| 76 | |
| 77 | == [http://ubc.github.io/ipeer-b2/ Building Block] == |
| 78 | |
| 79 | === Error: unable to find valid certification path to requested target === |
| 80 | It was because the intermediate certificate on iPeer was not installed properly. So the build block (java) couldn’t get the root certificate because the chain was broken. |
| 81 | |
| 82 | '''Troubleshooting''': Run the following command: |
| 83 | {{{ |
| 84 | openssl s_client -showcerts -connect IPEER_SERVER_DOMAIN:443 |
| 85 | }}} |
| 86 | The result shows only one certificate. It suppose to have two certificate, including one intermediate cert. |
| 87 | |
| 88 | '''Resolution''': One of those two |
| 89 | 1. install the intermediate cert correctly on ipeer |
| 90 | 2. import the intermediate cert on java side (blackboard keystore) |
| 91 | |
| 92 | First one is recommended. The method is depending on what kind of technology used on server: |
| 93 | * For Nginx: http://www.digicert.com/ssl-certificate-installation-nginx.htm |
| 94 | * For Apache: https://support.globalsign.com/customer/portal/articles/1225234-install-certificate---apache-openssl |
| 95 | * For other servers: Google search: SERVER NAME + intermediate certificate |