SSL fails with on JBoss EAP with "java.security.InvalidAlgorithmParameterException: the trustAnchors parameter must be non-empty", Empty TrustStore

Solution Verified - Updated -

Issue

  • We are seeing this error right after deploying our application:

    ERROR [stderr] (pool-12-thread-1) javax.net.ssl.SSLException: java.lang.RuntimeException: Unexpected error: java.security.InvalidAlgorithmParameterException: the trustAnchors parameter must be non-empty
    

    or

    Caused by: java.lang.RuntimeException: Unexpected error: java.security.InvalidAlgorithmParameterException:
    the trustAnchors parameter must be non-empty
        at sun.security.validator.PKIXValidator.<init>(Unknown Source)
        at sun.security.validator.Validator.getInstance(Unknown Source)
        at sun.security.ssl.X509 TrustManagerImpl.getValidator(Unknown Source)
        at sun.security.ssl.X509 TrustManagerImpl.checkTrustedInit(Unknown Source)
        at sun.security.ssl.X509 TrustManagerImpl.checkTrusted(Unknown Source)
        at sun.security.ssl.X509 TrustManagerImpl.checkServerTrusted(Unknown Source)
        at sun.security.ssl.ClientHandshaker.serverCertificate(Unknown Source)
        at sun.security.ssl.ClientHandshaker.processMessage(Unknown Source)
        at sun.security.ssl.Handshaker.processLoop(Unknown Source)
        at sun.security.ssl.Handshaker.process_record(Unknown Source)
        at sun.security.ssl.SSLSocketImpl.readRecord(Unknown Source)
        at sun.security.ssl.SSLSocketImpl.performInitialHandshake(Unknown Source)
        at sun.security.ssl.SSLSocketImpl.writeRecord(Unknown Source)
        ... 38 more
    

Environment

  • Red Hat JBoss Enterprise Application Platform (EAP)
    • 5
    • 6
    • 7
  • SSL Connections
  • Custom or Modified Trust Store

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase of over 48,000 articles and solutions.

Current Customers and Partners

Log in for full access

Log In