[ https://issues.apache.org/jira/browse/CLOUDSTACK-10351?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16428196#comment-16428196 ]
Melanie Desaive commented on CLOUDSTACK-10351: ---------------------------------------------- Moved Issue to GitHup. Closing here. See https://github.com/apache/cloudstack/issues/2541 > Add "Lets Encrypt CA" Certpath to SSVM Keystore (for cdimage.debian.org) > ------------------------------------------------------------------------ > > Key: CLOUDSTACK-10351 > URL: https://issues.apache.org/jira/browse/CLOUDSTACK-10351 > Project: CloudStack > Issue Type: Improvement > Security Level: Public(Anyone can view this level - this is the > default.) > Components: Secondary Storage > Affects Versions: 4.11.0.0 > Reporter: Melanie Desaive > Priority: Major > > The Download of ISO Images from > https://cdimage.debian.org/debian-cd/current/amd64/iso-cd/debian-9.4.0-amd64-netinst.iso > fails with: > {quote}{{sun.security.validator.ValidatorException: PKIX path building > failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to > find valid certification path to requested target}} > {quote} > The site "cdimage.debian.org" uses Certificates from "Lets Encrypt". > Could it be the certification path for "Lets Encrypt" is not included in the > Java Keystore on the SSVM? -- This message was sent by Atlassian JIRA (v7.6.3#76005)