<!DOCTYPE html>
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<p>Dear list,</p>
<p>I am replying to myself, to report the solution that I found for
the issue. <br>
</p>
<p>The problem was that as java version we are using is old (8u131),
and it had no support for more recent SSL certificates used by the
GBIF. The solution was to update java to recognize the GBIF
certificate. For that, I followed the directions by
<a class="moz-txt-link-freetext" href="https://magicmonster.com/kb/prg/java/ssl/pkix_path_building_failed/">https://magicmonster.com/kb/prg/java/ssl/pkix_path_building_failed/</a>.</p>
<p>Before doing that, I also updated java to a more recent version
(8u402), by Amazon Correto, as pointed out by colleagues from GBIF
France, but it seemed that alone this was not to be sufficient to
solve the problem.</p>
<p>Best,</p>
<p>Rui<br>
</p>
<pre class="moz-signature" cols="72">------------------
Rui Figueira
Coordenador do Nó Português do GBIF
<a class="moz-txt-link-abbreviated" href="mailto:ruifigueira@isa.ulisboa.pt">ruifigueira@isa.ulisboa.pt</a>
Instituto Superior de Agronomia
Herbário
Tapada da Ajuda, 1349-017 Lisboa, Portugal
Tel. +351 213653165 | Fax. +351 213653195
<a class="moz-txt-link-freetext" href="http://www.gbif.pt">http://www.gbif.pt</a>
<a class="moz-txt-link-freetext" href="http://www.isa.ulisboa.pt">http://www.isa.ulisboa.pt</a></pre>
<div class="moz-cite-prefix">On 4/3/24 18:00, Rui Figueira via IPT
wrote:<br>
</div>
<blockquote type="cite"
cite="mid:ab7a6729-db54-4740-9764-2029db13940c@isa.ulisboa.pt">
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
<p>Dear IPT list,</p>
<p>My IPT 2.7.6 installation on a debian server with java JRE 8
and tomcat7 show the following error:<br>
</p>
<p><font face="monospace">An IO error occurred while trying to
communicate with the GBIF Registry. [<a
class="moz-txt-link-freetext"
href="https://gbrds.gbif.org/registry/network.json"
moz-do-not-send="true">https://gbrds.gbif.org/registry/network.json</a>]</font><br>
</p>
<p>When I did a restart of the tomcat service, I got the following
error in the log file</p>
<pre id="logs">ERROR 03-Apr-2024 17:29:35 [org.gbif.ipt.service.admin.impl.VocabulariesManagerImpl] - An IO error occurred while trying to communicate with the GBIF Registry. [<a
class="moz-txt-link-freetext"
href="https://gbrds.gbif.org/registry/thesauri.json"
moz-do-not-send="true">https://gbrds.gbif.org/registry/thesauri.json</a>]
org.gbif.ipt.service.RegistryException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target</pre>
<p>As a consequence, the IPT is unable to show any of the existing
resources. <br>
</p>
<p>Have you seen this error, and know how to solve it? Notice that
the server has no ssl certificate installed.<br>
</p>
<p>Thanks,</p>
<p>Rui<br>
</p>
<p>-- </p>
<pre class="moz-signature" cols="72">------------------
Rui Figueira
Coordenador do Nó Português do GBIF
<a class="moz-txt-link-abbreviated moz-txt-link-freetext"
href="mailto:ruifigueira@isa.ulisboa.pt" moz-do-not-send="true">ruifigueira@isa.ulisboa.pt</a>
Instituto Superior de Agronomia
Herbário
Tapada da Ajuda, 1349-017 Lisboa, Portugal
Tel. +351 213653165 | Fax. +351 213653195
<a class="moz-txt-link-freetext" href="http://www.gbif.pt"
moz-do-not-send="true">http://www.gbif.pt</a>
<a class="moz-txt-link-freetext" href="http://www.isa.ulisboa.pt"
moz-do-not-send="true">http://www.isa.ulisboa.pt</a></pre>
<br>
<fieldset class="moz-mime-attachment-header"></fieldset>
<pre class="moz-quote-pre" wrap="">_______________________________________________
IPT mailing list
<a class="moz-txt-link-abbreviated" href="mailto:IPT@lists.gbif.org">IPT@lists.gbif.org</a>
<a class="moz-txt-link-freetext" href="https://lists.gbif.org/mailman/listinfo/ipt">https://lists.gbif.org/mailman/listinfo/ipt</a>
</pre>
</blockquote>
</body>
</html>