E1: OVR: OneView Report Does Not Work with SSL Enabled - PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target (Doc ID 2755443.1)

Last updated on FEBRUARY 28, 2025

Applies to:

Symptoms

E1 Release: 9.2
Tools Release: : 9.2.4.4
BI Publisher Version: 12.2.1.3.0

Installed and configured an OVR (BI Publisher Enterprise 12.2.1.3.0) server for JDE. The OVR server runs on Weblogic 12.2.1.3, and the HTML server runs on 12.2.1.4.

OneView Report (OVR) does not work with SSL enabled. User received the following error on screen:

System cannot access the report because it does not exist anymore on the BIP Server. Please contact your system administrator to delete the report definition.

Without SSL, OVR works fine. When SSL is enabled, OVR does not work, and the following error is seen in weblogic server.out log.

PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

The JDE HTML server and the OVR server are both using the same wildcard certificate. Have imported the CA root and intermediate certificates to the Weblogic trust keystore, the Weblogic identity keystore, and the JDK cacerts keystore on both servers. Also added the following parameters to both servers:

-Dweblogic.security.SSL.minimumProtocolVersion=TLSv1.2 -Djavax.net.ssl.trustStore=/app/Java/latest/jre/lib/security/cacerts

Error in weblogic server.out log

Cause

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.