KeychainStore include user and predefined roots within one truststore
Sean Mullan
sean.mullan at oracle.com
Thu Jan 9 20:56:48 UTC 2025
On 1/8/25 4:06 AM, Tim Jacomb wrote:
> TLS handshake fails with PKIX path building error.
>
> Chain is Root -> Intermediate -> Leaf in the runnable example although
> in our real-world use-case its Root -> Intermediate 1 -> Intermediate 2
> -> Leaf
> If I run the example only with Root -> Leaf then it works fine...
It would be helpful if you can attach two logfiles (assuming the info
isn't sensitive) to the bug report[1], one running with
-Djavax.net.debug=all and the other with -Djava.security.debug=certpath.
Thanks,
Sean
[1] https://bugs.openjdk.org/browse/JDK-8347067
More information about the security-dev
mailing list