How to Resolve 'PKIX Path Building Failed' Issue

While developing some application, we might sometimes come across the below error which the maven throws while building the application:

Reason: The error is due to the system firewall. The system firewall restricts the application to connect to external unsecured systems. The firewall requires a valid certificate to allow access to the external systems.

Solution: The solution is very simple. We just need to install the required certificates of the external system in our system so the firewall allows us to interact with the external system and complete our process.

We are going to perform two activities:

1. Download the Certificate.
2. Install the Certificate.

2. Now to the left of the URL, there is a 'lock' icon. Click on this icon and a window will pop up. From the window, select the certificate.

3. Once we select the certificate, it will redirect to another window. From there we have to select the Details tab and from the Details click on Copy to File. After clicking again, a new window will pop up. In that window, select next.

4. After we perform all the above steps, we will be redirected to a new window where we need to select the format for the certificate. We will have to choose DER encoded binary and click on Next.

5. Now we need to choose a location where we need to save the certificate and we also need to give some name to the certificate.

6. Once a file name is given and saved, then select Next. It will direct us to another window showing the details. If all the details are correct, click on Finish. An export Success pop-up will appear.

Note: I saved the File name as repo.

So, the downloading of certificates is done. Now the next process is to install the certificate in the cacerts file of the jdk installed in our system using the command line.

Installation of the Certificate From Command Line:

Command for Installation:

keytool -importcert -trustcacerts -alias <alias name for the certificate> -file <path were we have save the certificate> -keystore "<path for the cacerts file>" -storepass changeit

For Me the Command Will Be:

xxxxxxxxxx

keytool -importcert -trustcacerts -alias repo -file C:\Users\DELL\Desktop\repo.cer -keystore " C:\Program Files\Java\jdk1.8.0_131\jre\lib\security\carcets " -storepass changeit

Note:

2. Once the command is executed, it will ask for confirmation. Write Yes and the certificate will be installed with a confirmation.

In the above process, we have downloaded and installed the certificate successfully in our system.

Now if we will execute the application it will not show certificate issues and will also download the required data from that particular system.