Unable to find valid sertification path to requested target

[ddoroshenko (Dmitriy)]

Hi,

I have a watcher with webhook action. And get an error when the watcher is firing

"type": "s_s_l_handshake_exception",
"reason": " PKIX path building failed: sun.security.provider.certpath.SunCertPathBuildException: unable to find valid sertification path to requested target"

I have the following configuration in my elasticsearch.yaml file

xpack:
  security:
    http:
      ssl:
        enabled: false
        certification_authorities:
        - /path/to/ca_root.pem
        - /path/to/sub_ca.pem

Both certificates have r permissions for the ES user

What could be a problem?

[Yang_Wang]

You got the error because watcher did not trust the certificate provided by the server which the webhook action tries to hit. It has nothing to do with xpack.security.http.ssl.xxx configuration. Please refer to the watcher specific SSL documentation to configure the SSL trust.

[ddoroshenko (Dmitriy)]

@Yang_Wang thank you very much! Now it works