liza_s
(Liza S)
November 6, 2025, 3:27pm
1
Which IIQ version are you inquiring about?
8.3
Share all details about your problem, including any error messages you may have received.
I’m connecting an application that has a self-signed certificate to IIQ using a web service connector.
When running aggregation, I’m getting the following error:
Exception occurred in Test Connection.Url: https://<MY_HOST>:<MY_PORT>/get/accounts, Message: 0 : javax.net.ssl.SSLHandshakeException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target, HTTP Error Code: 0
Is there a way to disable certification validation altogether for a specific app?
Is there a property I can set on the application to achieve it?
I’m aware of the following thread, but I would like to avoid adding our self-signed certificate to IIQ’s trust store.
Dear Team,
I am using Delinea connector to connect with Delinea secret Server . when I am calling test connection function its throwing SSL handshake exception. Do we have any way to bypass/whitelist SSL communication in IDN connector to avoid current situation?.
I am getting below error message. Kindly suggest with possible way.
“Error while performing operation : Test Connection Error code : 0 javax.net.ssl.SSLHandshakeException: PKIX path building failed: sun.security.provider.certpath.…
Hi,
I’m currently getting this error (Exception occurred in Test Connection.Url: null, Message: javax.net.ssl.SSLHandshakeException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target, HTTP Error Code: 0) when trying to call an API.
Note: I have already added the self-signed SSL certificate to our server’s trust store.
Are we getting this error because Sailpoint doesn’t trust the self-signed certif…
amit_1140
(Amit Kumar)
November 6, 2025, 3:39pm
2
@liza_s -
In that case you need to hit the non-ssl port for the webservice endpoint -
I can see you are hitting https://<MY_HOST>:<MY_PORT>/get/accounts
Ask the application team for a temporary non-SSL (HTTP) endpoint
msingh900
(Manish Singh)
November 7, 2025, 7:38am
3
Use a non-SSL URL or ask your network team to configure a non-SSL port and allow its use.
system
(system)
Closed
January 6, 2026, 7:39am
4
This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.