SSL Certificate to Java Keystore

When loading web resources via a secured https connection, the website's Security Certificate must be available to the Oracle's Java Runtime Engine used by Orbit.
Oracle includes certificates from widely recognized Certificate Authorities with a significant customer base and global reach.
Orbit embeds the most recent Jre available at release of a new version.

More information about Security Certificates and Java Keystore :

• https://www.oracle.com/technetwork/java/javase/javasecarootcertsprogram-1876540.html
• https://en.wikipedia.org/wiki/Keystore
• https://en.wikipedia.org/wiki/Certificate_authority

Following exception is printed in the Orbit logfile if a certificate is missing :

javax.net.ssl.SSLHandshakeException: 
sun.security.validator.ValidatorException: PKIX path building failed
sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

Steps to add a certificate to the Java Keystore used by Orbit.

Browse to the secured website and download the certificate file via the browser's certificates manager.

• File format : DER Encoded Binairy X.509 (CER)

From command line.

Go to Orbit's Jre bin directory.
On Windows

• Client/Server
  <Orbit Installation Directory>/client/program/jre64/
<Orbit Installation Directory>/server/program/jre64/
• Standalone
  <Orbit Installation Directory>/program/jre/

Execute following command :

keytool -import -alias <Alias> -keystore ..\lib\security\cacerts -file <File Directory>\<Filename>.cer

• Alias : free of choice
• Password : default, changeit, requested after prompt.

After confirmation and entering the password the message Certificate was added to keystore should be printed.