Error getting layers: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

[kronberger]

What steps will reproduce the problem?

1. Add a new WMTS layer
2. Type this URL in: ​https://basemap.asig.gov.al/server/rest/services/Basemap_03_2023_V1/MapServer/WMTS?

What is the expected result?

Imagery should display, as it was earlier the case.

What happens instead?

I get this error.

Please provide any additional information below. Attach a screenshot if possible.

Revision:19096
Build-Date:2024-06-04 11:22:39

Identification: JOSM/1.5 (19096 de) Windows 10 64-Bit
OS Build number: Windows 10 Home 22H2 (19045)
Memory Usage: 382 MB / 4056 MB (144 MB allocated, but free)
Java version: 21.0.3+9-LTS, Azul Systems, Inc., OpenJDK 64-Bit Server VM
Look and Feel: com.sun.java.swing.plaf.windows.WindowsLookAndFeel
Screen: \Display0 1920×1080 (scaling 1.00×1.00)
Maximum Screen Size: 1920×1080
Best cursor sizes: 16×16→32×32, 32×32→32×32
System property file.encoding: UTF-8
System property sun.jnu.encoding: Cp1252
Locale info: de_DE
Numbers with default locale: 1234567890 -> 1234567890
VM arguments: [-Djpackage.app-version=1.5.19096, --add-modules=java.scripting,java.sql,javafx.controls,javafx.media,javafx.swing,javafx.web, --add-exports=java.base/sun.security.action=ALL-UNNAMED, --add-exports=java.desktop/com.sun.imageio.plugins.jpeg=ALL-UNNAMED, --add-exports=java.desktop/com.sun.imageio.spi=ALL-UNNAMED, --add-opens=java.base/java.lang=ALL-UNNAMED, --add-opens=java.base/java.nio=ALL-UNNAMED, --add-opens=java.base/jdk.internal.loader=ALL-UNNAMED, --add-opens=java.base/jdk.internal.ref=ALL-UNNAMED, --add-opens=java.desktop/javax.imageio.spi=ALL-UNNAMED, --add-opens=java.desktop/javax.swing.text.html=ALL-UNNAMED, --add-opens=java.prefs/java.util.prefs=ALL-UNNAMED, -Djpackage.app-path=%UserProfile%\AppData\Local\JOSM\JOSM.exe]

Plugins:
+ AddrInterpolation (36226)
+ BuildingGeneralization (36)
+ FixAddresses (36258)
+ HouseNumberTaggingTool (36226)
+ Tracer2 (36205)
+ apache-commons (36273)
+ buildings_tools (36226)
+ changeset-viewer (0.0.7)
+ continuosDownload (103)
+ ejml (36176)
+ geotools (36273)
+ imagery-xml-bounds (36196)
+ jackson (36273)
+ jaxb (36118)
+ jts (36004)
+ opendata (36256)
+ utilsplugin2 (36241)

Last errors/warnings:
- 00000.557 W: extended font config - overriding 'filename.Malgun_Gothic=malgun.ttf' with 'MALGUN.TTF'
- 00000.559 W: extended font config - overriding 'filename.Myanmar_Text=mmrtext.ttf' with 'MMRTEXT.TTF'
- 00000.560 W: extended font config - overriding 'filename.Mongolian_Baiti=monbaiti.ttf' with 'MONBAITI.TTF'
- 00001.002 E: java.security.KeyStoreException: Windows-ROOT not found. Ursache: java.security.NoSuchAlgorithmException: Windows-ROOT KeyStore not available
- 00019.463 E: Invalid setting (Icon missing): org.openstreetmap.josm.plugins.fixAddresses.FixAddressesPreferences
- 00029.597 W: javax.net.ssl.SSLHandshakeException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target. Ursache: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target. Ursache: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

[taylor.smock]

Closed as duplicate of #20250.
Much like #20250, this is a server-side issue. Specifically, ​https://www.ssllabs.com/ssltest/analyze.html?d=basemap.asig.gov.al indicates that (like geoportal.asig.gov.al in #20250) basemap.asig.gov.al does not have a complete certificate chain.