Remedy Email Engine SSL Error

SSL Errors

We had the email engine working fine for quite some time (ARS 7.1 on Solaris).

Then – one magical day after server patching – it quit.  The error messages reported in the email error logs form said this:

Connect failed
javax.mail.MessagingException: Connect failed;
nested exception is:
javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
at com.sun.mail.pop3.POP3Store.protocolConnect(POP3Store.java:148)
at javax.mail.Service.connect(Service.java:275)
at javax.mail.Service.connect(Service.java:156)
at com.bmc.arsys.emaildaemon.ReceiverModule.initializeIncommingMailbox(ReceiverModule.java:1876)
at com.bmc.arsys.emaildaemon.ReceiverModule.doWork(ReceiverModule.java:216)
at com.bmc.arsys.emaildaemon.ThreadBase.run(ThreadBase.java:288)
at java.lang.Thread.run(Thread.java:595)

….and it looked like this…

As it turned out – it was a pretty easy fix.

For some reason the patching (OS level patching by another group) had overwritten our CACERTS file.  We didn’t notice immediately because the replacement file had approximately the right size and date.

So – if you run into the “PKIX path building failed:  unable to find valid certification path to requested” error – re-import or otherwise replace your SSL certificates.

-William