got java.security.InvalidAlgorithmParameterException: the trustAnchors parameter must be non-empty when using cas

java ssl cas
Jimmy1980 picture Jimmy1980 · Jul 9, 2011 · Viewed 44.7k times · Source

we get the following exception in our application under tomcat which is using cas.

java.security.InvalidAlgorithmParameterException: the trustAnchors parameter must be non-empty

when I google for it I found some guess and solutions but no one can help me .

here is a part of our tomcat server.xml file:

<Connector SSLEnabled="true" clientAuth="false" keystoreFile="conf/.keystore" maxThreads="150" port="8443" protocol="HTTP/1.1" scheme="https" secure="true" sslProtocol="TLS"/>

we point to our generated keystore.

Answer

user207421 picture user207421 · Jul 10, 2011

This bizarre error message usually means that your specified truststore was not found where you said it was.

Related questions

PKIX path building failed, but the certificate is in cacerts

I have the problem that is also described here. The thing is that I created a certificate and added it to the keystore of tomcat, and then I copied it to the cacerts truststore. However, somehow I still get this …

Read More
Resolving javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed Error?

Edit :- Tried to format the question and accepted answer in more presentable way at mine Blog Here is the original issue. I am getting this error: detailed message sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.…

Read More
Unable to find valid certification path to requested target - error even after cert imported

I have a Java client trying to access a server with a self-signed certificate. When I try to Post to the server, I get the following error: unable to find valid certification path to requested target Having done some research …

Read More