This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

SSPR breach check not working with 4.5.0.2

jburns80 over 4 years ago

We have set up the breach check database through sspr for the haveibeenpwned.com check. However we are seeing this error:

WARN , util.PwmPasswordRuleValidator, Problem while connecting to external breach database sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

The documentation doesn't have any information on which cert would be needed or possibly an api key?

Top Replies

0 Norbert Klasen over 4 years ago

The root CA for haveibeenpwned.com currently is "Baltimore CyberTrust Root". Do you have that certificate in the truststore used by the JVM SSPR runs in?

You can use https://github.com/klasen/sslpoke to debug your TLS issues.
Cancel
Vote Up +1 Vote Down

Cancel
0 jburns80 over 4 years ago in reply to Norbert Klasen

I do, It worked for a few days, now I am getting a new error: Problem while connecting to external breach database Failed to connect to api.pwnedpasswords.com/2606:4700:0:0:0:0:6812:ce57:443
Cancel
Vote Up +1 Vote Down

Cancel
0 Norbert Klasen over 3 years ago in reply to jburns80

See this fix in 4.5.0.3

www.netiq.com/.../sspr-4503-release-notes.html
Cancel
Vote Up 0 Vote Down

Cancel

Menu

SSPR User Discussions

SSPR breach check not working with 4.5.0.2

Top Replies

Resources