# Watcher - Email Sending Failure - SSLHandshakeException **URL:** \ **Category:** Elasticsearch\ **Tags:** elastic-stack-alerting\ **Created:** [June 11, 2015, 7:51pm UTC](https://discuss.elastic.co/t/watcher-email-sending-failure-sslhandshakeexception/2514 "2015-06-11T19:51:30Z")\ **Posts on this page:** 4\ **Page:** 1
**Author:** ![vilas](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/vilas/32/613_2.png) [@vilas](https://discuss.elastic.co/u/vilas)\ **Post date:** [June 11, 2015, 7:51pm UTC](https://discuss.elastic.co/t/watcher-email-sending-failure-sslhandshakeexception/2514/1 "2015-06-11T19:51:30Z")
Hi, I am trying to send an email using watcher. But getting the following error: ```auto [2015-06-11 14:49:04,837][ERROR][watcher.actions.email] [PVR-MASTER] failed to execute action [enabler_component_watch/email_administrator] org.elasticsearch.watcher.actions.email.service.EmailException: failed to send email with subject [Encountered 0 components] via account [exchange] at org.elasticsearch.watcher.actions.email.service.InternalEmailService.send(InternalEmailService.java:86) at org.elasticsearch.watcher.actions.email.service.InternalEmailService.send(InternalEmailService.java:78) at org.elasticsearch.watcher.actions.email.ExecutableEmailAction.execute(ExecutableEmailAction.java:64) at org.elasticsearch.watcher.actions.ActionWrapper.execute(ActionWrapper.java:100) at org.elasticsearch.watcher.execution.ExecutionService.executeInner(ExecutionService.java:340) at org.elasticsearch.watcher.execution.ExecutionService$WatchExecutionTask.run(ExecutionService.java:392) at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1145) at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615) at java.lang.Thread.run(Thread.java:745) Caused by: javax.mail.MessagingException: Could not convert socket to TLS; nested exception is: javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unabl e to find valid certification path to requested target at com.sun.mail.smtp.SMTPTransport.startTLS(SMTPTransport.java:1880) at com.sun.mail.smtp.SMTPTransport.protocolConnect(SMTPTransport.java:648) at javax.mail.Service.connect(Service.java:295) at org.elasticsearch.watcher.actions.email.service.Account.send(Account.java:99) at org.elasticsearch.watcher.actions.email.service.InternalEmailService.send(InternalEmailService.java:84) ... 8 more Caused by: javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: un able to find valid certification path to requested target at sun.security.ssl.Alerts.getSSLException(Alerts.java:192) at sun.security.ssl.SSLSocketImpl.fatal(SSLSocketImpl.java:1884) at sun.security.ssl.Handshaker.fatalSE(Handshaker.java:276) at sun.security.ssl.Handshaker.fatalSE(Handshaker.java:270) at sun.security.ssl.ClientHandshaker.serverCertificate(ClientHandshaker.java:1439) at sun.security.ssl.ClientHandshaker.processMessage(ClientHandshaker.java:209) at sun.security.ssl.Handshaker.processLoop(Handshaker.java:878) at sun.security.ssl.Handshaker.process_record(Handshaker.java:814) at sun.security.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:1016) at sun.security.ssl.SSLSocketImpl.performInitialHandshake(SSLSocketImpl.java:1312) at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1339) at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1323) at com.sun.mail.util.SocketFetcher.configureSSLSocket(SocketFetcher.java:507) at com.sun.mail.util.SocketFetcher.startTLS(SocketFetcher.java:447) at com.sun.mail.smtp.SMTPTransport.startTLS(SMTPTransport.java:1875) ... 12 more Caused by: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target at sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:385) at sun.security.validator.PKIXValidator.engineValidate(PKIXValidator.java:292) at sun.security.validator.Validator.validate(Validator.java:260) at sun.security.ssl.X509TrustManagerImpl.validate(X509TrustManagerImpl.java:326) at sun.security.ssl.X509TrustManagerImpl.checkTrusted(X509TrustManagerImpl.java:231) at sun.security.ssl.X509TrustManagerImpl.checkServerTrusted(X509TrustManagerImpl.java:126) at sun.security.ssl.ClientHandshaker.serverCertificate(ClientHandshaker.java:1421) ... 22 more Caused by: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target at sun.security.provider.certpath.SunCertPathBuilder.engineBuild(SunCertPathBuilder.java:196) at java.security.cert.CertPathBuilder.build(CertPathBuilder.java:268) at sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:380) ... 28 more ``` Request you to suggest what could be the issue. Thanks. ---
**Author:** ![uboness](https://avatars.discourse-cdn.com/v4/letter/u/96bed5/32.png) [@uboness](https://discuss.elastic.co/u/uboness)\ **Post date:** [June 12, 2015, 2:06pm UTC](https://discuss.elastic.co/t/watcher-email-sending-failure-sslhandshakeexception/2514/2 "2015-06-12T14:06:45Z")
Hi Vilas, I looks like your exchange server uses an unknown certificate (maybe self signed or signed by a non-commercial CA?). In the release we don't enable customizing the the keystore/truststore, though this is definitely on our roadmap. For now, try adding the following line under the `smtp` setting in your `exchange` email account settings: ``` ssl.trust: ``` where `` is you exchange host (or `*` to trust any host) ---
**Author:** ![vilas](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/vilas/32/613_2.png) [@vilas](https://discuss.elastic.co/u/vilas)\ **Post date:** [June 12, 2015, 6:01pm UTC](https://discuss.elastic.co/t/watcher-email-sending-failure-sslhandshakeexception/2514/3 "2015-06-12T18:01:56Z")
Thanks @uboness. For some reason issue got resolved on its own after a couple of restarts of elasticsearch. But your suggestion is good. I will try if I run into that again. ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [July 6, 2017, 1:49pm UTC](https://discuss.elastic.co/t/watcher-email-sending-failure-sslhandshakeexception/2514/4 "2017-07-06T13:49:32Z")