Got Webservice API ResponseError PKIX path building failed

[yashpalsingh]

We are suddenly seeing this error in the logs and tasks are not getting processed. This is a REST API based connection to create tickets.

Got Webservice API Response: [error:Error PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target]

Has anybody experienced this error?

[armaanzahir]

Hi @yashpalsingh 

Seems to be an issue with the app cert. Check it's validity and expiry. Upload the correct cert and restart server.

Solved: AD Import Jobs are getting failed - Saviynt Forums - 62702

Solved: AD Connection on SSL (Self Signed) - Saviynt Forums - 65339

Solved: Saviynt REST api - get Access token - unable to fi... - Saviynt Forums - 15538

Solved: Saviynt REST api - unable to find valid certifica... - Saviynt Forums - 55081

[yashpalsingh]

Thanks @armaanzahir, but there is no app cert available. The connection was working fine and task were getting processed but suddenly we are seeing this error.

[AmitM]

HI @yashpalsingh ,

As this is a REST connector, it seems the connection is over internet and you were not needed to import certs and it was working.

But the certs could expire on target side even though you don't need to upload those.

Do this 

• Try same API request in postman and see if you see same error
• If yes, reach to app team and check if certs have expired
• if yes, they might need to renew it and connection will start working and also in postman
• If it works in postman or if certs are not expired , try uploading cert in Saviynt

Also the links shared by @armaanzahir are helpful, go through those once.

Thanks,

Amit

[yashpalsingh]

Thanks @AmitM , the API payload is working fine in postman. I have tried uploading the certificate in Saviynt after downloading from web but the error still exists.

[AmitM]

And you have also restarted Saviynt server.

Few more questions to understand issue better :

• Is test connection working? Only provisioning failing because you mentioned tasks are failing
• Is recon working?

Thanks,

Amit

[yashpalsingh]

Server has been restarted. This connection is just to create tickets in the ticketing tool.

[AmitM]

Strange , nothing much to say honestly. Hope you have downloaded the entire cert chain and not just one certificate. The intermediate cert and the root cert also uploaded.

if you have done that then Freshdesk might be the way forward.

Thanks,

Amit

[yashpalsingh]

Do I need to upload root and intermediate cert separately? I have downloaded the cert chain and uploaded it

[AmitM]

@yashpalsingh , all three or four whatever is in the chain. All separate.

[yashpalsingh]

Thanks, but which cert to select in the connection.

[AmitM]

bottom in the chain and your main cert. that will find the roots and others in repo itself

[yashpalsingh]

Thanks, I have uploaded all the certs separately and restarted the server, but still getting the same error.

[angela]

Hi Amit,

Regarding If it works in postman or if certs are not expired , try uploading cert in Saviynt. We are experiencing where the call works in postman. For 'uploading cert in Saviynt' - would this be the Saviynt Site Cert or the site we are trying to make calls to cert?

Thank you,

Angela

[rushikeshvartak]

Target application certification to saviynt