JDK 解決證書不受信異常

解決jdk ssl PKIX path building failed異常

ssl證書ca比較新或自行頒發的證書，jdk不受信任
<br>
javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

一、使用瀏覽器導出證書

二、導入jdk

cd $JAVA_HOME/jre/lib/security
cp cacerts cacerts.bak
keytool -import -alias dangdang.com -keystore cacerts -file /tmp/dangdang.cer
輸入密碼，keystore默認密碼是changeit

三、重啓服務生效

重啓後會應用導入後的keystore