How to install your Root Certificate in StellarStudio JRE

[Erwan YVIN]

When installing some StellarStudio  plugins http://*.srxstudio.org , you can meet the issue : sun.security.validator.ValidatorException: PKIX path building failed 

It is typical IT Issue :face_screaming_in_fear:  in each corporate company.

“"Path building" refers to the process of verifying a chain of certificates from a specific certificate up to a root CA (Certificate Authority) certificate. If this process fails, it means that the application could not construct a trusted path from the server's certificate to a root CA.”

 

IMPORTANT : The customer needs to install their own root certificate in JRE StellarStudio keystore

• Typically this keystore is at c:\StellarStudio-5.0\eclipse\jre\\lib\security\cacerts.

The keytool that is used to access the keystore is typically installed with the JRE and ready to use.

 

• Run the standard keytool to import the certificate, from c:\StellarStudio-5.0\eclipse\jre\\lib\security\cacerts.

c:\StellarStudio-5.0\eclipse\jre\bin\keytool -import -trustcacerts -alias myrootCA -file myrootCA.cer -keystore cacerts

• When prompted Enter keystore password:, enter "changeit".

By default keystores have a password of "changeit"

• When prompted Trust this certificate? [no]:, enter "yes".

This imports the certificate into the keystore and display the message: "Certificate was added to keystore".

 

[Erwan YVIN]

Hello ,

Do not forget to update the cacerts in case of 

sun.security.validator.ValidatorException: PKIX path building failed 

c:\StellarStudio-7.1\eclipse\jre\bin\keytool -import -trustcacerts -alias myrootCA -file myrootCA.cer -keystore cacerts

            Best Regards

                        Erwan