This page contains a list of frequently occuring issues with HTTPS/SSL when using Delft-FEWS.

PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException

This error is typically shown if one of the Delft-FEWS components connects over HTTPS with an external service that has an invalid SSL certifcate. Usually this means a client.trustore is required. See for example: Data Import and certification path problems

Validator Extended key usage does not permit use for TLS client authentication

This error may appear of the Windows trustore contains client certifcates but the server doensn't have a certificate with server+client auth setup. In that case the server will need a SSL certificate that supports both client and server certificates.

  • No labels