SPC5-Studio check for update problem

[aurelien23]

Hello,

when running "check for updates" in SPC-Studio 6.0 I get the following error for all sites:

Some sites could not be found. See the error log for more detail.
Unable to read repository at http://hightec.spc5studio.com/content.xml.xz.
PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
Unable to read repository at http://ai.spc5studio.com/compositeContent.xml.
PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
Unable to read repository at http://download.spc5studio.com/updates/content.xml.
PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
Unable to read repository at http://spc5tools.spc5studio.com/compositeContent.xml.
PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
Unable to read repository at http://community.spc5studio.com/compositeContent.xml.
PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
Unable to read repository at http://download.spc5studio.com/updates6/compositeContent.xml.
PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
Unable to read repository at http://download.spc5studio.com/content.xml.
PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

I checked with my IT department, my network configuration in preferences are correctly set, and the same settings are functionnal in Hightec environnement (eclipse based like SPC5 studio). 

In Edge browser I can access the file https://download.spc5studio.com/updates6/compositeContent.xml so it seems to be related to an URL needed to create the PKIX certificate?

Below the detailed errors mention the URL "http://download.spc5studio.com/p2.index" and I can't reach this one.

eclipse.buildId=unknown

java.version=11.0.7

java.vendor=GraalVM Community

BootLoader constants: OS=win32, ARCH=x86_64, WS=win32, NL=fr_FR

Framework arguments:  -eclipse.keyring configuration\.eclipse\org.eclipse.equinox.security\secure_storage

Command-line arguments:  -os win32 -ws win32 -arch x86_64 -eclipse.keyring configuration\.eclipse\org.eclipse.equinox.security\secure_storage

This is a continuation of log file C:\SPC5Studio-6.0\workspace\.metadata\.bak_0.log

Created Time: 2024-02-13 08:11:27.797

org.eclipse.equinox.p2.transport.ecf

Warning

Tue Feb 13 08:11:35 CET 2024

Connection to http://download.spc5studio.com/p2.index failed on PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target. Retry attempt 0 started

javax.net.ssl.SSLHandshakeException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

at java.base/sun.security.ssl.Alert.createSSLException(Alert.java:131)

at java.base/sun.security.ssl.TransportContext.fatal(TransportContext.java:326)

at java.base/sun.security.ssl.TransportContext.fatal(TransportContext.java:269)

at java.base/sun.security.ssl.TransportContext.fatal(TransportContext.java:264)

at java.base/sun.security.ssl.CertificateMessage$T13CertificateConsumer.checkServerCerts(CertificateMessage.java:1339)

at java.base/sun.security.ssl.CertificateMessage$T13CertificateConsumer.onConsumeCertificate(CertificateMessage.java:1214)

at java.base/sun.security.ssl.CertificateMessage$T13CertificateConsumer.consume(CertificateMessage.java:1157)

at java.base/sun.security.ssl.SSLHandshake.consume(SSLHandshake.java:392)

at java.base/sun.security.ssl.HandshakeContext.dispatch(HandshakeContext.java:444)

at java.base/sun.security.ssl.HandshakeContext.dispatch(HandshakeContext.java:422)

at java.base/sun.security.ssl.TransportContext.dispatch(TransportContext.java:183)

at java.base/sun.security.ssl.SSLTransport.decode(SSLTransport.java:164)

at java.base/sun.security.ssl.SSLSocketImpl.decode(SSLSocketImpl.java:1144)

at java.base/sun.security.ssl.SSLSocketImpl.readHandshakeRecord(SSLSocketImpl.java:1055)

at java.base/sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:395)

at org.apache.http.conn.ssl.SSLConnectionSocketFactory.createLayeredSocket(SSLConnectionSocketFactory.java:436)

at org.apache.http.conn.ssl.SSLConnectionSocketFactory.connectSocket(SSLConnectionSocketFactory.java:384)

at org.apache.http.impl.conn.DefaultHttpClientConnectionOperator.connect(DefaultHttpClientConnectionOperator.java:142)

at org.apache.http.impl.conn.PoolingHttpClientConnectionManager.connect(PoolingHttpClientConnectionManager.java:374)

at org.apache.http.impl.execchain.MainClientExec.establishRoute(MainClientExec.java:393)

at org.apache.http.impl.execchain.MainClientExec.execute(MainClientExec.java:236)

at org.apache.http.impl.execchain.ProtocolExec.execute(ProtocolExec.java:186)

at org.apache.http.impl.execchain.RetryExec.execute(RetryExec.java:89)

at org.apache.http.impl.execchain.RedirectExec.execute(RedirectExec.java:110)

at org.apache.http.impl.client.InternalHttpClient.doExecute(InternalHttpClient.java:185)

at org.apache.http.impl.client.CloseableHttpClient.execute(CloseableHttpClient.java:83)

at org.eclipse.ecf.provider.filetransfer.httpclient45.HttpClientRetrieveFileTransfer.performConnect(HttpClientRetrieveFileTransfer.java:1000)

at org.eclipse.ecf.provider.filetransfer.httpclient45.HttpClientRetrieveFileTransfer.access$0(HttpClientRetrieveFileTransfer.java:992)

at org.eclipse.ecf.provider.filetransfer.httpclient45.HttpClientRetrieveFileTransfer$1.performFileTransfer(HttpClientRetrieveFileTransfer.java:988)

at org.eclipse.ecf.filetransfer.FileTransferJob.run(FileTransferJob.java:74)

at org.eclipse.core.internal.jobs.Worker.run(Worker.java:63)

Caused by: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

at java.base/sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:439)

at java.base/sun.security.validator.PKIXValidator.engineValidate(PKIXValidator.java:306)

at java.base/sun.security.validator.Validator.validate(Validator.java:264)

at java.base/sun.security.ssl.X509TrustManagerImpl.validate(X509TrustManagerImpl.java:313)

at java.base/sun.security.ssl.X509TrustManagerImpl.checkTrusted(X509TrustManagerImpl.java:222)

at java.base/sun.security.ssl.X509TrustManagerImpl.checkServerTrusted(X509TrustManagerImpl.java:129)

at java.base/sun.security.ssl.CertificateMessage$T13CertificateConsumer.checkServerCerts(CertificateMessage.java:1323)

... 26 more

Caused by: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

at java.base/sun.security.provider.certpath.SunCertPathBuilder.build(SunCertPathBuilder.java:141)

at java.base/sun.security.provider.certpath.SunCertPathBuilder.engineBuild(SunCertPathBuilder.java:126)

at java.base/java.security.cert.CertPathBuilder.build(CertPathBuilder.java:297)

at java.base/sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:434)

... 32 more

[Erwan YVIN · Accepted solution]

Hello Aurelien ,

Sorry , for my late answer .

It is due to your IT Proxy.

• add your root certificates of your company (root CAs and intermediate CAs) in cacerts in jre/lib/security (SPC5Studio)

the password is the basic one : "changeit"

or use your corporate jre.

it is common nightmare issue in big company :flushed_face:

       Best regards

                  Erwan