How to resolve PKIX path building failed/unable to find valid certification path to requested target issue?

Author: Abhishek Bathwal

While developing some application we might sometime come across below error which the maven throw while building the application:

[ERROR] Plugin or one of its dependencies could not be resolved: Failed to read artifact descriptor for Could not transfer artifact from/to mulesoft-releases ( PKIX path building failed: unable to find valid certification path to requested target -> [Help 1]

Reason: The error due to the system firewall. The system firewall restricts the application to connect to external unsecured systems. The firewall requires a valid certificate to allow access to the external systems.

Solution: The solution is very simple. We just need to install the required certificates of the external system in our system so the firewall allows us to interact with the external system and complete our process.

We are going to perform two activities:

  1. Download the Certificate.
  2. Install the Certificate.

To download the certificate, follow the below steps:

  1. Take the particular URL from the error and copy it to a browser (In the above error the url is
  1. Now to the left of the URL there is a lock icon (). Click on this icon and a window will pop up. From the window, select the certificate.
  1. Once we select the certificate, it will redirect to another window. From there we have to select the Details tab and from the Details click on Copy to File. After clicking again, a new window will pop up. In that window, select next.
  1. After we perform all the above steps, we will be redirected to a new window where we need to select the format for the certificate. We will have to choose DER encoded binary and click on Next.
  1. Now we need to choose a location where we need to save the certificate and we also need to give some name to the certificate.
  1. Once a File name is given and saved, then select Next. It will direct us to another window showing the details. If all the details are correct, click on Finish. A export Success pop up will appear.

Note: I saved the File name as repo.

So the downloading of certificates is done. Now the next process is to install the certificate in the cacerts file of the jdk installed in our system using the command line.

Installation of the certificate from Command line:

Command for installation: keytool -importcert -trustcacerts -alias <alias name for the certificate> -file <path were we have save the certificate> -keystore “<path for the cacerts file>” -storepass changeit

For me, the Command will be:

keytool -importcert -trustcacerts -alias repo -file C:\Users\DELL\Desktop\repo.cer -keystore “C:\Program Files\Java\jdk1.8.0_131\jre\lib\security\cacerts” -storepass changeit


  1. I am using jdk1.8.0_131 so the cacerts file path for my system is “C:\Program Files\Java\jdk1.8.0_131\jre\lib\security\cacerts”. It may defer for others based on your system and jdk version.
  2. I have given the alias name as repo and the path where I save my certificate is C:\Users\DELL\Desktop\repo.cer

To Install the certificate follow below steps:

  • Open Command Prompt as an Administrator. And Use the common for installation and press enter.
  • Once the command is executed it will ask for confirmation. Write Yes and the certificate will be installed with confirmation.

In the above process, we have downloaded and installed the certificate successfully in our system.

Now if we will execute the application it will not show certificate issues and will also download the required data from that particular system.

Thank you!

We use cookies on this site to enhance your user experience. For a complete overview of how we use cookies, please see our privacy policy.