EV SSL certificate: unable to find valid certification path to requested target


When our Java application tries to download the content of https://www.burgernet.nl/burgernet/78659 (which seems to be using Comodo EV certificate), I’m getting the following exception: javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target. None of the browsers I’ve tried complains about the certificate on that site, our Java applications works fine with other HTTPS resources. The error is happening under Oracle JDK 1.7.0_51. Am I missing anything obvious?



The site administrator has not installed the full and correct certification path (missing intermediates) and your Java application is choking on it because of this. Browsers generally will not choke because they often have a greater list of CAs that they support vs that of Sun/Oracle do within Java.