HttpURLConnection throws SunCertPathBuilderException in jdk11

[Sean Mullan]

Please add -Djava.security.debug=certpath to the java command line and 
attach the log file. Preferably, attach 2 log files, one for a good run 
and one for a bad run. This should help show what the problem is.

--Sean

On 6/11/18 7:59 PM, Андрей Турбанов wrote:
> Hello.
> I tried to use early jdk11 build (http://jdk.java.net/11/) - Oracle JDK 
> build for Windows.
> I got exception when my program tries to connect (via HttpURLConnection) 
> to https://api.vk.com/
> 
> sun.security.provider.certpath.SunCertPathBuilderException: unable to 
> find valid certification path to requested target
>      at 
> sun.security.provider.certpath.SunCertPathBuilder.build(SunCertPathBuilder.java:141) 
> ~[?:?]
>      at 
> sun.security.provider.certpath.SunCertPathBuilder.engineBuild(SunCertPathBuilder.java:126) 
> ~[?:?]
>      at 
> java.security.cert.CertPathBuilder.build(CertPathBuilder.java:297) ~[?:?]
>      at 
> sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:380) ~[?:?]
>      at 
> sun.security.validator.PKIXValidator.engineValidate(PKIXValidator.java:290) 
> ~[?:?]
>      at sun.security.validator.Validator.validate(Validator.java:264) ~[?:?]
>      at 
> sun.security.ssl.X509TrustManagerImpl.validate(X509TrustManagerImpl.java:343) 
> ~[?:?]
> 
> Same code works well with JDK 10.
> Does JDK11 have different set of SSL certificates? Is there any way to 
> allow connection to vk.com <http://vk.com>?
> 
> Andrey Turbanov