unable to find valid certification path to requested target

[BatikanDulger]

Hi,

I want to Change Identity provider, But iam getting stuck.

I get the Error message:

javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

CCan Anybody help me?

[Lalegre]

Hey BatikanDulger​,

Have you previously imported any root and intermediate certificates into vCenter Java Store as shown here: Import the Trusted Certificate of an External Identity Provider

Also I assume you followed exactly the steps of the next article knowing the requirements, limitations and compatibilitiest: https://docs.vmware.com/en/VMware-vSphere/7.0/com.vmware.vsphere.authentication.doc/GUID-C5E998B2-1148-46DC-990E-A5DB71F…

Are you able to reach the LDAP Server on the port that you have configure from inside the vCenter Server appliance?

[BatikanDulger]

Hi Lalegre

Thanks for your reply. After i added the Certificate to the external idenity provider, it works.

but now i have an anothor problem.

I cant login

I get the following Error:

[400] An error occurred while processing an OAuth 2 authorization code assertion request

i think there is something wrong with my certificates.

other settings:

i hope you can help me further.

Thanks!!

[Lalegre]

As i can see you are using SSL everywhere so quick question, why are you using LDAP connectivity in your primary server and not LDAPs?

[BatikanDulger]

i changed it from LDAP to LDAPS. Thanks!

Its for a school project.

But i get the same isue again.

I added also the certificate i use.