SSL 访问第三方系统证书问题

[2023-06-20 16:59:13.806]-[]-[http-nio-8080-exec-8]-[DEBUG]-[com.wise.aiaadmin.sys.dao.DictDao.selectList] - <==      Total: 1
[2023-06-20 16:59:13.828]-[]-[http-nio-8080-exec-8]-[INFO]-[com.wise.aiacore.util.URLToServlet] - Result4++++javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
[2023-06-20 16:59:13.830]-[]-[http-nio-8080-exec-8]-[ERROR]-[com.wise.aiacore.shiro.config.MyExceptionHandler] - Context
java.lang.Exception: 访问失败
    at com.wise.aiacore.util.URLToServlet.getResult4(URLToServlet.java:326)
    at com.wise.aiaadmin.util.OneServiceUtil.getOneServiceResponse(OneServiceUtil.java:186)
    at com.wise.aiaadmin.util.OneServiceUtil.requestService(OneServiceUtil.java:85)
    at com.wise.aiaadmin.cases.service.impl.CaseClientAuthImpl.changeNewManageInfoOutputOneservice(CaseClientAuthImpl.java:728)
    at com.wise.aiaadmin.cases.service.impl.CaseClientAuthImpl.getInsureInfoByRequest(CaseClientAuthImpl.java:588)
    at com.wise.aiaadmin.cases.service.impl.CaseClientAuthImpl.getInsureInfo(CaseClientAuthImpl.java:473)
    at com.wise.aiaadmin.cases.service.impl.CaseClientAuthImpl$$FastClassBySpringCGLIB$$2ac78852.invoke(<generated>)
    at org.springframework.cglib.proxy.MethodProxy.invoke(MethodProxy.java:204)
    at org.springframework.aop.framework.CglibAopProxy$DynamicAdvisedInterceptor.intercept(CglibAopProxy.java:669)
    at com.wise.aiaadmin.cases.service.impl.CaseClientAuthImpl$$EnhancerBySpringCGLIB$$c08f13ff.getInsureInfo(<generated>)
    at com.wise.aiaadmin.cases.api.controller.CaseClientAuthController.getInsureInfo(CaseClientAuthController.java:104)
    at com.wise.aiaadmin.cases.api.controller.CaseClientAuthController$$FastClassBySpringCGLIB$$9fbabb77.invoke(<generated>)
    at org.springframework.cglib.proxy.MethodProxy.invoke(MethodProxy.java:204)
    at org.springframework.aop.framework.CglibAopProxy$CglibMethodInvocation.invokeJoinpoint(CglibAopProxy.java:738)
    at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:157)
    at org.springframework.aop.aspectj.MethodInvocationProceedingJoinPoint.proceed(MethodInvocationProceedingJoinPoint.java:85)
    at com.wise.log.aop.AuditLogAop.recordSysLog(AuditLogAop.java:48)
    at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
    at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
    at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
    at java.lang.reflect.Method.invoke(Method.java:498)
    at org.springframework.aop.aspectj.AbstractAspectJAdvice.invokeAdviceMethodWithGivenArgs(AbstractAspectJAdvice.java:629)
    at org.springframework.aop.aspectj.AbstractAspectJAdvice.invokeAdviceMethod(AbstractAspectJAdvice.java:618)
    at org.springframework.aop.aspectj.AspectJAroundAdvice.invoke(AspectJAroundAdvice.java:70)
 

解决方案:往JDK导入相关接口证书

先下载证书

 将下载下来的证书改后缀为.cer

再将证书导入jdk

证书
keytool -import -file 证书地址 -keystore 目标地址 -alias 别名
keytool -import -file  D:\cn.oneservice-st3.aia.biz.cer  -keystore D:\jdk1.8.0_144\jre\lib\security\cacerts -alias one.aia 
密钥库密码：-changeit
信任此证书吗？-Y
或者直接执行
keytool -import -file  D:\cn.oneservice-st3.aia.biz.cer  -keystore D:\jdk1.8.0_144\jre\lib\security\cacerts -alias one.aia -storepass changeit -noprompt