SSL Handshake Exception with Self Signed HTTPS certs

[oleksandrsemak]

Hello there,

In our organisation we have VPN with Self Signed TLS CA which we import to AWS Cert Manager and use for NGINX Ingress.

so we import Root/Intermediate/Host certificates to keystore like:
keytool -import -noprompt -trustcacerts -alias *** -file *** -keystore cacerts -storepass changeit

create secret via helm values and add Java args:
-Djavax.net.ssl.trustStore=/etc/secret-volume/cacerts -Djavax.net.ssl.trustStorePassword=changeit

but during run java test we still get:
[javax.net](http://javax.net/).ssl.SSLHandshakeException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

[oleksandrsemak]

UPDATE: we have added extra propreties and its helped but on VM java-test works only with added certs by update-ca-certificates :

rp.keystore.resource = ***
rp.keystore.password = ***