function readOnly(count){ }
Starting November 20, the site will be set to read-only. On December 4, 2023,
forum discussions will move to the Trailblazer Community.
+ Start a Discussion
Yury.KYury.K 

Certification validation failed.

Hello everyone,

Im working with SAP WebServices. I'm trying to call WebServices from SFDC by HTTP POST, while I'm trying to post on https:\\ URL - im getting such error :

"System.CalloutException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target "

Trusted IP address and Remote Site Settings are set for this https URL.

 

Does anyone know how to fix this issue?

 

Thanks and Regards,

Yury.

Best Answer chosen by Admin (Salesforce Developers) 
Pat PattersonPat Patterson

I can't see an option then; you will need to buy an SSL certificate. Since it's only for testing, get the cheapest you can find, but note, the CA cert MUST be on the list at http://wiki.developerforce.com/page/Outbound_Messaging_SSL_CA_Certificates

All Answers

Pat PattersonPat Patterson

Check that your SAP web service's SSL is configured with a root cert listed at http://wiki.developerforce.com/page/Outbound_Messaging_SSL_CA_Certificates

 

Cheers,

 

Pat

Yury.KYury.K

Is there a way pass this issue with using non paid certificate ?

For now I need  to test my application with HTTPS connection, before publishing on AppExchange, and I don't have paid certificate.

 

Regards,

Yury.

Pat PattersonPat Patterson

All services must have an SSL cert issued by one of the listed CAs. This doesn't mean you necessarily need to pay for one, though. You can deploy an app to Heroku for free (I think 'piggyback SSL' is enabled by default now) and call a service there. I demonstrate this here: http://www.youtube.com/watch?v=D5OsrRisNxA#t=52m21s

 

Cheers,

 

Pat

Yury.KYury.K

Problem that is my force.com application makes callout on WebServices of SAP r/3 system . For test our SAP system set up on our server, but in productive - every customer will have their own SAP system(most of them will be signed by listed CAs), but before publishing on AppExchange I want to make sure that my application working correctly with HTTPS(it is fine for HTTP). So is there any other solution, than buy CA?

 

Regards,

Yury.

Pat PattersonPat Patterson

I can't see an option then; you will need to buy an SSL certificate. Since it's only for testing, get the cheapest you can find, but note, the CA cert MUST be on the list at http://wiki.developerforce.com/page/Outbound_Messaging_SSL_CA_Certificates

This was selected as the best answer
Yury.KYury.K

Oki, thanks Pat.