[OpenStreetMap] #5284: Invalid HTTPS certificate

[OpenStreetMap]

#5284: Invalid HTTPS certificate
----------------------+-------------------------
 Reporter:  don-vip   |      Owner:  rails-dev@…
     Type:  defect    |     Status:  new
 Priority:  critical  |  Milestone:
Component:  website   |    Version:
 Keywords:  https     |
----------------------+-------------------------
 Something has changed today on the HTTPS certificate used by the OSM API,
 and it is no more possible to access it with JOSM and latest version of
 Java (8u31):

 {{{
 javax.net.ssl.SSLHandshakeException:
 sun.security.validator.ValidatorException: PKIX path building failed:
 sun.security.provider.certpath.SunCertPathBuilderException: unable to find
 valid certification path to requested target
         at sun.security.ssl.Alerts.getSSLException(Alerts.java:192)
         at sun.security.ssl.SSLSocketImpl.fatal(SSLSocketImpl.java:1937)
         at sun.security.ssl.Handshaker.fatalSE(Handshaker.java:302)
         at sun.security.ssl.Handshaker.fatalSE(Handshaker.java:296)
         at
 sun.security.ssl.ClientHandshaker.serverCertificate(ClientHandshaker.java:1478)
         at
 sun.security.ssl.ClientHandshaker.processMessage(ClientHandshaker.java:212)
         at sun.security.ssl.Handshaker.processLoop(Handshaker.java:957)
         at sun.security.ssl.Handshaker.process_record(Handshaker.java:892)
         at
 sun.security.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:1050)
         at
 sun.security.ssl.SSLSocketImpl.performInitialHandshake(SSLSocketImpl.java:1363)
         at
 sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1391)
         at
 sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1375)
         at
 sun.net.www.protocol.https.HttpsClient.afterConnect(HttpsClient.java:563)
         at
 sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.connect(AbstractDelegateHttpsURLConnection.java:185)
         at
 sun.net.www.protocol.https.HttpsURLConnectionImpl.connect(HttpsURLConnectionImpl.java:153)
         at
 org.openstreetmap.josm.io.OsmServerReader.getInputStreamRaw(OsmServerReader.java:158)
         ... 13 more
 Caused by: sun.security.validator.ValidatorException: PKIX path building
 failed: sun.security.provider.certpath.SunCertPathBuilderException: unable
 to find valid certification path to requested target
         at
 sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:387)
         at
 sun.security.validator.PKIXValidator.engineValidate(PKIXValidator.java:292)
         at sun.security.validator.Validator.validate(Validator.java:260)
         at
 sun.security.ssl.X509TrustManagerImpl.validate(X509TrustManagerImpl.java:324)
         at
 sun.security.ssl.X509TrustManagerImpl.checkTrusted(X509TrustManagerImpl.java:229)
         at
 sun.security.ssl.X509TrustManagerImpl.checkServerTrusted(X509TrustManagerImpl.java:124)
         at
 sun.security.ssl.ClientHandshaker.serverCertificate(ClientHandshaker.java:1460)
         ... 24 more
 Caused by: sun.security.provider.certpath.SunCertPathBuilderException:
 unable to find valid certification path to requested target
         at
 sun.security.provider.certpath.SunCertPathBuilder.build(SunCertPathBuilder.java:145)
         at
 sun.security.provider.certpath.SunCertPathBuilder.engineBuild(SunCertPathBuilder.java:131)
         at
 java.security.cert.CertPathBuilder.build(CertPathBuilder.java:280)
         at
 sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:382)
         ... 30 more
 }}}

 Looking at https://api.openstreetmap.org with Chrome, I have a similar
 warning as well, about untrust certificate.

--
Ticket URL: <https://trac.openstreetmap.org/ticket/5284>
OpenStreetMap <http://www.openstreetmap.org/>
OpenStreetMap is a free editable map of the whole world