HI Rod,

I had the same problem.  Make sure you have the latest EGI trust anchors installed on the publishing machine.  Guess the host certificate changed at RAL?

Leslie

On 4/27/2012 8:43 AM, Rodney Walker wrote:
[log in to unmask]" type="cite">Hi,
I followed to glite to emi upgrade instructions for APEL, and now have

Fri Apr 27 12:38:25 UTC 2012: apel-publisher - Finding all records in local database sin
ce the last successful publish timestamp : 2012-04-14 05:51:14
Fri Apr 27 12:39:34 UTC 2012: apel-publisher - Record/s found in local database: 10949
Caught: javax.jms.JMSException: Could not connect to broker URL: ssl://apel-broker.esc.r
l.ac.uk:61617. Reason: javax.net.ssl.SSLHandshakeException: sun.security.validator.Valid
atorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuil
derException: unable to find valid certification path to requested target
javax.jms.JMSException: Could not connect to broker URL: ssl://apel-broker.esc.rl.ac.uk:
61617. Reason: javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorExce
ption: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderExcep
tion: unable to find valid certification path to requested target


To be fair, I had this before the attempted upgrade - hence the upgrade.

The host cert is valid.
# rpm -qa | grep java
mysql-connector-java-5.1.12-2.el5
java-1.6.0-openjdk-1.6.0.0-1.25.1.10.6.el5_8
java-1.6.0-openjdk-devel-1.6.0.0-1.25.1.10.6.el5_8
java-1.4.2-gcj-compat-1.4.2.0-40jpp.115
tzdata-java-2012b-3.el5

I think I forced it to use 1.6.o java and keytool.

Cheers,
Rod


--
Tel. +49 89 289 14152