issue with the swagger validator when trying to read yaml file from https port

[Former user]

issue with the swagger validator when trying to read yaml file from https port

javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException:

[Sven Döring]

Do you start your application with a key- and truststore enabled with the correct key- and truststore password? That should enable reading the yaml from the https connection.

Can you read the yaml file before initializing the Swagger Request Validator? If not the problem might not be the S-R-V.

[Moataz Nabil]

Thank you for replying and can you give me example for key- and truststore , I tried with RestAssured.useRelaxedHTTPSValidation() but not working for yaml file

[Sven Döring]

Does this help? https://github.com/rest-assured/rest-assured/issues/790

[Sven Döring]

Can you try to load the .yaml from your local resources? Just to make sure it's the connection to your https server.

[Moataz Nabil]

I was reading the yaml file from local folder in the project and there was any problems , but when change to the published url with the service the problem occurred

[Sven Döring]

Please add this to your test (I suppose it is JUnit).

    @BeforeClass
    public static void setUpSpec() {
        final TrustManager[] trustAllCerts = new TrustManager[]{
                new X509TrustManager() {
                    public java.security.cert.X509Certificate[] getAcceptedIssuers() {
                        return new X509Certificate[0];
                    }

                    public void checkClientTrusted(
                            java.security.cert.X509Certificate[] certs, String authType) {
                    }

                    public void checkServerTrusted(
                            java.security.cert.X509Certificate[] certs, String authType) {
                    }
                }
        };

        try {
            final SSLContext sc = SSLContext.getInstance("SSL");
            sc.init(null, trustAllCerts, new java.security.SecureRandom());
            HttpsURLConnection.setDefaultSSLSocketFactory(sc.getSocketFactory());
        } catch (final GeneralSecurityException e) {
            System.out.println("ERROR!!! Should not happen: " + e.getMessage());
        }
    }

And here are the imports:

import java.security.GeneralSecurityException;
import java.security.cert.X509Certificate;

import javax.net.ssl.HttpsURLConnection;
import javax.net.ssl.SSLContext;
import javax.net.ssl.TrustManager;
import javax.net.ssl.X509TrustManager;

import org.junit.BeforeClass;

This registers a Truststore for the running JVM which accpets every certificate.

[Moataz Nabil]

It solved the certificate issue with yaml file but I got Connection refused error from the the endpoint itself

[Sven Döring]

Is this an issue by the S-R-V?

[Moataz Nabil]

what is the S-R-V ?

[Sven Döring]

S-R-V => Swagger-Request-Validator

[Moataz Nabil]

:) ok , no it's related to this security issue

javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

[Sven Döring]

So, if it's not related to the S-R-V... This issue can be closed?