Unable to connect to SNAP supported plugins, PKIX path building failed

snap
1

When trying to access the SNAP plugins (or updates) I receive the following error:

Unable to connect to the SNAP Supported Plugins because of PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

Check your proxy settings or try again later. The server may be unavailable at the moment.

You may also want to make sure that your firewall is not blocking network traffic.

I believe this is due to a certification error with my organisation’s firewall. I have previously installed a certificate through jvm-keystore which worked for previous versions of SNAP. I know that SNAP 11.0 uses it’s own pre-packaged version of jre and can only imagine this is the cause for the above error.

In addition I am unable to open the proxy settings in the GUI and get the following output when opening SNAP in command line:

WARNING: An illegal reflective access operation has occurred
WARNING: Illegal reflective access by org.netbeans.ProxyURLStreamHandlerFactory (file:/opt/esa-snap/platform/lib/boot.jar) to field java.net.URL.handler

Any help would be greatly appreciated.

2

It seems my hunch was correct. I managed to solve this with the help of my institutions IT department.

The certificate can be added with keytool:

sudo keytool -import -trustcacerts -alias <calcert-name> -file <crt-file-location.crt> -keystore <esa-snap-directory>/jre/lib/security/cacerts

3

Thanks for sharing the solution! It’s helpful to know the certificate can be added using keytool. I’ll check with my IT team to try this for resolving the issue.