unable to upload due to "no trusted certificate"

[marc_marc]

What steps will reproduce the problem?

1. add/modify anything
2. upload

What is the expected result?

upload ok

What happens instead?

popup "no trusted certificate found" and upload not done
in the same time, upload ok with iD/StreetComplete/Vespucci

Please provide any additional information below. Attach a screenshot if possible.

URL:https://josm.openstreetmap.de/svn/trunk
Repository:UUID: 0c6e7542-c601-0410-84e7-c038aed88b3b
Last:Changed Date: 2023-04-05 13:59:55 +0200 (Wed, 05 Apr 2023)
Build-Date:2023-04-06 01:30:57
Revision:18701
Relative:URL: ^/trunk

Identification: JOSM/1.5 (18701 fr) Linux CentOS Linux release 7.9.2009 (Core)
Memory Usage: 365 MB / 1717 MB (124 MB allocated, but free)
Java version: 1.8.0_362-b08, Red Hat, Inc., OpenJDK 64-Bit Server VM
Look and Feel: javax.swing.plaf.metal.MetalLookAndFeel
Screen: :0.0 1600×900 (scaling 1.00×1.00)
Maximum Screen Size: 1600×900
Best cursor sizes: 16×16→16×16, 32×32→32×32
Environment variable LANG: fr_CH.utf8
System property file.encoding: UTF-8
System property sun.jnu.encoding: UTF-8
Locale info: fr_CH
Numbers with default locale: 1234567890 -> 1234567890
Desktop environment: GNOME-Classic:GNOME
Java package: java-1.8.0-openjdk:x86_64-1.8.0.362.b08
WebStart package: icedtea-web:x86_64-1.7.1
VM arguments: [-Dicedtea-web.bin.name=javaws.itweb, -Dicedtea-web.bin.location=/usr/bin/javaws.itweb]
Dataset consistency test: No problems found

Plugins:
+ ImproveOsm (238)
+ apache-commons (36034)
+ apache-http (35924)
+ areaselector
+ austriaaddresshelper (master-4e80dc2e4261d321150187f4951684ad97342d5e)
+ cadastre-fr (36021)
+ conflation (0.6.11)
+ continuosDownload (105)
+ ejml (35924)
+ geotools (36028)
+ jackson (36034)
+ jaxb (35952)
+ jna (36005)
+ jts (36004)
+ log4j (36034)
+ notesolver (0.5.0)
+ opendata (36025)
+ pt_assistant (2.1.15-19-g9aeec3c-SNAPSHOT)
+ reverter (36043)
+ scripting
+ todo (123)
+ utilsplugin2 (36011)
+ wikipedia (605)

Tagging presets:
+ https://josm.openstreetmap.de/josmfile?page=Presets/Leaftype&zip=1
+ https://josm.openstreetmap.de/josmfile?page=Presets/Light_sources&zip=1
+ https://raw.github<user.name>content.com/Heiner-Sch/JOSM-preset-trees-Europe/master/JOSM-Preset_Trees.xml
+ https://josm.openstreetmap.de/josmfile?page=Presets/BENELUX&zip=1
+ https://josm.openstreetmap.de/josmfile?page=Presets/MountainbikeTrails&zip=1
+ https://josm.openstreetmap.de/josmfile?page=Presets/contact(socialnetworks_IMs)&zip=1
+ https://josm.openstreetmap.de/josmfile?page=Presets/geoimage.at&zip=1
+ https://github.com/Jungle-Bus/josm-presets/raw/gh-pages/jungle-stops/Preset_Jungle-Bus.zip
+ https://josm.openstreetmap.de/josmfile?page=Presets/MobilePhoneBaseStations&zip=1
+ https://raw.github<user.name>content.com/osmlab/name-suggestion-index/main/dist/presets/nsi-josm-presets.min.xml
+ https://josm.openstreetmap.de/josmfile?page=Presets/NewTags&zip=1
+ https://raw.github<user.name>content.com/species/josm-preset-wheelchair/master/sidewalks_kerbs.xml
+ https://osmtools.de/josm/steps.xml
+ https://josm.openstreetmap.de/josmfile?page=Presets/Trees&zip=1
+ https://josm.openstreetmap.de/josmfile?page=Presets/WifiHotspots&zip=1
+ https://josm.openstreetmap.de/josmfile?page=Presets/Wikidata&zip=1

Map paint styles:
+ https://josm.openstreetmap.de/josmfile?page=Styles/PublicTransport&zip=1
+ https://josm.openstreetmap.de/josmfile?page=Styles/Landcover&zip=1

Validator rules:
+ https://github.com/Jungle-Bus/transport_mapcss/raw/gh-pages/transport.validator.zip
+ https://josm.openstreetmap.de/josmfile?page=Rules/KeepRight&zip=1
+ https://josm.openstreetmap.de/josmfile?page=Rules/FranceSpecificRules&zip=1
+ https://josm.openstreetmap.de/josmfile?page=Rules/SuspiciousSwimming_Pool&zip=1
+ https://josm.openstreetmap.de/josmfile?page=Rules/SourceObjectTag&zip=1
+ https://josm.openstreetmap.de/josmfile?page=Rules/QAToolInspiredValidations&zip=1
+ https://josm.openstreetmap.de/josmfile?page=Rules/IndoorRules&zip=1
+ https://josm.openstreetmap.de/josmfile?page=Rules/MissingOpeningHours&zip=1
+ https://raw.github<user.name>content.com/stefan-a-bauer/josm-validators/master/mtb.validator.mapcss
+ https://www.openrailwaymap.org/validator/openrailwaymap.validator.mapcss
+ https://josm.openstreetmap.de/josmfile?page=Rules/OSMLint&zip=1
+ https://josm.openstreetmap.de/josmfile?page=Rules/Pictures&zip=1
+ https://josm.openstreetmap.de/josmfile?page=Rules/MissingWeekdays&zip=1
+ https://raw.github<user.name>content.com/osmlu/josm-validator-luxembourg/master/Luxembourg-Specific-Rules.validator.mapcss
+ https://raw.github<user.name>content.com/OpenNauticalChart/josm/master/Seamark.validator.mapcss

Last errors/warnings:
- 00985.074 W: javax.net.ssl.SSLHandshakeException: No trusted certificate found. Cause : sun.security.validator.ValidatorException: No trusted certificate found
- 00985.075 E: javax.net.ssl.SSLHandshakeException: No trusted certificate found. Cause : sun.security.validator.ValidatorException: No trusted certificate found
- 01025.287 W: javax.net.ssl.SSLHandshakeException: No trusted certificate found. Cause : sun.security.validator.ValidatorException: No trusted certificate found
- 01025.288 W: Already here sun.security.validator.ValidatorException: No trusted certificate found
- 01025.288 E: javax.net.ssl.SSLHandshakeException: No trusted certificate found. Cause : sun.security.validator.ValidatorException: No trusted certificate found
- 01027.179 E: org.openstreetmap.josm.io.OsmTransferException: javax.net.ssl.SSLHandshakeException: No trusted certificate found. Cause : javax.net.ssl.SSLHandshakeException: No trusted certificate found. Cause : sun.security.validator.ValidatorException: No trusted certificate found
- 01027.237 E: Exception I/O - <html>Impossible dʼenvoyer ou de recevoir des données depuis<br>'https://api.openstreetmap.org/api/0.6/'<br>dû à un problème de transfert de données.<br>Details (non traduit): No trusted certificate found</html>
- 01077.524 W: javax.net.ssl.SSLHandshakeException: No trusted certificate found. Cause : sun.security.validator.ValidatorException: No trusted certificate found
- 01077.524 W: Already here sun.security.validator.ValidatorException: No trusted certificate found
- 01077.525 E: javax.net.ssl.SSLHandshakeException: No trusted certificate found. Cause : sun.security.validator.ValidatorException: No trusted certificate found

[taylor.smock]

Identification: JOSM/1.5 (18701 fr) Linux CentOS Linux release 7.9.2009 (Core)
Memory Usage: 365 MB / 1717 MB (124 MB allocated, but free)
Java version: 1.8.0_362-b08, Red Hat, Inc., OpenJDK 64-Bit Server VM
[...snip...]
Last errors/warnings:
- 00985.074 W: javax.net.ssl.SSLHandshakeException: No trusted certificate found. Cause : sun.security.validator.ValidatorException: No trusted certificate found

This is probably a problem with your operating system and/or your operating system Java install. There isn't a stack trace, so I cannot be certain, but I'd put good odds on Java looking for a root certificate and not finding it in the certificate store that Java uses on CentOS (probably the system certificate store).

1. Check that your system fully up to date
2. I don't know if Java 17 is available in CentOS 7 (I hope it is), but try using it (sudo yum install java-17-openjdk). If it isn't, try Java 11. Please note that JOSM is looking at moving to Java 17, so you will have to do that sooner or later.

Please let us know if either step fixed your problem.

EDIT: Relevant StackOverflow question: ​https://stackoverflow.com/questions/69192703/java-8-no-trusted-certificate-found-on-https-requests .

[marc_marc]

1. my system is fully uptodate
2. thanks for the url. in lib/security cacerts link to /etc/pki/ca-trust/extracted/java/cacerts
3. java 17 isn't available in RHeL7/centos7 (it's a LTS os, not a rolling release nor a dev)
4. java 11 installed but icedtea doesn't used it, see my other ticket that

[taylor.smock]

I just installed CentOS 7 in a VM, and I did not see the same issue you encountered with Java 8 (java -jar).

Your system got messed up somehow. You can try ​resetting the CA certificates, but I have no clue if that will actually solve your problem.

Run keytool -list -keystore /etc/pki/java/cacerts -storepass changeit |& head. In my CentOS 7 VM, there were 136 entries.

In any case, this is definitely a problem with your system; we cannot fix it in JOSM. If resetting the CA certificates does not work, please contact support for your operating system. They are much more likely to know about random trivia (like "that update from <x> months ago borked ca updates").