PROBLEM: Integration w/ SOAP Message and Certificates

[Carlos30]

Hello everyone!

Our team is working on a project based on a integration through SOAP Messages and also a certificate for the communication is needed.

Just to be sure, I will write down here every step we have made in the process. All the following process has been tested in SoapUI (so certificates, endpoints, etc are correct).

First of all, our client gave us a certificate .pfx. We uploaded it to ServiceNow by attaching it as PKCS12 Key Store type with its password. Apparently it's ok because SN says 'Valid pkcs12_key_store' (apparently, because w/ SN you never know.. ).

Afterwards, we created the SOAP Message:

• System Web Services > Outbound > SOAP Message ---- NEW
• We added the WSDL as xml.
• And we also added .xsd files as SOAP Message Imports.
• Generate sample SOAP Messages.
• Two Functions were created.

To finish the test configuration, we configured the SOAP Messages Functions:

• SOAP action. -- correct
• SOAP endpoint. -- correct
• Envelope (xml) -- copied from the SoapUI test.

When we run the Test we get this Response:

''javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target''.

Any idea of which could be the problem? Because it looks like a certification problem, isn't it?

We have already tried everything posted in the community or similar, so please don't answer with that kind of links like 'SOAP Messages' or SN Documentation. I don't want to sound rude but we need help from someone that has been in a similar situation!!! (or that knows how to solve it :))

We also tried using 'protocol profiles' in the SOAP Message Functions. Is there any way to force the SOAP Message to use the certificate? Like the WS- Security Type x.509. We tried this, but we don't know it was in the proper way...

Every help is welcome!! Thank you everyone.

Best regards,

Carlos

[Jeffrey DJ]

Is the Root CA installed in SN or the actual certificate.  Try to see the Root CA of the certificate of the web service you are connecting to is in you SN instance.