         at
> java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1128)
>         at
> java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:628)
>         at java.base/java.lang.Thread.run(Thread.java:834)
> Caused by: sun.security.validator.ValidatorException: PKIX path building
> failed: sun.security.provider.certpath.SunCertPathBuilderException: unable
> to find valid certification path to requested target
>         at
> java.base/sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:439)
>         at
> java.base/sun.security.validator.PKIXValidator.engineValidate(PKIXValidator.java:306)
>         at
> java.base/sun.security.validator.Validator.validate(Validator.java:264)
>         at
> java.base/sun.security.ssl.X509TrustManagerImpl.validate(X509TrustManagerImpl.java:313)
>         at
> java.base/sun.security.ssl.X509TrustManagerImpl.checkTrusted(X509TrustManagerImpl.java:222)
>         at
> java.base/sun.security.ssl.X509TrustManagerImpl.checkServerTrusted(X509TrustManagerImpl.java:129)
>         at
> java.base/sun.security.ssl.CertificateMessage$T12CertificateConsumer.checkServerCerts(CertificateMessage.java:638)
>
>
>

Reply via email to