Issue

While calling an external service, and the service's certificate is about to expire, the following stack trace is shown in Studio Pro:

 java.security.PrivilegedActionException: javax.net.ssl.SSLHandshakeException: (certificate_unknown) PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
    at com.mendix.integration.util.PrivilegedUtil$$anonfun$withPrivileged$2.applyOrElse(PrivilegedUtil.scala:16)

Caused by:
null
    at com.mendix.integration.util.PrivilegedUtil$$anonfun$withPrivileged$2.applyOrElse(PrivilegedUtil.scala:16)

Caused by:
(certificate_unknown) PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
    at com.mendix.integration.util.PrivilegedUtil$$anonfun$withPrivileged$2.applyOrElse(PrivilegedUtil.scala:16)

Caused by:
PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
    at com.mendix.integration.util.PrivilegedUtil$$anonfun$withPrivileged$2.applyOrElse(PrivilegedUtil.scala:16)

Caused by:
unable to find valid certification path to requested target
    at com.mendix.integration.util.PrivilegedUtil$$anonfun$withPrivileged$2.applyOrElse(PrivilegedUtil.scala:16)

Environment

Studio Pro (all versions)

Applications hosted in Mendix on Kubernetes

Cause

Studio Pro uses local certificates configured in the app itself. Most likely, the service's certificate was not added correctly, or an invalid certificate was added. 

Solution / Workaround

To solve this error, the service's new root certificate authority should be added to the app's settings by following these steps:

1. In the App Explorer, go to App > Settings 
2. In the Certificates tab, add the certificate by following the steps described in Certificates Tab 

Additional information

Mendix documentation: App Settings | Certificates Tab