SSL Exception makes JOSM unusable

[josm@…]

Starting JOSM, I get loads of Exception tracebacks with "PKIX path building failed" and SSL validation errors. First, no MOTD but a popup with a long line basically mirroring the tracebacks ("Error initializing test ApiCapabilitiesTest: …"), and the offer to change my proxy settings. Attempting to download data to edit results in "Failed to upload data to or download data from $URL due to a problem with transferring data. Details: $traceback" ($URL and $traceback contain text)

All SSL- and specifically java/SSL-related ubuntu packages (ca-certificates, ca-certificates-java, ssl-cert) seem to be installed correctly.

URL:https://josm.openstreetmap.de/svn/trunk
Repository:UUID: 0c6e7542-c601-0410-84e7-c038aed88b3b
Last:Changed Date: 2022-04-27 21:26:39 +0200 (Wed, 27 Apr 2022)
Build-Date:2022-04-28 01:30:57
Revision:18437
Relative:URL: ^/trunk

Identification: JOSM/1.5 (18437 de) Linux Ubuntu 21.10
Memory Usage: 452 MB / 3534 MB (258 MB allocated, but free)
Java version: 1.8.0_51-b16, Oracle Corporation, Java HotSpot(TM) 64-Bit Server VM
Look and Feel: javax.swing.plaf.metal.MetalLookAndFeel
Screen: :0.0 1920×1080 (scaling 1.00×1.00) :0.1 1920×1200 (scaling 1.00×1.00) :0.2 1920×1080 (scaling 1.00×1.00)
Maximum Screen Size: 1920×1200
Best cursor sizes: 16×16→16×16, 32×32→32×32
Environment variable LANG: de_DE.UTF-8
Environment variable LC_ALL: de_DE.UTF-8
System property file.encoding: UTF-8
System property sun.jnu.encoding: UTF-8
Locale info: de_DE
Numbers with default locale: 1234567890 -> 1234567890
Desktop environment: XFCE
libcommons-logging-java: libcommons-logging-java:all-1.2-2
fonts-noto: fonts-noto:-

Plugins:
+ PicLayer (1.0.1)

Last errors/warnings:
- 00004.288 W: javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target. Ursache: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target. Ursache: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
- 00004.289 E: javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target. Ursache: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target. Ursache: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
- 00005.718 W: javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target. Ursache: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target. Ursache: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
- 00005.718 W: Already here sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
- 00005.719 W: Already here sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
- 00005.720 E: Fehler beim Initialisieren des Tests ApiCapabilitiesTest:
- 00007.176 W: javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target. Ursache: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target. Ursache: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
- 00007.177 W: Already here sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
- 00007.177 W: Already here sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
- 00007.179 W: org.openstreetmap.josm.io.OsmApiInitializationException: org.openstreetmap.josm.io.OsmTransferException: javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target. Ursache: org.openstreetmap.josm.io.OsmTransferException: javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target. Ursache: javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target. Ursache: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target. Ursache: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

[josm@…]

Sorry, one addition: for the text of the second popup "Failed to upload data…" I changed the locale to LC_ALL=C; this is then inconsistent with the language info contained in the Bug reports. Apologies.

[taylor.smock]

Closed as duplicate of #22045.
> Java version: 1.8.0_51-b16, Oracle Corporation, Java HotSpot(TM) 64-Bit Server VM
How did you install Java? I think the default JRE/JDK on Ubuntu is OpenJDK. But it looks like (from #22045) that it may be from one of the certificate packages updating, as #22045 was on Arch with OpenJDK.

[taylor.smock]

For reference, I'm not seeing this on:

Revision:18437
Is-Local-Build:true
[...snip...]
Java version: 11.0.15+10-Ubuntu[...snip...]

[taylor.smock]

It looks like this is probably distinct from #22051. Regardless, it isn't something that we can fix, as it has to do with the Java installation that you were using.

From comment:2:ticket:22051:

Since the other report – # 22051 – was closed while asking a question, I assume I should answer here.

My /etc/alternatives/java pointed to /opt/Oracle_Java/jre1.8.0_51/bin/java – whyever that was the case. Chosing /usr/lib/jvm/java-11-openjdk-amd64/bin/java solves the issue, and openjdk-18 is also available and also works perfectly.

(Now I'm interested to see what other program fails with this Java version.)

Thanks.

[skyper]

Java version: 1.8.0_51-b16, Oracle Corporation, Java HotSpot(TM) 64-Bit Server VM

Quite outdated version, please, install at least latest stable version of Java 8.

[taylor.smock]

Replying to skyper:

Quite outdated version, please, install at least latest stable version of Java 8.

From comment:2:ticket:22045 (copied in comment:4), it looks like they were able to work around the problem by changing their default Java version to Java 11 or Java 18.