T3S Client on WLS 12.2.1 Cannot Connect to SSL Port with java.rmi.ConnectException and javax.net.ssl.SSLHandshakeException - BEA-090929 Unable to load key store (Doc ID 2371325.1)

Last updated on FEBRUARY 12, 2025

Applies to:

Symptoms

Using an application deployed on WebLogic Server 12c 12.2.1, a T3S client cannot connect to SSL port and a java.rmi.ConnectException and javax.net.ssl.SSLHandshakeException results:

connect('<USER>','<PASSWORD>','t3s://<HOST>:<PORT>')

WLSTException: Error occurred while performing connect : Cannot connect via t3s or https.
If using demo certs, verify that the -Dweblogic.security.TrustKeyStore=DemoTrust system property is set.
Failed to initialize JNDI context, tried 2 time or times totally, the interval of each time is 0ms.
t3s://<HOST>:<PORT>: Destination <IP ADD>, <PORT> unreachable.; nested exception is:
javax.net.ssl.SSLHandshakeException: General SSLEngine problem; No available router to destination.; nested exception is:
java.rmi.ConnectException: No available router to destination.

Core error shows is failing to load the keystore. In this case, the default DemoTrust.jks:

<Error> <Security> ... <BEA-090929> <Unable to load key store [keyStoreType="jks", source="/.../wlserver/server/lib/DemoTrust.jks", exception="java.io.FileNotFoundException", message="/.../wlserver/server/lib/DemoTrust.jks (Permission denied)"]>

Full error stack provided:

Cause

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.