[CLOUDSTACK-10351] Add "Lets Encrypt CA" Certpath to SSVM Keystore (for cdimage.debian.org)

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Duplicate
• Affects Version/s: 4.11.0.0
• Component/s: Secondary Storage
• Security Level: Public (Anyone can view this level - this is the default.)
• Assignee: Unassigned
• Reporter: Melanie Desaive
• Created: 03/Apr/18 11:38
• Updated: 06/Apr/18 10:49
• Resolved: 06/Apr/18 10:49

Description

The Download of ISO Images from https://cdimage.debian.org/debian-cd/current/amd64/iso-cd/debian-9.4.0-amd64-netinst.iso fails with:

sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

The site "cdimage.debian.org" uses Certificates from "Lets Encrypt".

Could it be the certification path for "Lets Encrypt" is not included in the Java Keystore on the SSVM?