PKIX path building failed: means you haven't imported your SSL cert from the administration console to your local jenkins server. See instructions for details.

Greg, thanks a lot for your quick response,
Let me explain what process we followed,
Say our build server as B and deployment server as D, which are on different hosts.
1)had copied the required jars(com.ibm.ws.admin.client_8.0.0.jar, com.ibm.ws.orb_8.0.0.jar) from D server to B server into the location specified as in the plugin doc.
2)had copied the DummyClientKeyFile.jks, DummyClientTrustFile.jks from D server to B server to certain location and given that path in the Job config.
3)had imported DummyClientTrustFile.jks to Java_home/jre/lib/security/cacerts.jks
4)had imported the websphere admin console url certificate of D server to Java_home/jre/lib/security/cacerts.jks in B server(suggested by you).

But Still the problem persists,
appreciate your help,

thanks,
Vamsi

Vamsi,

Open up your browser and point to your WebSphere Administration Console via https. Export the certificate using Google Chrome or some other browser. Import this certificate into the /jre/lib/security/cacerts file as well. You must also make sure the "cacerts" file is in the correct JRE that Jenkins is using. Also, you're comments say your using "cacerts.jks" which is not the same as "cacerts". You can also try the InstallCert.java option which is defined in the "WebSphere Liberty" documentation. Let me know if this works.

Greg,
What you said is correct, i had imported to cacerts.jks(custom one created).
Now,
1)i had correctly imported DummyClientTrustFile.jks to Java_home/jre/lib/security/cacerts
2)downloaded the installcert compiled it and run, and copied the generated jssecacerts file to cacerts location
java InstallCert <D server hostname>:9043

But here, let me clarify you that i am using IBM WebSphere Application Server config, It may be out of context but could you please rectify once on what basis should we choose between liberty profile or Application Server

Greg,
Sorry haven't mentioned, still it is not working

Vamsi,

I understand you're using IBM WebSphere Application Server. I just wanted to see if the InstallCert helped you. WebSphere Liberty Profile is a different EE container from WAS. You'll know you're using WLP because it's totally different.

Another user suggested using JCE inside of WebSphere Application Server. It's definitely an SSL permissions issue from your error log. If WebSphere's cert was changed to use another one other than the Dummy* cert, you'll need to import that one instead. Keep me updated.

Hi Guys;

Hope all is well at your end.

Im facing the same problem, i can't deploy in was 7 using this plugin.

Do we have any fix for this issue?!?

Thank you very much for your help.

Kind Regards

Amin

@mohamed amin mengat,

1) Navigate to the websphere admin console with your browser. You will likely get a permissions issue that the certificate is not trusted by your browser.
2) This permissions issue means the default certificate by websphere is a "self signed" certificate.

3) You must either import WebSphere's "Self Signed" cert by exporting it from the browser and importing it into the JVM that jenkins is using
or
4) Provide a valid cert for websphere

Hi All,

I am having the same issue... I was trying to install an SSL Certificate in IBM Websphere and because I was not having success I removed the certificate in Websphere console.
When I restarted the Dmgr, node etc... I started to have this very annoying problem.
I can log in the BPM Portal, BPM Admin Console and BPM Process Center BUT I cannot login in the Websphere Admin Console. "Page not found" it is what is being shown and in the log I find this message. I also have problems when I stop the Dmgr...

Can anyone give me some tips?

Thanks in advance.

Regards,
John