I am importing the Salesforce SSL certs for the test.salesforce.com and our sandbox environment using the commands below in a VM server environment.
Import test.salesforce.com or login.salesforce.com cert based on the box being hit
- java -jar InstallCert.jar test.salesforce.com
- keytool -exportcert -alias test.salesforce.com-1 -keystore jssecacerts -storepass changeit -file testsalesforcecom.cer
- C:/Software/jdk1.8.0_251/jre/lib/security/cacerts -storepass changeit -file testsalesforcecom.cer
Import sandbox specific cert (Example SIT)
- java -jar InstallCert.jar sandbox-domain.my.salesforce.com
- keytool -exportcert -alias sandbox-domain.my.salesforce.com-1 -keystore jssecacerts -storepass changeit -file sitsalesforce.cer
- keytool -importcert -alias sandbox-domain.my.salesforce.com -keystore C:/Software/jdk1.8.0_251/jre/lib/security/cacerts -storepass changeit -file sitsalesforce.cer
Importing the certificates for the urls works the current day but next day the outbound bulk api authentication call fails with a certificate path error: Exception: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
Are we importing the correct SSL cert to add to the trust store? Any help would be greatly appreciated.