Skip to main content

Try to use XdisableSSLHostnameVerification but no luck

1 reply [Last post]
Anonymous

Dear all,

have you tried to use -XdisableSSLHostnameVerification to ignore the SSL
verification?
I tried it a whole day. It does not work.

The error message is

[ERROR] sun.security.validator.ValidatorException: PKIX path building
failed: su
n.security.provider.certpath.SunCertPathBuilderException: unable to find
valid c
ertification path to requested target

What should i do?

Thank you very much if any help....

Reply viewing options

Select your preferred way to display the comments and click "Save settings" to activate your changes.
easterk
Offline
Joined: 2008-11-11
Points: 0

On Wed, 2012-10-10 at 06:06 -0600, zhou kun wrote:
>
> Dear all,
>
>
> have you tried to use -XdisableSSLHostnameVerification to ignore the
> SSL verification?
> I tried it a whole day. It does not work.
>
>
> The error message is
>
>
> [ERROR] sun.security.validator.ValidatorException: PKIX path building
> failed: su
> n.security.provider.certpath.SunCertPathBuilderException: unable to
> find valid c
> ertification path to requested target

-XdisableSSLHostnameVerification should still be validating the cert
path, just ignoring the host name. For example the cert might be valid
for site www.foo.com but if you're seeing it on bar.foo.com turning off
hostname verification should give you success. If it can't validate the
cert path though it's not going to care about the host name. If you
haven't already you should try installing all the certs from the server
in your local cert store (likely cacerts) with keytool.

HTH,
Kris