为什么在Ubuntu环境中Mule-ESB不使用默认的Java密钥库？

Question

This question may be Java related or it may be Mule related. I just don't know, which is why I'm asking it under both tags.

My problem is this: I develop Mule applications using Mule Studio (although I do most of my configuring through XML, it's just more powerful). Until recently, we used a Windows environment to host applications. So whatever worked on my development machine worked on the server.

However, we recently switched from a Windows to an Ubuntu server environment. When I started migrating my Mule applications I noticed that it simply refused to connect to any endpoint over the HTTPS protocol. A little research showed that the following exception occured:

subject/issuer name chaining check failed (java.security.cert.CertPathValidatorException)

So a certificate problem. It shouldn't occur, because the endpoint uses a valid certificate signed by VeriSign. Futhermore, it never occured in the Windows environment. A little trial and error showed that not a single certificate was being accepted by Mule. That would seem to point at Mule or Java since it doesn't seem to be able to use any of the default certificates. I managed to fix it by creating a key store containing all certificates and having my HTTPS connector reference that, but it means changing all my applications and having to scrape together every single certificate.

So my question is twofold:

1. Why can't Java/Mule use the default key store?
2. How do I fix it?

EDIT + ANSWER: I've fixed it. It seems to have been my own mistake. I installed Java 1.6 after I installed Java 1.7. This seemed to have rolled my cacerts back to some ancient version which the system was unable to update. When I installed Java 1.6 and installed Java 1.7 after that, the most recent version got installed.

Answer 1

I've fixed it. It seems to have been my own mistake. I installed Java 1.6 after I installed Java 1.7. This seemed to have rolled my cacerts back to some ancient version which the system was unable to update. When I installed Java 1.6 and installed Java 1.7 after that, the most recent version got installed.

So the lesson learned in this: do not install an older JRE after a newer one. Mule does not like it.