Tag Archives: SSL_ERROR

[Exception] javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path validation failed: java.security.cert.CertPathValidatorException: validity check failed

1. Abnormal information

22 : 20 : 12.637 [main] ERROR com.talkilla.talkillalexile.common.utils.HttpUtils- sun.security.validator.ValidatorException: PKIX path validation failed: java.security.cert.CertPathValidatorException: validity check failed,{}
javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path validation failed: java.security.cert.CertPathValidatorException: validity check failed
    at sun.security.ssl.Alerts.getSSLException(Alerts.java: 192 )
    at sun.security.ssl.SSLSocketImpl.fatal(SSLSocketImpl.java: 1946 )
    at sun.security.ssl.Handshaker.fatalSE(Handshaker.java: 316 )
    at sun.security.ssl.Handshaker.fatalSE(Handshaker.java: 310 )
    at sun.security.ssl.ClientHandshaker.serverCertificate(ClientHandshaker.java: 1640 )
    at sun.security.ssl.ClientHandshaker.processMessage(ClientHandshaker.java: 223 )
    at sun.security.ssl.Handshaker.processLoop(Handshaker.java: 1037 )
    at sun.security.ssl.Handshaker.process_record(Handshaker.java: 965 )
    at sun.security.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java: 1064 )
    at sun.security.ssl.SSLSocketImpl.performInitialHandshake(SSLSocketImpl.java: 1367 )
    at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java: 1395 )
    at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java: 1379 )
    at okhttp3. internal .connection.RealConnection.connectTls(RealConnection.java: 241 )
    at okhttp3. internal .connection.RealConnection.establishProtocol(RealConnection.java: 198 )
    at okhttp3. internal .connection.RealConnection.buildConnection(RealConnection.java: 174 )
    at okhttp3. internal .connection.RealConnection.connect(RealConnection.java: 114 )
    at okhttp3. internal .connection.StreamAllocation.findConnection(StreamAllocation.java: 193 )
    at okhttp3. internal .connection.StreamAllocation.findHealthyConnection(StreamAllocation.java: 129 )
    at okhttp3. internal .connection.StreamAllocation.newStream(StreamAllocation.java: 98 )
    at okhttp3. internal .connection.ConnectInterceptor.intercept (ConnectInterceptor.java: 42 )
    at okhttp3. internal .http.RealInterceptorChain.proceed(RealInterceptorChain.java: 92 )
    at okhttp3. internal .http.RealInterceptorChain.proceed(RealInterceptorChain.java: 67 )
    at okhttp3. internal .cache.CacheInterceptor.intercept(CacheInterceptor.java: 109 )
    at okhttp3. internal .http.RealInterceptorChain.proceed(RealInterceptorChain.java: 92 )
    at okhttp3. internal .http.RealInterceptorChain.proceed(RealInterceptorChain.java: 67 )
    at okhttp3. internal .http.BridgeInterceptor.intercept(BridgeInterceptor.java: 93 )
    at okhttp3. internal .http.RealInterceptorChain.proceed(RealInterceptorChain.java: 92 )
    at okhttp3. internal .http.RetryAndFollowUpInterceptor.intercept(RetryAndFollowUpInterceptor.java: 124 )
    at okhttp3. internal .http.RealInterceptorChain.proceed(RealInterceptorChain.java: 92 )
    at okhttp3. internal .http.RealInterceptorChain.proceed(RealInterceptorChain.java: 67 )
    at okhttp3.RealCall.getResponseWithInterceptorChain(RealCall.java: 170 )
    at okhttp3.RealCall.execute(RealCall.java: 60 )
    at com.talkilla.talkillalexile.common.utils.HttpUtils.handleSimpleResponse(HttpUtils.java: 410 )
    at com.talkilla.talkillalexile.common.utils.HttpUtils. get (HttpUtils.java: 66 )
    at com.talkilla.talkillalexile.DemoTest.main(DemoTest.java: 20 )
Caused by: sun.security.validator.ValidatorException: PKIX path validation failed: java.security.cert.CertPathValidatorException: validity check failed
    at sun.security.validator.PKIXValidator.doValidate(PKIXValidator.java: 362 )
    at sun.security.validator.PKIXValidator.engineValidate(PKIXValidator.java: 270 )
    at sun.security.validator.Validator.validate(Validator.java: 262 )
    at sun.security.ssl.X509TrustManagerImpl.validate(X509TrustManagerImpl.java: 330 )
    at sun.security.ssl.X509TrustManagerImpl.checkTrusted(X509TrustManagerImpl.java: 237 )
    at sun.security.ssl.X509TrustManagerImpl.checkServerTrusted(X509TrustManagerImpl.java: 132 )
    at sun.security.ssl.ClientHandshaker.serverCertificate(ClientHandshaker.java: 1622 )
    ... 30 common frames omitted
Caused by: java.security.cert.CertPathValidatorException: validity check failed
    at sun.security.provider.certpath.PKIXMasterCertPathValidator.validate(PKIXMasterCertPathValidator.java: 135 )
    at sun.security.provider.certpath.PKIXCertPathValidator.validate(PKIXCertPathValidator.java: 238 )
    at sun.security.provider.certpath.PKIXCertPathValidator.validate(PKIXCertPathValidator.java: 146 )
    at sun.security.provider.certpath.PKIXCertPathValidator.engineValidate(PKIXCertPathValidator.java: 85 )
    at java.security.cert.CertPathValidator.validate(CertPathValidator.java: 292 )
    at sun.security.validator.PKIXValidator.doValidate(PKIXValidator.java: 357 )
    ... 36 common frames omitted
Caused by: java.security.cert.CertificateExpiredException: NotAfter: Fri Mar 27  13 : 09 : 06 CST 2020 
    at sun.security.x509.CertificateValidity.valid(CertificateValidity.java: 274 )
    at sun.security.x509.X509CertImpl.checkValidity(X509CertImpl.java: 629 )
    at sun.security.provider.certpath.BasicChecker.verifyValidity(BasicChecker.java: 190 )
    at sun.security.provider.certpath.BasicChecker.check(BasicChecker.java: 144 )
    at sun.security.provider.certpath.PKIXMasterCertPathValidator.validate(PKIXMasterCertPathValidator.java: 125 )
    ... 41 common frames omitted
Exception in thread " main " java.lang.RuntimeException: javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path validation failed: java.security.cert.CertPathValidatorException: validity check failed
    at com.talkilla.talkillalexile.common.utils.HttpUtils.handleSimpleResponse(HttpUtils.java: 416 )
    at com.talkilla.talkillalexile.common.utils.HttpUtils. get (HttpUtils.java: 66 )
    at com.talkilla.talkillalexile.DemoTest.main(DemoTest.java: 20 )
Caused by: javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path validation failed: java.security.cert.CertPathValidatorException: validity check failed
    at sun.security.ssl.Alerts.getSSLException(Alerts.java: 192 )
    at sun.security.ssl.SSLSocketImpl.fatal(SSLSocketImpl.java: 1946 )
    at sun.security.ssl.Handshaker.fatalSE(Handshaker.java: 316 )
    at sun.security.ssl.Handshaker.fatalSE(Handshaker.java: 310 )
    at sun.security.ssl.ClientHandshaker.serverCertificate(ClientHandshaker.java: 1640 )
    at sun.security.ssl.ClientHandshaker.processMessage(ClientHandshaker.java: 223 )
    at sun.security.ssl.Handshaker.processLoop(Handshaker.java: 1037 )
    at sun.security.ssl.Handshaker.process_record(Handshaker.java: 965 )
    at sun.security.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java: 1064 )
    at sun.security.ssl.SSLSocketImpl.performInitialHandshake(SSLSocketImpl.java: 1367 )
    at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java: 1395 )
    at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java: 1379 )
    at okhttp3. internal .connection.RealConnection.connectTls(RealConnection.java: 241 )
    at okhttp3. internal .connection.RealConnection.establishProtocol(RealConnection.java: 198 )
    at okhttp3. internal .connection.RealConnection.buildConnection(RealConnection.java: 174 )
    at okhttp3. internal .connection.RealConnection.connect(RealConnection.java: 114 )
    at okhttp3. internal .connection.StreamAllocation.findConnection(StreamAllocation.java: 193 )
    at okhttp3. internal .connection.StreamAllocation.findHealthyConnection(StreamAllocation.java: 129 )
    at okhttp3. internal .connection.StreamAllocation.newStream(StreamAllocation.java: 98 )
    at okhttp3. internal .connection.ConnectInterceptor.intercept (ConnectInterceptor.java: 42 )
    at okhttp3. internal .http.RealInterceptorChain.proceed(RealInterceptorChain.java: 92 )
    at okhttp3. internal .http.RealInterceptorChain.proceed(RealInterceptorChain.java: 67 )
    at okhttp3. internal .cache.CacheInterceptor.intercept(CacheInterceptor.java: 109 )
    at okhttp3. internal .http.RealInterceptorChain.proceed(RealInterceptorChain.java: 92 )
    at okhttp3. internal .http.RealInterceptorChain.proceed(RealInterceptorChain.java: 67 )
    at okhttp3. internal .http.BridgeInterceptor.intercept(BridgeInterceptor.java: 93 )
    at okhttp3. internal .http.RealInterceptorChain.proceed(RealInterceptorChain.java: 92 )
    at okhttp3. internal .http.RetryAndFollowUpInterceptor.intercept(RetryAndFollowUpInterceptor.java: 124 )
    at okhttp3. internal .http.RealInterceptorChain.proceed(RealInterceptorChain.java: 92 )
    at okhttp3. internal .http.RealInterceptorChain.proceed(RealInterceptorChain.java: 67 )
    at okhttp3.RealCall.getResponseWithInterceptorChain(RealCall.java: 170 )
    at okhttp3.RealCall.execute(RealCall.java: 60 )
    at com.talkilla.talkillalexile.common.utils.HttpUtils.handleSimpleResponse(HttpUtils.java: 410 )
    ... 2 more
Caused by: sun.security.validator.ValidatorException: PKIX path validation failed: java.security.cert.CertPathValidatorException: validity check failed
    at sun.security.validator.PKIXValidator.doValidate(PKIXValidator.java: 362 )
    at sun.security.validator.PKIXValidator.engineValidate(PKIXValidator.java: 270 )
    at sun.security.validator.Validator.validate(Validator.java: 262 )
    at sun.security.ssl.X509TrustManagerImpl.validate(X509TrustManagerImpl.java: 330 )
    at sun.security.ssl.X509TrustManagerImpl.checkTrusted(X509TrustManagerImpl.java: 237 )
    at sun.security.ssl.X509TrustManagerImpl.checkServerTrusted(X509TrustManagerImpl.java: 132 )
    at sun.security.ssl.ClientHandshaker.serverCertificate(ClientHandshaker.java: 1622 )
    ... 30 more
Caused by: java.security.cert.CertPathValidatorException: validity check failed
    at sun.security.provider.certpath.PKIXMasterCertPathValidator.validate(PKIXMasterCertPathValidator.java: 135 )
    at sun.security.provider.certpath.PKIXCertPathValidator.validate(PKIXCertPathValidator.java: 238 )
    at sun.security.provider.certpath.PKIXCertPathValidator.validate(PKIXCertPathValidator.java: 146 )
    at sun.security.provider.certpath.PKIXCertPathValidator.engineValidate(PKIXCertPathValidator.java: 85 )
    at java.security.cert.CertPathValidator.validate(CertPathValidator.java: 292 )
    at sun.security.validator.PKIXValidator.doValidate(PKIXValidator.java: 357 )
    ... 36 more
Caused by: java.security.cert.CertificateExpiredException: NotAfter: Fri Mar 27  13 : 09 : 06 CST 2020 
    at sun.security.x509.CertificateValidity.valid(CertificateValidity.java: 274 )
    at sun.security.x509.X509CertImpl.checkValidity(X509CertImpl.java: 629 )
    at sun.security.provider.certpath.BasicChecker.verifyValidity(BasicChecker.java: 190 )
    at sun.security.provider.certpath.BasicChecker.check(BasicChecker.java: 144 )
    at sun.security.provider.certpath.PKIXMasterCertPathValidator.validate(PKIXMasterCertPathValidator.java: 125 )
    ... 41 more

2. Abnormal causes and solutions

The https certificate has expired, just update the certificate

Github Clone Failed SSL_ERROR_SYSCALL in connection to github.com:443

Problem description

When using git to pull GitHub code, clone failed with the following error

fatal: unable to access 'https://github.com/xxx/xxx.git/': LibreSSL SSL_connect: SSL_ERROR_SYSCALL in connection to github.com:443 

Causes

The proxy of HTTPS was set before

resolvent

Cancel the proxy for HTTPS and http

git config --global --unset http.proxy
git config --global --unset https.proxy

Finally, take a look at the global configuration of GIT

git config --global --list

Finally, try git clone . If it fails at the first time, you can re open a terminal for execution

Supplement

Git clone failed fatal: early EOF

This is because git does not have enough cache space. You can try to increase http. Postbuffer (by 500MB)


git config --global http.postBuffer 524288000