Page 1 of 1

PKIX path building failed trying to download question bank

Posted: Wed Dec 04, 2024 5:06 am
by AlienFS
I cannot download the latest version of 1z0-830.ets. The GUI reports: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

I have attached a debug file for you. I added some empty lines near 4.600 to make it clear when the actual handshake starts.

Re: PKIX path building failed trying to download question bank

Posted: Wed Dec 04, 2024 9:41 pm
by admin
Please replace your existing ets question bank file with the one from https://enthuware.com/downloads/1z0-830.ets

The non LTS versions seem to have this problem because the jdk does have ssl chain certificate in its cert store.

Re: PKIX path building failed trying to download question bank

Posted: Thu Dec 05, 2024 6:05 pm
by admin
Older JDKs do not have recent SSL certificate chains in their ssl store. So you have to either add chain certs in JVM's ssl store or use new JDK such as JDK 21 . For example, it works fine on:
C:\temp>c:\jdk21\bin\java -version
java version "21" 2023-09-19 LTS

Or if you have an older JDK you can just run this command:
"C:\Program Files\Java\jdk-17.0.3\bin"\keytool -importcert -file C:\temp\enthuware.der -alias ssl -keystore "C:\Program Files\Java\jdk-17.0.3\lib\security\cacerts"

Password is changeit
and download enthuware.der from https://enthuware.com/enthuware.der (as exported from enthuware.com)

Re: PKIX path building failed trying to download question bank

Posted: Thu Dec 05, 2024 10:22 pm
by admin
This problem has also been taken care of by our backend team and so the above updates are not required anymore. It should just work on all JDK versions.