When loading web resources via a secured https connection, the website's Security Certificate must be available to the Oracle's Java Runtime Engine used by Orbit.
Oracle includes certificates from widely recognized Certificate Authorities with a significant customer base and global reach.
Orbit embeds the most recent Jre available at release of a new version.
More information about Security Certificates and Java Keystore :
Following exception is printed in the Orbit logfile if a certificate is missing :
javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
Steps to add a certificate to the Java Keystore used by Orbit.
Browse to the secured website and download the certificate file via the browser's certificates manager.
DER Encoded Binairy X.509 (CER)
From command line.
Go to Orbit's Jre bin directory.
On Windows
<Orbit Installation Directory>/client/program/jre64/bin/
<Orbit Installation Directory>/server/program/jre64/bin/
<Orbit Installation Directory>/program/jre/bin/
Execute following command :
keytool -import -alias <Alias> -keystore ..\lib\security\cacerts -file <File Directory>\<Filename>.cer
changeit
, requested after prompt.
After confirmation and entering the password the message Certificate was added to keystore
should be printed.