WSO2 API管理器“無法找到到請求的目標{org .wso2.carbon.apimgt.hostobjects.APIProviderHostObject}的有效證書路徑”

Question

我們已經部署了WSO2 API管理器來公開系統的API。 當我們發布具有https目標端點（例如： https ： //abc.de :）的API時，請求將失敗，並帶有以下異常。

 TID: [-1234] [] [2017-06-26 06:46:43,226] ERROR {org.wso2.carbon.apimgt.hostobje cts.APIProviderHostObject} - Error occurred while connecting to backend : https ://list-micro.aws.na.sysco.net:9090, reason : sun.security.validator.ValidatorEx ception: PKIX path building failed: sun.security.provider.certpath.SunCertPathBu ilderException: unable to find valid certification path to requested target {org .wso2.carbon.apimgt.hostobjects.APIProviderHostObject} javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderExce ption: unable to find valid certification path to requested target at sun.security.ssl.Alerts.getSSLException(Alerts.java:192) at sun.security.ssl.SSLSocketImpl.fatal(SSLSocketImpl.java:1949) at sun.security.ssl.Handshaker.fatalSE(Handshaker.java:302) at sun.security.ssl.Handshaker.fatalSE(Handshaker.java:296) at sun.security.ssl.ClientHandshaker.serverCertificate(ClientHandshaker. java:1514) at sun.security.ssl.ClientHandshaker.processMessage(ClientHandshaker.jav a:216) at sun.security.ssl.Handshaker.processLoop(Handshaker.java:1026) at sun.security.ssl.Handshaker.process_record(Handshaker.java:961) at sun.security.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:1062) 

Answer 1

Wso2 / Carbon使用Java 8 ..請記住，顯然SSL客戶端不能很好地解析SNI，這是一個問題。 因此，如果您在1個IP地址上使用多個證書，則可能是以下問題：

http://javabreaks.blogspot.com/2015/12/java-ssl-handshake-with-server-name.html