SOAPUI give SSLHandShakeException

[Suboohi.Shaheen]

I get :

2021-10-05 15:01:06 - Error getting response; javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

while trying to run the API url : "https://api.zephyrscale.smartbear.com/v2/testcases"

Same works well on other system.

[Nic Brough -Adaptavist-]

The system you are using does not have a certificate installed that allows it to talk to that site over https.

You'll need to get a certificate and put it into the Java's certificate store.

[Suboohi.Shaheen]

I cross checked the Java certificates in 2 system(1 its working, 1 its not). Both gave me same result. Able to connect with Jira using C#, but not SOAPUI.

[Nic Brough -Adaptavist-]

Did you check the CA too?

If it's not the certificates, you're going to need to get more detail from the logs to see where it is failing.

[Suboohi.Shaheen]

Can you guide more on this? not sure about CA.
Only getting this error:
Error getting response; javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: 

[Nic Brough -Adaptavist-]

Sorry, CA is the certificate authority. 

One of the things a certificate is validated against is the CA (Imagine your country's passport office, and your passport - most of the time, your passport will take you through a port with little fuss, but sometimes, border control might go "hey, who issued your passport?  We just want to check this doc with them" - they're the CA)

In this case, we're a bit stuck.  There is something wrong with the software's use of the certificate, because Jira is not able to say "the certificate you've presented checks out against the CA and all the other rules set".

All we can really tell you is that it's a bit broken, and your best bet is increased logging and comparing the SSL setup between the working system and the broken one.

[Suboohi.Shaheen]

I dont think there is certificate issue, I have 2 soapUI instance on my machine. One is able to connect and give proper response, another gives me sslHandshake error. I tried proxy setting and many other thing. Nothing seems to work.

[Nic Brough -Adaptavist-]

The error you are getting is a certificate issue.  The sslHandshake means that the two machines were not able to agree on their certificates matching.

What is the difference between the two SoapUIs you are testing this with?  Are they using different key stores?  Did you install the same certificates for them both?

[Suboohi.Shaheen]

Thanks Nic for your continuous input. I solved this issue yesterday. Seems we added some jar in Soapui Library which was not compatible and giving SSL error . Once that jar was removed SOAPUI was able to connect to Zephyr Jira. Thanks a lot for your input.

[Nic Brough -Adaptavist-]

Oh, well spotted!  I imagine that could be really hard to find buried in two similar applications!