报错信息:
javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
- 将MinIO证书导入Java信任库
# 登录宝塔终端,执行以下命令:
# 从MinIO服务器导出证书(替换为你的MinIO地址)
openssl s_client -connect feituplan.com:9000 -showcerts </dev/null 2>/dev/null | \
openssl x509 -outform PEM > /www/server/java/minio.crt
# 找到Java安装路径(宝塔默认路径)
JAVA_HOME=/www/server/java/jdk1.8.0_371 # 根据实际版本调整
# 导入证书到Java默认信任库
keytool -importcert \
-alias minio \
-file /www/server/java/minio.crt \
-keystore $JAVA_HOME/jre/lib/security/cacerts \
-storepass changeit # 默认密码
#执行后会出现以下命令输入yes信任即可
Trust this certificate? [no]: yes
添加到系统信任库
# Ubuntu/Debian
sudo cp minio.crt /usr/local/share/ca-certificates/
sudo update-ca-certificates
# CentOS/RHEL
sudo cp minio.crt /etc/pki/ca-trust/source/anchors/
sudo update-ca-trust
- 重启Java项目
重启完java项目即可完成https信任