sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

[pinter.gabor@…]

What steps will reproduce the problem?

1. Install JOSM
2. Start JOSM
3. Report the bug

What is the expected result?

No error and free access to imagery.

What happens instead?

JOSM tried to access the following resources:

• ​https://api.openstreetmap.org/api/capabilities

butrailed to do so, because ofthe following network errors:

• sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

lt may be due to a missing proxy configuration.
Would you like to change your proxy settings now?

No proxy were ever used on this computer and JOSM worked perfectly until yesterday.
If I press Cancel, I cannot access any imagery.

Please provide any additional information below. Attach a screenshot if possible.

URL:https://josm.openstreetmap.de/svn/trunk
Repository:UUID: 0c6e7542-c601-0410-84e7-c038aed88b3b
Last:Changed Date: 2020-07-30 12:44:04 +0200 (Thu, 30 Jul 2020)
Build-Date:2020-07-31 01:30:49
Revision:16812
Relative:URL: ^/trunk

Identification: JOSM/1.5 (16812 en) Windows 10 64-Bit
OS Build number: Windows 10 Pro 1709 (16299)
Memory Usage: 831 MB / 1820 MB (633 MB allocated, but free)
Java version: 1.8.0_261-b12, Oracle Corporation, Java HotSpot(TM) 64-Bit Server VM
Look and Feel: com.sun.java.swing.plaf.windows.WindowsLookAndFeel
Screen: \Display0 1920x1080 (scaling 1.0x1.0), \Display1 3840x2160 (scaling 1.0x1.0)
Maximum Screen Size: 3840x2160
Best cursor sizes: 16x16 -> 32x32, 32x32 -> 32x32
Program arguments: [D:\Downloads\20200820 2020-08-19 Szeles nap.gpx]

Plugins:
+ imagery_offset_db (35405)
+ turnrestrictions (35515)

Last errors/warnings:
- W: javax.net.ssl.SSLHandshakeException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target. Cause: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target. Cause: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
- W: Already here sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
- W: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
- W: javax.net.ssl.SSLHandshakeException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target. Cause: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target. Cause: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
- W: Already here sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
- W: Already here sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
- E: Error initializing test ApiCapabilitiesTest:

[pinter.gabor@…]

sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

[anonymous]

I have the same problem. Is there any solution?

[GerdP]

I get the same problem with the josm-tested.jar freshly downloaded from https://josm.openstreetmap.de. Seems someone meant the problem should be solved by deleting the wiki start page, I reverted that change, see
https://josm.openstreetmap.de/wiki/WikiStart?action=diff&version=332
Here's my console log:

D:\java_tools\JOSM>java --version
openjdk 15.0.1 2020-10-20
OpenJDK Runtime Environment AdoptOpenJDK (build 15.0.1+9)
OpenJDK 64-Bit Server VM AdoptOpenJDK (build 15.0.1+9, mixed mode, sharing)

D:\java_tools\JOSM>java -jar josm-tested.jar
2021-01-14 08:00:55.642 INFORMATION: Protokollierungsgrad ist bei INFORMATION (INFO, 800)
2021-01-14 08:00:56.036 WARNING: extended font config - overriding 'filename.Myanmar_Text=mmrtext.ttf' with 'MMRTEXT.TTF'
2021-01-14 08:00:56.043 WARNING: extended font config - overriding 'filename.Mongolian_Baiti=monbaiti.ttf' with 'MONBAITI.TTF'
2021-01-14 08:00:58.137 INFO: loading plugin 'jaxb' (version 35543)
2021-01-14 08:00:59.539 INFO: GET https://api.openstreetmap.org/api/0.6/user/details -> HTTP/1.1 200 (376 ms; 845 B)
2021-01-14 08:01:00.077 INFO: GET https://josm.openstreetmap.de/wiki/StartupPage -> !!! (139 ms)
2021-01-14 08:01:00.078 WARNING: javax.net.ssl.SSLHandshakeException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target. Cause: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target. Cause: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
javax.net.ssl.SSLHandshakeException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
        at java.base/sun.security.ssl.Alert.createSSLException(Alert.java:131)
        at java.base/sun.security.ssl.TransportContext.fatal(TransportContext.java:369)
        at java.base/sun.security.ssl.TransportContext.fatal(TransportContext.java:312)
        at java.base/sun.security.ssl.TransportContext.fatal(TransportContext.java:307)
        at java.base/sun.security.ssl.CertificateMessage$T12CertificateConsumer.checkServerCerts(CertificateMessage.java:654)
        at java.base/sun.security.ssl.CertificateMessage$T12CertificateConsumer.onCertificate(CertificateMessage.java:473)
        at java.base/sun.security.ssl.CertificateMessage$T12CertificateConsumer.consume(CertificateMessage.java:369)
        at java.base/sun.security.ssl.SSLHandshake.consume(SSLHandshake.java:396)
        at java.base/sun.security.ssl.HandshakeContext.dispatch(HandshakeContext.java:480)
        at java.base/sun.security.ssl.HandshakeContext.dispatch(HandshakeContext.java:458)
        at java.base/sun.security.ssl.TransportContext.dispatch(TransportContext.java:199)
        at java.base/sun.security.ssl.SSLTransport.decode(SSLTransport.java:171)
        at java.base/sun.security.ssl.SSLSocketImpl.decode(SSLSocketImpl.java:1488)
        at java.base/sun.security.ssl.SSLSocketImpl.readHandshakeRecord(SSLSocketImpl.java:1394)
        at java.base/sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:441)
        at java.base/sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:412)
        at java.base/sun.net.www.protocol.https.HttpsClient.afterConnect(HttpsClient.java:567)
        at java.base/sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.connect(AbstractDelegateHttpsURLConnection.java:183)
        at java.base/sun.net.www.protocol.https.HttpsURLConnectionImpl.connect(HttpsURLConnectionImpl.java:142)
        at org.openstreetmap.josm.tools.Http1Client.performConnection(Http1Client.java:78)
        at org.openstreetmap.josm.tools.HttpClient.connect(HttpClient.java:148)
        at org.openstreetmap.josm.tools.HttpClient.connect(HttpClient.java:124)
        at org.openstreetmap.josm.tools.WikiReader.readLang(WikiReader.java:101)
        at org.openstreetmap.josm.tools.WikiReader.readLang(WikiReader.java:89)
        at org.openstreetmap.josm.gui.GettingStarted$MotdContent.updateData(GettingStarted.java:104)
        at org.openstreetmap.josm.io.CacheCustomContent.updateForce(CacheCustomContent.java:131)
        at org.openstreetmap.josm.io.CacheCustomContent.updateForceString(CacheCustomContent.java:143)
        at org.openstreetmap.josm.io.CacheCustomContent.updateIfRequiredString(CacheCustomContent.java:121)
        at org.openstreetmap.josm.gui.GettingStarted.lambda$getMOTD$2(GettingStarted.java:186)
        at java.base/java.lang.Thread.run(Thread.java:832)
Caused by: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
        at java.base/sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:439)
        at java.base/sun.security.validator.PKIXValidator.engineValidate(PKIXValidator.java:249)
        at java.base/sun.security.validator.Validator.validate(Validator.java:264)
        at java.base/sun.security.ssl.X509TrustManagerImpl.checkTrusted(X509TrustManagerImpl.java:231)
        at java.base/sun.security.ssl.X509TrustManagerImpl.checkServerTrusted(X509TrustManagerImpl.java:132)
        at java.base/sun.security.ssl.CertificateMessage$T12CertificateConsumer.checkServerCerts(CertificateMessage.java:638)
        ... 25 more
Caused by: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
        at java.base/sun.security.provider.certpath.SunCertPathBuilder.build(SunCertPathBuilder.java:141)
        at java.base/sun.security.provider.certpath.SunCertPathBuilder.engineBuild(SunCertPathBuilder.java:126)
        at java.base/java.security.cert.CertPathBuilder.build(CertPathBuilder.java:297)
        at java.base/sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:434)
        ... 30 more

2021-01-14 08:01:00.081 WARNING: Failed to read MOTD. Exception was: javax.net.ssl.SSLHandshakeException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target: javax.net.ssl.SSLHandshakeException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target. Cause: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target. Cause: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
2021-01-14 08:01:00.847 INFO: Obtained 80 Tag2Link rules from resource://META-INF/resources/webjars/tag2link/2020.10.18/index.json
2021-01-14 08:01:03.190 INFO: Adding c:\josm\core\resources\data\validator\combinations.mapcss to tag checker
2021-01-14 08:01:03.228 INFO: loading plugin 'reverter' (version 35640)
2021-01-14 08:01:03.328 INFO: RemoteControl: adding command "revert_changeset" (handled by RevertChangesetHandler)
2021-01-14 08:01:03.392 INFO: loading plugin 'apache-commons' (version 35524)
2021-01-14 08:01:03.384 INFO: Adding c:\josm\core\resources\data\validator\geometry.mapcss to tag checker
2021-01-14 08:01:03.421 INFO: loading plugin 'jts' (version 35458)
2021-01-14 08:01:03.445 INFO: loading plugin 'ejml' (version 35458)
2021-01-14 08:01:03.469 INFO: loading plugin 'geotools' (version 35458)
2021-01-14 08:01:03.901 INFO: Warp/affine reduction enabled: true
2021-01-14 08:01:04.448 INFO: dataFileCache open start
2021-01-14 08:01:04.623 INFO: loading plugin 'utilsplugin2' (version 35682)
2021-01-14 08:01:04.772 INFO: loading plugin 'o5m' (version 35640)
2021-01-14 08:01:04.777 INFO: loading plugin 'opendata' (version 35640)
2021-01-14 08:01:04.808 INFO: loading plugin 'pbf' (version 35650)
2021-01-14 08:01:04.827 INFO: loading plugin 'OpeningHoursEditor' (version 35640)
2021-01-14 08:01:04.838 INFO: loading plugin 'poly' (version 35640)
2021-01-14 08:01:04.841 INFO: loading plugin 'undelete' (version 35640)
2021-01-14 08:01:04.872 INFO: loading plugin 'buildings_tools' (version 35669)
2021-01-14 08:01:04.893 INFO: loading plugin 'ColumbusCSV' (version 35640)
2021-01-14 08:01:04.994 INFO: Message notifier active (checks every 30 minutes)
2021-01-14 08:01:05.007 INFO: RemoteControl::Accepting remote connections on /0:0:0:0:0:0:0:1:8111
2021-01-14 08:01:05.007 INFO: RemoteControl::Accepting remote connections on /127.0.0.1:8111
2021-01-14 08:01:05.023 INFO: Changeset updater active (checks every 60 minutes if open changesets have been closed)
2021-01-14 08:01:05.190 INFO: GET https://api.openstreetmap.org/api/0.6/user/details (get number of unread messages) -> HTTP/1.1 200 (182 ms; 845 B)
2021-01-14 08:01:07.897 INFO: Changeset updater inactive
2021-01-14 08:01:07.898 INFO: Message notifier inactive
2021-01-14 08:01:07.899 INFO: RemoteControl::Server /127.0.0.1:8111 stopped.
2021-01-14 08:01:07.899 INFO: RemoteControl::Server /0:0:0:0:0:0:0:1:8111 stopped.

[GerdP]

See also #20389