http:send-request() call emits certificate error
Hello, Using BaseX 12.0 All of a sudden I started to get the following error while calling http:send-request(): [experr:HC0001] SSL: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target XQuery repro: let $uri := "https://giswspro.miamidade.gov/ArcGIS/rest/services/MDPD_Locators/MDPDGeoAdd..." return http:send-request(<http:request method='GET' status-only='true' json='format=xquery,lax=true'/>, $uri) By the way, the same error shows up for any URIs. The following SSL validator shows no issues with the certificates, or their chains: https://decoder.link/sslchecker https://decoder.link/sslchecker/giswspro.miamidade.gov/443 Also, the $uri is public, so it is testable on your side. Regards, Yitzhak Khabinsky
My computers have Windows 11 OS. I am in the corporate environment with multiple firewalls, and other security restrictions. What is strange, from some computers the same call of the Web Service is working in BaseX! In the original question, the $uri string was cut off. Here is the correct $uri: let $uri := `https://giswspro.miamidade.gov/ArcGIS/rest/services/MDPD_Locators/MDPDGeoAddressl/GeocodeServer/findAddressCandidates` return http:send-request(<http:request method='GET' status-only='true' json='format=xquery,lax=true'/>, $uri) Regards, Yitzhak Khabinsky
I forgot to mention that the same call is working in the SoapUI 5.9.1 on the problematic machines. Regards, Yitzhak Khabinsky
Finally, some good news on my end. I upgraded Java from: java.vm.vendor: Eclipse Adoptium java.vm.version: 17.0.8.1+1 to the following: java.vm.vendor: Eclipse Adoptium java.vm.version: 21.0.9+10-LTS and the http:send-request() calls started to work like before. Regards, Yitzhak Khabinsky
participants (1)
-
Yitzhak Khabinsky