client error: unable to find valid certification path to requested target

[Ravi Danum]

Hello,

I get the following error when trying to run a java client which accesses a web service installed in tomcat/axis.

javax.net.ssl.SSLHandShakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath. SunCertPathBuilderException: unable to find valid certification path to requested target.

I ran: keytool -genkey -alias tomcat -keyalg RSA

on my client machine. I also ran the same exact command on the machine where Tomcat is running.

In my client code, I set the following System properties:

javax.net.ssl.trustStore=<location of my .keystore>
javax.net.ssl.trustStorePassword=changit
javax.net.ssl.keyStore=<location of my .keystore>
javax.net.ssl.keyStorePassword=changeit

What I want is client authentication via a certificate when accessing the web service on tomcat/axis.

In the tomcat server.xml file, what should I set the keystore and truststore attributes to?

Thanks so much in advance for your kind and informative responses.

-Ravi