Forum Discussion

kodyabbott's avatar
kodyabbott
Occasional Contributor
13 years ago

SSL Applying WS-Security -"path does not chain with any of t

Hey guys,

I've searched high and low to try and figure out what is going on and still at a loss. I followed the steps here to a tee: http://www.soapui.org/SOAP-and-WSDL/app ... urity.html I've created keystores before and I know it is right unless soapUI requires something special.

This is the error: "path does not chain with any of the trust anchors" (see attached)

Any ideas or thoughts would greatly be appreciated!

7 Replies

  • kodyabbott's avatar
    kodyabbott
    Occasional Contributor
    13 years ago
    I'd really appreciate any insight. I have made sure the root and intermediate certificate on both client and server are set properly.
  • SmartBear_Suppo's avatar
    SmartBear_Suppo
    Icon for Alumni rankAlumni
    13 years ago
    What's the stack trace in the "error log" tab?

    Can you confirm you are applying a trusted SSL cert?

    Also, which version of SoapUI are you using? There has been some major rework in handling SSL between v4.0.1 and v4.5.x

    Thanks,
    Michael Giller
    SmartBear Software
  • FNGNG's avatar
    FNGNG
    13 years ago
    Please find the logs (soapUI and error) below
    I am using a trusted SSL cert from Digicert
    I am using soapUi version 4.5.1

    soapUI log

    Tue Aug 06 14:38:49 EDT 2013:ERROR:An error occured [General security error (Error during certificate path validation: Path does not chain with any of the trust anchors)], see error log for details
    Tue Aug 06 14:38:49 EDT 2013:INFO:Got response for [EligibilityServiceSoap12.Individual:Request 1] in 4518ms (5931 bytes)





    error log

    Tue Aug 06 14:38:49 EDT 2013:ERROR:org.apache.ws.security.WSSecurityException: General security error (Error during certificate path validation: Path does not chain with any of the trust anchors)
    org.apache.ws.security.WSSecurityException: General security error (Error during certificate path validation: Path does not chain with any of the trust anchors)
    at org.apache.ws.security.components.crypto.Merlin.verifyTrust(Merlin.java:819)
    at org.apache.ws.security.validate.SignatureTrustValidator.verifyTrustInCert(SignatureTrustValidator.java:217)
    at org.apache.ws.security.validate.SignatureTrustValidator.validate(SignatureTrustValidator.java:69)
    at org.apache.ws.security.processor.SignatureProcessor.handleToken(SignatureProcessor.java:157)
    at org.apache.ws.security.WSSecurityEngine.processSecurityHeader(WSSecurityEngine.java:396)
    at org.apache.ws.security.WSSecurityEngine.processSecurityHeader(WSSecurityEngine.java:304)
    at org.apache.ws.security.WSSecurityEngine.processSecurityHeader(WSSecurityEngine.java:249)
    at com.eviware.soapui.impl.wsdl.support.wss.IncomingWss.processIncoming(IncomingWss.java:121)
    at com.eviware.soapui.impl.wsdl.submit.transports.http.support.attachments.WsdlSinglePartHttpResponse.processIncomingWss(WsdlSinglePartHttpResponse.java:49)
    at com.eviware.soapui.impl.wsdl.submit.transports.http.support.attachments.WsdlSinglePartHttpResponse.<init>(WsdlSinglePartHttpResponse.java:38)
    at com.eviware.soapui.impl.wsdl.submit.filters.HttpPackagingResponseFilter.wsdlRequest(HttpPackagingResponseFilter.java:71)
    at com.eviware.soapui.impl.wsdl.submit.filters.HttpPackagingResponseFilter.afterAbstractHttpResponse(HttpPackagingResponseFilter.java:48)
    at com.eviware.soapui.impl.wsdl.submit.filters.AbstractRequestFilter.afterRequest(AbstractRequestFilter.java:64)
    at com.eviware.soapui.impl.wsdl.submit.transports.http.HttpClientRequestTransport.sendRequest(HttpClientRequestTransport.java:297)
    at com.eviware.soapui.impl.wsdl.WsdlSubmit.run(WsdlSubmit.java:123)
    at java.util.concurrent.Executors$RunnableAdapter.call(Unknown Source)
    at java.util.concurrent.FutureTask$Sync.innerRun(Unknown Source)
    at java.util.concurrent.FutureTask.run(Unknown Source)
    at java.util.concurrent.ThreadPoolExecutor.runWorker(Unknown Source)
    at java.util.concurrent.ThreadPoolExecutor$Worker.run(Unknown Source)
    at java.lang.Thread.run(Unknown Source)
    Caused by: java.security.cert.CertPathValidatorException: Path does not chain with any of the trust anchors
    at sun.security.provider.certpath.PKIXCertPathValidator.engineValidate(Unknown Source)
    at java.security.cert.CertPathValidator.validate(Unknown Source)
    at org.apache.ws.security.components.crypto.Merlin.verifyTrust(Merlin.java:795)
    ... 20 more





    Thank you
  • kodyabbott's avatar
    kodyabbott
    Occasional Contributor
    13 years ago
    This is indeed a trusted SSL certificate that was issued by Digicert, Inc. We have configured the keystore to contain the certificate and its intermediate and root certificate for the Outgoing WS-Security Configuration.