function readOnly(count){ }
Starting November 20, the site will be set to read-only. On December 4, 2023,
forum discussions will move to the Trailblazer Community.
+ Start a Discussion
Karthik112Karthik112 

Security

Hi All,

 

I am trying to connect to an external system from sales force and we are trying to implement ws security between these systems. The firewall has been configured in such a way that it only accepts sales force ip ranges. We tried to connect to a https server and the proxy returns the following response.

 

System.CalloutException: IO Exception: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target.

 

we figured it was the issue with the certificate configured at the proxy and my network team had purchased  a new public certificate from Verisign. When I try to connect to the server, it is still giving me the same error. 

 

 Upon trouble shooting, my network team believes that the intermediate certificate that came in with verisign was not installed in sales force server (intermediate certificate is not in the list of sales force accepted verisign certificate chain).

Its really weird to believe that sales force doesnt have that cert installed.

 

Please help me troubleshoot this error. couldnt figure out where the error is coming from. Thanks in advance.

 

CLKCLK
nice issue
_Prasu__Prasu_

You will need to make sure that intermediate certificate which you purchase is supported by the Salesforce. You can find the list of the same at following link:

Outbound Messaging SSL CA Certificates

Karthik112Karthik112

Does the intermeidate certificate need to be imported into Sales force key store? If so How do I do it?

rshrsh

Hi Prasanna

 

I have my SSL page which has the certificate from one of the providers in the list. But  salesforce is still giving issues for the same, can you please  have a look, if some thing is wrong with it ??  I tried few other pages from the same vender like https://secure.comodo.net/, it works fine for them. 

 

The page is working at https://demoww.humaninference.com.

 

Rahul