KeychainStore include user and predefined roots within one truststore

Sean Mullan sean.mullan at oracle.com
Thu Jan 9 20:56:48 UTC 2025


On 1/8/25 4:06 AM, Tim Jacomb wrote:
> TLS handshake fails with PKIX path building error.
> 
> Chain is Root -> Intermediate -> Leaf in the runnable example although 
> in our real-world use-case its Root -> Intermediate 1 -> Intermediate 2 
> -> Leaf
> If I run the example only with Root -> Leaf then it works fine...

It would be helpful if you can attach two logfiles (assuming the info 
isn't sensitive) to the bug report[1], one running with 
-Djavax.net.debug=all and the other with -Djava.security.debug=certpath.

Thanks,
Sean

[1] https://bugs.openjdk.org/browse/JDK-8347067



More information about the security-dev mailing list